Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91164D3/155048EA338911EF99FD1C27C4F9AE02/934F8250338A11EFB9C7A738C4F9AE02.roa
File:                     934F8250338A11EFB9C7A738C4F9AE02.roa (raw, json)
Hash identifier:          FWDEQfcrySfMIWIlPkoTcMajRo2lEM/ZyKql4949RJE=
Subject key identifier:   E1:8E:93:FC:9C:53:6E:BF:36:89:A0:15:FF:7A:17:86:EC:06:41:86
Certificate issuer:       /CN=A91164D3/serialNumber=996B196FCA3C721871EE9E1413932B8B50ED09AB
Certificate serial:       A6
Authority key identifier: 99:6B:19:6F:CA:3C:72:18:71:EE:9E:14:13:93:2B:8B:50:ED:09:AB
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mWsZb8o8chhx7p4UE5Mri1DtCas.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91164D3/155048EA338911EF99FD1C27C4F9AE02/934F8250338A11EFB9C7A738C4F9AE02.roa
Signing time:             Fri 09 May 2025 05:17:36 +0000
ROA not before:           Fri 09 May 2025 05:17:36 +0000
ROA not after:            Wed 01 Jul 2026 00:00:00 +0000
asID:                     152721
IP address blocks:        202.50.48.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91164D3/155048EA338911EF99FD1C27C4F9AE02/mWsZb8o8chhx7p4UE5Mri1DtCas.crl
                          rsync://rpki.apnic.net/member_repository/A91164D3/155048EA338911EF99FD1C27C4F9AE02/mWsZb8o8chhx7p4UE5Mri1DtCas.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mWsZb8o8chhx7p4UE5Mri1DtCas.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 16 Jun 2025 04:57:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 166 (0xa6)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91164D3, serialNumber=996B196FCA3C721871EE9E1413932B8B50ED09AB
        Validity
            Not Before: May  9 05:17:36 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=681d8ff0-db52
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:8a:d2:d6:45:50:27:82:af:1b:78:31:a6:b1:
                    e5:0f:bc:c2:7a:5f:09:f6:a6:77:8e:a5:51:eb:1e:
                    bb:a7:5b:24:66:eb:db:2b:f1:fb:15:11:72:73:70:
                    7f:03:8e:ad:28:3e:b6:41:76:71:21:71:6b:96:cf:
                    36:51:06:b7:47:b3:a1:7b:39:e9:80:66:d2:7d:15:
                    ba:a2:27:27:7e:11:21:fc:71:80:a9:d7:ca:5d:c7:
                    55:a5:06:bb:2e:9a:38:d2:ae:e8:be:d3:13:84:37:
                    10:5f:20:84:a6:ac:40:8a:18:32:a2:bd:dc:7e:be:
                    1f:a3:b6:98:61:d8:ca:03:6f:65:38:25:76:ab:df:
                    e5:43:03:82:a2:e5:b9:91:75:e8:a2:0a:5f:21:09:
                    41:47:47:69:7f:14:16:c5:bc:0d:20:77:a4:eb:93:
                    bb:2c:f9:77:d2:03:ae:07:02:47:0d:fc:16:36:30:
                    03:b7:5f:c4:42:24:e6:4b:b0:c1:7b:2f:70:bc:1f:
                    25:de:91:94:56:a6:4b:41:6a:28:45:ee:de:a2:ad:
                    23:a7:ae:0e:d1:e9:18:d2:cc:ab:56:3e:b2:aa:8e:
                    7b:61:7d:e3:a9:5e:e6:cf:7f:55:e6:a4:6e:5b:ae:
                    2d:e2:26:26:7d:40:89:60:f5:d8:85:54:47:09:50:
                    22:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E1:8E:93:FC:9C:53:6E:BF:36:89:A0:15:FF:7A:17:86:EC:06:41:86
            X509v3 Authority Key Identifier:
                keyid:99:6B:19:6F:CA:3C:72:18:71:EE:9E:14:13:93:2B:8B:50:ED:09:AB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91164D3/155048EA338911EF99FD1C27C4F9AE02/mWsZb8o8chhx7p4UE5Mri1DtCas.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mWsZb8o8chhx7p4UE5Mri1DtCas.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91164D3/155048EA338911EF99FD1C27C4F9AE02/934F8250338A11EFB9C7A738C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  202.50.48.0/24

    Signature Algorithm: sha256WithRSAEncryption
         a5:06:73:8a:4e:25:db:6d:57:57:56:39:f2:78:0d:fb:91:94:
         d8:c6:7e:00:ca:85:32:5b:f5:29:69:42:d0:97:f7:99:ac:4e:
         ba:d4:3c:fd:68:af:ed:8f:0e:86:83:8f:e4:1e:53:ea:97:a1:
         3f:f2:94:d6:54:0b:86:36:22:8c:f0:93:a5:79:ce:45:db:89:
         f7:9a:04:48:d8:59:f0:ce:02:2a:23:74:4f:48:fc:eb:f9:ab:
         11:25:02:49:5c:4f:1f:71:17:c4:e9:e5:d4:98:49:ad:53:18:
         4d:89:1e:2c:bb:32:4d:cc:3e:d4:92:0e:2d:aa:a7:81:19:73:
         f9:12:4e:2d:b4:9c:24:f3:3b:3e:eb:47:96:df:08:a7:5d:38:
         e9:3c:39:dd:b0:d7:f8:9e:83:e8:f4:95:4a:e9:fa:a1:02:53:
         87:6d:5d:70:a4:52:a0:24:09:e4:46:6d:0a:94:0c:95:ad:5c:
         b7:dd:cb:7b:a6:b7:0c:96:de:9f:c1:85:1c:89:51:af:f2:19:
         d6:ee:d3:60:28:61:e6:68:96:c6:5a:f3:22:64:d9:19:01:74:
         a6:e6:e9:f2:ea:b2:01:36:ae:6e:60:dc:0a:25:e0:50:0c:10:
         f7:d0:dd:ff:86:42:14:a0:4f:90:4b:4b:73:4e:a3:7f:e5:b8:
         58:f1:9c:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 9 16:17:53 2025 by rpki-client