Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91FB103/2FB9850893FB11EE968EE442C4F9AE02/0F440AB26E7711EFAA4A1C1AC4F9AE02.roa
File:                     0F440AB26E7711EFAA4A1C1AC4F9AE02.roa (raw, json)
Hash identifier:          O1np95hbIM7tMbwqTYjzC3DrWBrLxkB/hTITnk5MJww=
Subject key identifier:   D7:77:43:EF:E6:71:78:3F:8C:13:BE:53:84:FA:A2:7D:BD:57:63:19
Certificate issuer:       /CN=A91FB103/serialNumber=545C47C0E4313338DC9B4402C12BADCB4E9857C1
Certificate serial:       EA
Authority key identifier: 54:5C:47:C0:E4:31:33:38:DC:9B:44:02:C1:2B:AD:CB:4E:98:57:C1
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VFxHwOQxMzjcm0QCwSuty06YV8E.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91FB103/2FB9850893FB11EE968EE442C4F9AE02/0F440AB26E7711EFAA4A1C1AC4F9AE02.roa
Signing time:             Wed 29 Jan 2025 04:17:39 +0000
ROA not before:           Wed 29 Jan 2025 04:17:39 +0000
ROA not after:            Mon 02 Mar 2026 00:00:00 +0000
asID:                     152138
IP address blocks:        210.87.68.0/24 maxlen: 24
                          2001:df3:3dc0::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91FB103/2FB9850893FB11EE968EE442C4F9AE02/VFxHwOQxMzjcm0QCwSuty06YV8E.crl
                          rsync://rpki.apnic.net/member_repository/A91FB103/2FB9850893FB11EE968EE442C4F9AE02/VFxHwOQxMzjcm0QCwSuty06YV8E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VFxHwOQxMzjcm0QCwSuty06YV8E.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 12 Apr 2025 04:31:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 234 (0xea)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91FB103
        Validity
            Not Before: Jan 29 04:17:39 2025 GMT
            Not After : Mar  2 00:00:00 2026 GMT
        Subject: CN=6799abe3-2a71
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e6:72:6d:69:02:94:97:06:2a:72:b8:b3:3e:12:
                    3f:7b:d0:b3:5b:6d:12:af:89:ac:b6:7d:5e:7b:81:
                    de:e7:d5:e5:19:01:60:64:1f:17:73:c6:8b:20:5a:
                    e1:eb:29:2d:04:52:45:33:9e:35:fb:03:3d:8e:0c:
                    31:c8:34:47:0b:16:3a:a8:24:4d:f7:44:c0:9b:94:
                    ff:c6:5c:ed:79:6e:f7:d8:4e:48:b2:95:72:c9:f0:
                    22:46:95:b4:55:8e:89:af:35:6c:53:f0:ea:26:c4:
                    ba:cc:4c:36:17:f9:1f:11:d4:0d:13:97:bb:58:79:
                    b5:5f:b8:48:73:a9:56:87:0f:b9:66:72:56:9d:03:
                    af:5b:31:5b:f7:22:76:ec:f1:c4:9f:c2:12:a5:64:
                    fb:57:4b:17:5e:32:61:0c:b1:76:02:64:56:04:50:
                    8e:50:32:c8:43:b0:4b:b6:87:a6:50:51:67:da:ee:
                    c1:32:e6:2f:3e:88:da:96:b5:b9:29:68:b9:52:1f:
                    75:9b:e0:b9:db:35:8b:1c:5e:3f:9e:3a:d3:43:da:
                    2e:e5:a8:01:2e:d8:05:13:51:c8:84:e0:fd:8a:5d:
                    9b:74:5d:a1:7d:6b:01:a0:83:e4:c4:29:c2:f9:5a:
                    b2:ef:6f:07:5d:6d:f2:b6:2d:c7:35:dd:31:4f:90:
                    1d:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D7:77:43:EF:E6:71:78:3F:8C:13:BE:53:84:FA:A2:7D:BD:57:63:19
            X509v3 Authority Key Identifier:
                keyid:54:5C:47:C0:E4:31:33:38:DC:9B:44:02:C1:2B:AD:CB:4E:98:57:C1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91FB103/2FB9850893FB11EE968EE442C4F9AE02/VFxHwOQxMzjcm0QCwSuty06YV8E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VFxHwOQxMzjcm0QCwSuty06YV8E.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FB103/2FB9850893FB11EE968EE442C4F9AE02/0F440AB26E7711EFAA4A1C1AC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  210.87.68.0/24
                IPv6:
                  2001:df3:3dc0::/48

    Signature Algorithm: sha256WithRSAEncryption
         56:4e:a5:86:7f:85:a5:63:67:00:70:78:25:3d:58:bf:f0:42:
         74:ca:86:ee:0c:4c:13:7a:c4:08:c8:b3:76:69:96:a5:7b:7a:
         47:1c:2b:d6:1c:6c:03:ec:0c:5e:46:d1:2b:38:07:4b:f5:48:
         65:b7:ee:9c:48:5c:bd:b0:5d:ec:c0:04:3d:2c:83:84:db:cc:
         15:b5:ea:e6:2a:1b:37:9c:9d:7a:e2:3e:2a:f6:03:bd:26:36:
         4f:ea:85:4f:da:d5:bf:2b:5a:4a:38:3a:ce:b7:6d:4f:31:90:
         40:3f:75:6b:26:95:ff:c3:ad:b8:b1:47:3a:60:c9:1e:79:ec:
         02:74:a2:60:23:e2:f6:64:18:2d:4e:f1:4b:23:57:69:74:80:
         90:7e:52:38:ad:18:eb:31:e0:af:7e:2e:bb:66:9f:5e:18:ab:
         fe:2f:3f:c8:7e:10:5a:ec:ec:87:93:9d:02:6e:76:1b:60:fa:
         cf:f6:f4:cc:bf:c5:f1:55:5e:ee:d2:d7:6c:3d:8f:c8:83:c2:
         bb:c5:69:f6:27:b7:07:2a:5f:ec:ad:0f:7a:58:20:16:b8:40:
         b8:f0:30:b0:0c:ff:ff:a6:88:8b:fc:92:48:8f:10:4b:eb:b0:
         6d:1f:5b:6f:b3:67:20:35:5e:bc:07:e0:df:4d:03:63:65:98:
         79:c4:01:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 07:21:11 2025 by rpki-client