Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91F59A6/E4EDAC18CB1A11EA87CD5544C4F9AE02/18B1B5361CE611EBB543881CC4F9AE02.roa
File:                     18B1B5361CE611EBB543881CC4F9AE02.roa (raw, json)
Hash identifier:          qnuam7WR9nNoSALeN6aIELormJYa9PcytIxvW+OP1aE=
Subject key identifier:   CD:5C:EC:B3:71:0D:7F:21:B3:A5:84:9A:46:E0:56:32:A4:0B:BB:71
Certificate issuer:       /CN=A91F59A6/serialNumber=E25FCD9B7725853942791A62D475ECFED7C03F64
Certificate serial:       081F
Authority key identifier: E2:5F:CD:9B:77:25:85:39:42:79:1A:62:D4:75:EC:FE:D7:C0:3F:64
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/4l_Nm3clhTlCeRpi1HXs_tfAP2Q.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91F59A6/E4EDAC18CB1A11EA87CD5544C4F9AE02/18B1B5361CE611EBB543881CC4F9AE02.roa
Signing time:             Sat 14 Dec 2024 18:07:14 +0000
ROA not before:           Sat 14 Dec 2024 18:07:14 +0000
ROA not after:            Mon 02 Mar 2026 00:00:00 +0000
asID:                     31665
IP address blocks:        206.209.79.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91F59A6/E4EDAC18CB1A11EA87CD5544C4F9AE02/4l_Nm3clhTlCeRpi1HXs_tfAP2Q.crl
                          rsync://rpki.apnic.net/member_repository/A91F59A6/E4EDAC18CB1A11EA87CD5544C4F9AE02/4l_Nm3clhTlCeRpi1HXs_tfAP2Q.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/4l_Nm3clhTlCeRpi1HXs_tfAP2Q.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 11 Apr 2025 18:15:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2079 (0x81f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91F59A6
        Validity
            Not Before: Dec 14 18:07:14 2024 GMT
            Not After : Mar  2 00:00:00 2026 GMT
        Subject: CN=675dc952-8e0a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:b1:3a:3e:48:86:f2:94:a6:2e:5f:2d:66:3a:
                    96:0a:9d:2d:bc:5e:8d:d1:33:11:c8:76:69:7b:7b:
                    8e:03:52:a8:55:b9:20:ef:cb:50:93:a4:bf:55:b0:
                    3a:8f:5a:dd:02:71:00:e0:a0:20:e8:d6:ae:48:0a:
                    25:f1:a0:2c:5f:b0:8e:c1:ce:e1:70:e2:2d:66:86:
                    2b:ab:93:27:38:22:84:85:b8:05:00:48:19:01:43:
                    27:8a:0e:60:e9:14:12:83:c0:c2:39:11:a4:26:68:
                    fa:80:f6:a7:cc:34:c0:26:dc:93:5b:d3:7c:7e:51:
                    90:b5:2d:22:ed:bb:6c:0d:9f:b3:dc:31:68:86:04:
                    82:f8:e2:10:22:bf:40:44:0f:67:13:5a:e8:86:b5:
                    44:53:10:4d:19:78:02:6e:8d:9b:92:a9:ae:14:cb:
                    23:64:b2:db:26:d5:ab:35:7d:ed:b4:06:be:ae:04:
                    74:57:fb:e0:da:9d:59:d1:2a:8a:4c:b6:49:eb:7e:
                    a2:53:21:3b:6e:d1:fe:27:39:1d:31:cb:fb:04:bd:
                    75:ea:dd:9e:ea:f9:b1:8e:da:6c:c1:7e:47:07:30:
                    70:9b:45:76:72:9c:99:c7:4e:59:09:9c:8c:79:f1:
                    e9:85:19:a1:76:5f:dd:04:c9:da:5d:6b:1c:5a:2b:
                    a3:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CD:5C:EC:B3:71:0D:7F:21:B3:A5:84:9A:46:E0:56:32:A4:0B:BB:71
            X509v3 Authority Key Identifier:
                keyid:E2:5F:CD:9B:77:25:85:39:42:79:1A:62:D4:75:EC:FE:D7:C0:3F:64

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91F59A6/E4EDAC18CB1A11EA87CD5544C4F9AE02/4l_Nm3clhTlCeRpi1HXs_tfAP2Q.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/4l_Nm3clhTlCeRpi1HXs_tfAP2Q.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F59A6/E4EDAC18CB1A11EA87CD5544C4F9AE02/18B1B5361CE611EBB543881CC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  206.209.79.0/24

    Signature Algorithm: sha256WithRSAEncryption
         61:c3:64:03:e2:e1:86:86:55:da:bf:01:a4:de:25:07:ef:d1:
         5f:f1:b9:10:a1:da:75:c1:97:16:95:17:4c:36:61:ba:fa:3f:
         76:02:a6:33:39:d0:58:84:66:56:db:38:90:ab:de:44:0a:3f:
         c0:8b:88:6b:59:b3:5a:fa:62:40:65:61:1f:c8:0d:31:1f:18:
         f5:cb:cb:a5:56:79:39:a2:c3:0f:01:2f:97:43:36:40:40:5f:
         74:06:b3:50:63:d2:cc:b6:4d:ad:84:37:c3:2f:2a:1d:42:47:
         42:a5:ab:3f:6b:e4:34:67:f7:3b:bc:7d:94:02:55:8c:30:80:
         dd:97:d6:69:85:76:8e:af:97:6e:a8:b9:b0:c8:cf:96:e6:d9:
         b9:d8:2d:56:88:47:05:33:3c:84:81:22:76:02:08:4b:35:6d:
         f6:89:b9:d3:aa:cb:27:c7:a0:dc:ba:33:b7:07:d9:3f:28:de:
         e9:14:f5:bf:5d:ae:d1:b6:78:28:15:c9:03:0a:c1:67:5c:c7:
         81:e4:53:39:0b:11:cc:95:e2:29:5a:c8:54:48:85:9c:88:96:
         c2:c4:ed:a3:6b:f7:4e:08:64:e2:fc:b8:c5:be:31:65:02:a2:
         99:55:80:f9:6f:bc:6b:13:37:d5:8c:56:32:de:f1:2f:30:8b:
         c9:0d:2b:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 16:17:24 2025 by rpki-client