Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A911691A/751F31DAA28511EF842B9410C4F9AE02/ED46632AC75311EFAA7A9E0BC4F9AE02.roa
File:                     ED46632AC75311EFAA7A9E0BC4F9AE02.roa (raw, json)
Hash identifier:          BSkyIsVjsqkIP2UcdowW92UsoE0+ROg3QmqK9i77vAQ=
Subject key identifier:   3F:7B:37:43:64:B3:5B:55:B3:62:FA:9F:99:6F:F1:98:72:E1:A7:64
Certificate issuer:       /CN=A911691A/serialNumber=74CB85A6349C3CA6184AECF70F83AFFDFCE0A7F7
Certificate serial:       28
Authority key identifier: 74:CB:85:A6:34:9C:3C:A6:18:4A:EC:F7:0F:83:AF:FD:FC:E0:A7:F7
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dMuFpjScPKYYSuz3D4Ov_fzgp_c.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A911691A/751F31DAA28511EF842B9410C4F9AE02/ED46632AC75311EFAA7A9E0BC4F9AE02.roa
Signing time:             Tue 31 Dec 2024 08:48:16 +0000
ROA not before:           Tue 31 Dec 2024 08:48:16 +0000
ROA not after:            Mon 02 Mar 2026 00:00:00 +0000
asID:                     153453
IP address blocks:        160.250.10.0/24 maxlen: 24
                          160.250.11.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A911691A/751F31DAA28511EF842B9410C4F9AE02/dMuFpjScPKYYSuz3D4Ov_fzgp_c.crl
                          rsync://rpki.apnic.net/member_repository/A911691A/751F31DAA28511EF842B9410C4F9AE02/dMuFpjScPKYYSuz3D4Ov_fzgp_c.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dMuFpjScPKYYSuz3D4Ov_fzgp_c.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 26 Feb 2025 09:18:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 40 (0x28)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A911691A
        Validity
            Not Before: Dec 31 08:48:16 2024 GMT
            Not After : Mar  2 00:00:00 2026 GMT
        Subject: CN=6773afd0-3d9b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:53:96:31:26:3e:41:2f:c9:fe:39:35:b2:88:
                    28:86:43:a0:59:c6:32:64:d8:6c:1c:dc:17:67:e6:
                    a9:1a:ac:4a:53:d4:1d:6f:55:76:78:42:c5:16:a4:
                    ef:c7:b4:0a:06:c2:ff:0d:46:7e:d7:de:e6:58:82:
                    7d:b6:fa:2c:35:f7:0a:8b:87:e0:30:25:73:5a:17:
                    03:2f:59:78:e6:b8:29:4b:0a:0e:3e:02:17:2d:c0:
                    ad:91:0c:1e:d7:dd:64:82:bc:e7:71:20:50:1a:e2:
                    2d:e6:81:b9:cb:bd:f0:dc:c3:d3:68:67:17:ef:be:
                    92:7d:12:66:4a:18:23:19:d2:ed:20:4f:fe:81:9a:
                    5f:d8:11:b6:73:cc:49:7e:9a:78:a1:7c:35:d1:65:
                    0d:2b:06:7c:fc:0d:b6:fa:39:82:be:9f:e8:42:61:
                    cc:f9:8c:f7:36:9d:d5:17:25:ac:66:ae:95:e3:a6:
                    aa:08:82:c2:09:47:d2:14:96:97:f1:95:4c:56:16:
                    55:e0:76:78:f9:5f:e5:7a:51:1d:d6:f4:b0:d2:eb:
                    6a:ab:13:16:f3:83:45:b1:ab:e1:65:59:61:95:08:
                    26:7d:d4:1b:88:ed:9b:61:f0:f4:90:0c:c7:70:d5:
                    83:a7:f3:fb:14:16:7e:1a:78:17:8f:e0:a3:84:d4:
                    a1:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3F:7B:37:43:64:B3:5B:55:B3:62:FA:9F:99:6F:F1:98:72:E1:A7:64
            X509v3 Authority Key Identifier:
                keyid:74:CB:85:A6:34:9C:3C:A6:18:4A:EC:F7:0F:83:AF:FD:FC:E0:A7:F7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A911691A/751F31DAA28511EF842B9410C4F9AE02/dMuFpjScPKYYSuz3D4Ov_fzgp_c.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dMuFpjScPKYYSuz3D4Ov_fzgp_c.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911691A/751F31DAA28511EF842B9410C4F9AE02/ED46632AC75311EFAA7A9E0BC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  160.250.10.0/23

    Signature Algorithm: sha256WithRSAEncryption
         33:25:b6:0e:04:64:e4:57:86:18:21:57:f6:8a:f4:6b:7c:5c:
         5f:7e:ed:e6:32:ac:30:1f:bf:96:b7:cd:d2:24:8b:66:0f:9f:
         50:dc:92:ce:e0:45:50:86:7b:87:85:13:55:09:a8:3c:fa:10:
         47:e8:2b:97:a5:ee:cb:70:c7:93:0e:01:8f:e0:f6:88:e7:ab:
         6c:20:2e:86:f1:7f:23:a4:7c:37:03:90:12:22:7a:fb:54:04:
         70:cb:02:d1:d5:d9:e8:b9:fc:ff:07:e9:e7:8e:f0:9d:30:09:
         46:01:92:7e:92:cd:d3:50:e6:ba:fd:37:f4:06:0b:4f:ab:b3:
         3a:1a:d2:54:3a:9d:a4:f9:27:c0:0d:dd:49:a9:95:09:fe:1d:
         99:46:15:c6:fd:93:2a:0f:3b:fc:67:f1:2c:95:b3:bc:89:11:
         42:b9:c5:f0:ec:2a:e5:06:7c:f6:7b:d6:f4:e1:37:4f:2f:67:
         8c:95:a5:01:33:82:d5:b5:12:19:32:3a:f3:aa:bc:a2:73:4f:
         8e:7d:90:8f:6b:f4:bd:df:71:bc:1e:fb:7d:6b:7f:fe:dc:01:
         22:2b:43:49:bf:f5:23:5a:8a:da:70:fc:00:c4:fd:ec:1f:f9:
         0c:e0:7b:cb:eb:77:00:80:84:95:0d:6a:1e:27:30:0e:6c:85:
         90:5c:a4:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:11:16 2025 by rpki-client