Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91FB297/9A890E6EB5E111EEA0A6176DC4F9AE02/FE9EA8D4B67A11EEB24FA643C4F9AE02.roa
File:                     FE9EA8D4B67A11EEB24FA643C4F9AE02.roa (raw, json)
Hash identifier:          +xX3fyh3F9druR4nFxovnFPsJhxpAOsF0rFF0c+Rr5E=
Subject key identifier:   F8:3B:72:E3:4E:2C:5A:C8:B2:49:3D:1A:43:DB:17:11:C5:13:D3:72
Certificate issuer:       /CN=A91FB297/serialNumber=C542BDE0B8347C379DE1DE1D8243A92CB94C874D
Certificate serial:       BA
Authority key identifier: C5:42:BD:E0:B8:34:7C:37:9D:E1:DE:1D:82:43:A9:2C:B9:4C:87:4D
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xUK94Lg0fDed4d4dgkOpLLlMh00.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91FB297/9A890E6EB5E111EEA0A6176DC4F9AE02/FE9EA8D4B67A11EEB24FA643C4F9AE02.roa
Signing time:             Tue 07 Jan 2025 04:48:44 +0000
ROA not before:           Tue 07 Jan 2025 04:48:44 +0000
ROA not after:            Mon 02 Mar 2026 00:00:00 +0000
asID:                     152153
IP address blocks:        113.192.49.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91FB297/9A890E6EB5E111EEA0A6176DC4F9AE02/xUK94Lg0fDed4d4dgkOpLLlMh00.crl
                          rsync://rpki.apnic.net/member_repository/A91FB297/9A890E6EB5E111EEA0A6176DC4F9AE02/xUK94Lg0fDed4d4dgkOpLLlMh00.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xUK94Lg0fDed4d4dgkOpLLlMh00.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 10 Apr 2025 04:39:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 186 (0xba)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91FB297
        Validity
            Not Before: Jan  7 04:48:44 2025 GMT
            Not After : Mar  2 00:00:00 2026 GMT
        Subject: CN=677cb22c-e3d3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:61:35:93:f3:b0:43:45:c4:ea:83:82:83:c1:
                    2f:71:4e:35:51:4a:5e:6b:aa:aa:07:79:a8:38:18:
                    35:43:1a:81:4c:19:df:e5:a8:a7:91:7f:23:f7:c6:
                    24:a1:e5:a9:4d:91:e3:2c:11:81:fb:b9:f5:50:bf:
                    1d:9d:8d:cd:43:25:89:cc:4e:e0:a5:33:38:25:09:
                    73:8c:8a:a9:03:35:6c:24:7f:c7:d0:85:11:4b:99:
                    a9:18:ca:d1:6b:51:aa:52:34:c6:30:12:3d:67:24:
                    bf:a4:3c:88:ad:66:c6:0d:60:ce:32:de:25:74:9c:
                    23:b9:55:82:d9:cc:42:73:a4:96:b9:54:0a:00:57:
                    66:42:47:4e:bc:c0:eb:e0:17:96:94:e3:8a:73:aa:
                    87:0e:76:15:3e:6a:45:db:ec:48:a0:6b:7a:b9:68:
                    68:fd:ca:4a:ee:fa:ed:7b:db:4d:b9:38:35:95:f2:
                    88:1b:9b:42:8d:97:77:7d:79:4d:0a:ff:04:e9:35:
                    5a:ac:8c:9c:85:99:a9:96:a4:43:99:1a:97:79:64:
                    e8:01:f3:76:5c:c8:f3:15:5c:e2:34:0d:42:34:b1:
                    3e:7e:c1:81:ac:22:61:25:37:d6:ba:42:56:e9:d0:
                    fb:49:54:9f:d1:3e:f3:f8:1d:fc:00:d8:41:15:32:
                    a8:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F8:3B:72:E3:4E:2C:5A:C8:B2:49:3D:1A:43:DB:17:11:C5:13:D3:72
            X509v3 Authority Key Identifier:
                keyid:C5:42:BD:E0:B8:34:7C:37:9D:E1:DE:1D:82:43:A9:2C:B9:4C:87:4D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91FB297/9A890E6EB5E111EEA0A6176DC4F9AE02/xUK94Lg0fDed4d4dgkOpLLlMh00.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xUK94Lg0fDed4d4dgkOpLLlMh00.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FB297/9A890E6EB5E111EEA0A6176DC4F9AE02/FE9EA8D4B67A11EEB24FA643C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  113.192.49.0/24

    Signature Algorithm: sha256WithRSAEncryption
         58:ed:e7:04:ae:dc:99:c9:91:25:42:d9:89:d2:4d:cc:c4:1c:
         02:ac:70:08:07:8a:43:92:72:78:b6:aa:6e:3c:dc:52:dd:90:
         d0:73:9f:e9:c7:fc:41:a0:73:2b:ee:68:1c:4d:40:5b:13:87:
         98:6d:ee:22:2e:d2:0a:5c:43:01:8a:66:ea:3f:fa:e8:44:1d:
         3a:f4:29:83:a4:94:61:b1:95:c0:19:72:40:6b:9f:39:d4:74:
         85:b6:0c:b8:c7:ef:00:45:e6:5e:55:8c:5f:c5:79:1d:de:6f:
         ba:86:30:21:97:86:fb:7d:59:d8:93:1e:a7:7f:29:a4:c2:f0:
         5a:93:92:68:63:ce:bf:1a:f1:42:4b:96:f2:e9:62:3a:2f:f3:
         28:82:d0:44:5f:10:b2:d7:80:4d:94:b7:63:8c:b6:0f:9d:59:
         09:33:34:f3:91:6c:6b:4b:4c:a4:62:e6:a4:8d:05:84:96:0b:
         01:c6:75:67:96:59:7f:ad:7e:2d:bf:76:1a:eb:3e:5f:0b:01:
         b1:d2:28:28:3c:fe:97:57:9f:15:49:01:6b:8e:57:90:60:34:
         bf:b4:e7:6a:ae:09:1a:87:a1:dc:90:66:33:70:33:73:57:59:
         75:b6:11:3c:6d:a2:97:c1:98:4e:5c:29:e6:ff:61:ee:72:ab:
         78:71:9a:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 23:43:05 2025 by rpki-client