Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91F34BF/4F033D849CF511EE9E4C331FC4F9AE02/13310E94FCD011EF8F21DE62C4F9AE02.roa
File:                     13310E94FCD011EF8F21DE62C4F9AE02.roa (raw, json)
Hash identifier:          pCYjff74rDvqaSSHh6b2YJXJxIU8kNQvxw7uQ6aFFQ8=
Subject key identifier:   0C:B2:31:63:B6:BC:3E:FF:2A:DF:5F:01:88:9A:2D:03:0A:96:47:38
Certificate issuer:       /CN=A91F34BF/serialNumber=73BDB2A02BCBEC3C9000F65F705C96E8080E9730
Certificate serial:       EE
Authority key identifier: 73:BD:B2:A0:2B:CB:EC:3C:90:00:F6:5F:70:5C:96:E8:08:0E:97:30
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/c72yoCvL7DyQAPZfcFyW6AgOlzA.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91F34BF/4F033D849CF511EE9E4C331FC4F9AE02/13310E94FCD011EF8F21DE62C4F9AE02.roa
Signing time:             Sun 09 Mar 2025 10:20:08 +0000
ROA not before:           Sun 09 Mar 2025 10:20:08 +0000
ROA not after:            Sat 31 Jan 2026 00:00:00 +0000
asID:                     152163
IP address blocks:        36.50.116.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91F34BF/4F033D849CF511EE9E4C331FC4F9AE02/c72yoCvL7DyQAPZfcFyW6AgOlzA.crl
                          rsync://rpki.apnic.net/member_repository/A91F34BF/4F033D849CF511EE9E4C331FC4F9AE02/c72yoCvL7DyQAPZfcFyW6AgOlzA.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/c72yoCvL7DyQAPZfcFyW6AgOlzA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 12 Apr 2025 04:35:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 238 (0xee)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91F34BF
        Validity
            Not Before: Mar  9 10:20:08 2025 GMT
            Not After : Jan 31 00:00:00 2026 GMT
        Subject: CN=67cd6b57-ab3a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:10:96:68:16:c0:80:67:96:1a:fd:a3:b0:4f:
                    5a:49:92:1f:73:9b:2e:bf:16:5e:4f:77:57:90:db:
                    9d:b7:bb:86:f5:be:16:58:55:f5:a3:3e:0a:44:dc:
                    97:ca:dc:02:85:56:c4:a4:be:90:94:16:32:68:24:
                    e3:f5:8e:24:97:31:45:fd:1c:49:43:13:9e:07:04:
                    82:97:c8:98:0d:9c:7b:07:3d:6b:8e:6b:b0:f3:73:
                    0f:77:00:bd:33:e6:ac:07:6c:d1:fe:63:06:5f:df:
                    8c:74:3c:a5:d7:85:d2:31:b8:a1:f3:50:f9:f8:dd:
                    2e:12:ce:cc:fc:18:ed:9b:40:54:5c:db:b7:0d:77:
                    60:0f:aa:cc:cc:6c:25:d3:58:7b:0a:f3:a6:80:a2:
                    b9:3a:f2:85:b4:63:4f:cd:23:62:37:fb:ec:cd:16:
                    ed:d7:5f:d7:0d:c5:98:ba:af:9f:54:4d:a9:53:06:
                    5c:cc:e0:f4:aa:45:f8:56:9c:2c:ab:03:a6:a4:1c:
                    48:2a:09:ff:16:32:5e:75:d9:e3:a8:b6:6b:88:a0:
                    fe:ac:8a:dc:a7:6b:9f:42:6a:11:02:07:54:5c:e6:
                    15:4e:f2:17:8b:26:b3:8c:ed:32:b6:a3:0f:42:69:
                    5f:d7:6c:c2:11:27:b8:c9:a3:e2:73:89:31:88:8d:
                    b0:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0C:B2:31:63:B6:BC:3E:FF:2A:DF:5F:01:88:9A:2D:03:0A:96:47:38
            X509v3 Authority Key Identifier:
                keyid:73:BD:B2:A0:2B:CB:EC:3C:90:00:F6:5F:70:5C:96:E8:08:0E:97:30

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91F34BF/4F033D849CF511EE9E4C331FC4F9AE02/c72yoCvL7DyQAPZfcFyW6AgOlzA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/c72yoCvL7DyQAPZfcFyW6AgOlzA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F34BF/4F033D849CF511EE9E4C331FC4F9AE02/13310E94FCD011EF8F21DE62C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  36.50.116.0/24

    Signature Algorithm: sha256WithRSAEncryption
         51:8b:b7:a2:5d:a3:ad:67:02:60:6f:7d:e4:3d:26:85:6a:c4:
         4c:4b:99:c4:b8:29:6a:74:b9:f7:ca:44:32:44:12:13:8e:75:
         7a:2b:0b:11:10:d2:00:a9:46:d8:23:fc:a8:8f:34:79:c8:62:
         0b:3c:89:8e:e2:83:9e:e9:2b:33:8e:80:67:7f:fe:9a:eb:73:
         0e:f0:6e:79:ba:3f:11:a3:22:0d:1a:5a:56:38:e5:d0:81:77:
         30:ab:00:bd:6a:52:91:58:db:7c:27:cf:6a:f3:e5:9f:1e:10:
         6f:26:3e:86:56:98:67:59:13:99:73:46:a4:b1:e6:da:ed:62:
         1e:c6:fd:7b:79:bb:1f:82:12:aa:08:62:eb:e5:c5:b4:d8:35:
         e3:15:f9:51:73:02:d8:51:ed:fa:d3:42:c3:41:64:03:16:fa:
         20:18:30:6e:7c:e9:68:06:32:dd:6c:40:fd:cb:79:d5:eb:bf:
         00:b2:a1:cb:a9:43:7e:63:e7:76:13:60:e8:2e:bd:d1:05:b8:
         8e:61:07:fd:2a:c8:f3:de:81:4c:c1:fb:73:68:40:ce:1e:c3:
         01:46:91:6d:d1:ed:58:fd:2d:57:ca:da:23:18:95:57:9f:f3:
         88:0b:59:f8:f2:79:63:0e:0b:86:32:d3:df:83:ac:96:5b:d3:
         37:a1:02:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 06:48:55 2025 by rpki-client