Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9125475/C13116F228D311ED8FBD6D6CC4F9AE02/DFA79FA2EFD811EE87F4440AC4F9AE02.roa
File:                     DFA79FA2EFD811EE87F4440AC4F9AE02.roa (raw, json)
Hash identifier:          hQScYTUNqe8SfNNwSXoRwPKv/1EvvMjHkzfsNEe+pKg=
Subject key identifier:   94:AE:4D:1E:4A:CC:2B:D4:62:51:C6:00:EE:FF:2A:82:06:AA:58:E2
Certificate issuer:       /CN=A9125475/serialNumber=52FE2B6B7F497F94F1D492D1917B486478BF59D6
Certificate serial:       01EB
Authority key identifier: 52:FE:2B:6B:7F:49:7F:94:F1:D4:92:D1:91:7B:48:64:78:BF:59:D6
Authority info access:    rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/Uv4ra39Jf5Tx1JLRkXtIZHi_WdY.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9125475/C13116F228D311ED8FBD6D6CC4F9AE02/DFA79FA2EFD811EE87F4440AC4F9AE02.roa
Signing time:             Mon 02 Dec 2024 14:30:52 +0000
ROA not before:           Mon 02 Dec 2024 14:30:52 +0000
ROA not after:            Sat 31 Jan 2026 00:00:00 +0000
asID:                     9931
IP address blocks:        193.36.115.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9125475/C13116F228D311ED8FBD6D6CC4F9AE02/Uv4ra39Jf5Tx1JLRkXtIZHi_WdY.crl
                          rsync://rpki.apnic.net/member_repository/A9125475/C13116F228D311ED8FBD6D6CC4F9AE02/Uv4ra39Jf5Tx1JLRkXtIZHi_WdY.mft
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/Uv4ra39Jf5Tx1JLRkXtIZHi_WdY.cer
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 11 Apr 2025 14:20:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 491 (0x1eb)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9125475
        Validity
            Not Before: Dec  2 14:30:52 2024 GMT
            Not After : Jan 31 00:00:00 2026 GMT
        Subject: CN=674dc49c-89a2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:fd:f9:c4:e4:cc:e7:6f:05:2d:fd:71:18:7a:
                    59:5d:c7:a5:64:a9:14:b8:f7:c1:0e:f6:f7:21:bb:
                    98:f0:56:91:8e:6b:db:2c:fb:32:93:22:c1:35:41:
                    05:cf:62:e6:fa:db:fe:74:ed:62:85:53:07:9e:3e:
                    b5:6f:aa:5c:94:ac:03:da:85:f4:48:8b:56:65:41:
                    68:ba:9f:3b:d8:21:5e:79:04:ae:eb:a4:41:93:70:
                    96:d8:38:0c:85:7a:a9:58:28:73:ae:c3:e7:5d:4c:
                    bf:aa:77:88:dd:d3:e0:b7:40:61:d1:22:76:6f:8f:
                    2d:cf:a4:2e:62:ff:7d:ec:32:78:eb:de:fd:68:78:
                    43:d6:74:9b:15:bb:2a:a7:3d:1b:4e:e2:9a:bb:7d:
                    32:6e:76:19:d8:76:e6:a1:34:01:c5:93:71:a8:b1:
                    48:7b:ff:8a:43:73:66:a0:d4:67:4d:56:fb:52:20:
                    4b:1a:05:db:c6:59:eb:57:c3:50:e5:0a:b2:07:2f:
                    cb:a3:97:be:05:3e:3d:af:13:fb:cd:d2:29:bb:cc:
                    4d:5f:86:e7:be:3c:3f:29:aa:1c:b5:ba:9e:f1:84:
                    06:9e:b8:34:40:7c:d0:44:ee:c8:fc:fd:4a:e3:10:
                    7a:91:04:42:dd:f7:08:3e:dd:2e:cd:8b:2a:f1:5c:
                    a6:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                94:AE:4D:1E:4A:CC:2B:D4:62:51:C6:00:EE:FF:2A:82:06:AA:58:E2
            X509v3 Authority Key Identifier:
                keyid:52:FE:2B:6B:7F:49:7F:94:F1:D4:92:D1:91:7B:48:64:78:BF:59:D6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9125475/C13116F228D311ED8FBD6D6CC4F9AE02/Uv4ra39Jf5Tx1JLRkXtIZHi_WdY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/Uv4ra39Jf5Tx1JLRkXtIZHi_WdY.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9125475/C13116F228D311ED8FBD6D6CC4F9AE02/DFA79FA2EFD811EE87F4440AC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  193.36.115.0/24

    Signature Algorithm: sha256WithRSAEncryption
         6f:39:40:51:63:a0:7a:5d:6b:37:6f:4f:45:0d:01:57:44:ba:
         31:02:4c:2c:5b:7a:8d:d3:73:9b:83:ca:4a:aa:5c:69:d7:d7:
         7f:79:5e:42:4a:01:f5:54:a6:f9:40:4c:e6:13:cb:09:9c:4f:
         d5:90:b8:bf:09:5c:2b:dd:31:4d:16:e6:4b:85:cc:08:30:2b:
         e0:9a:6d:6e:15:87:e8:c7:77:70:23:a9:d4:6a:04:64:97:5b:
         b8:3b:dc:f8:0a:41:e5:c6:d9:21:ce:d8:82:70:5a:2c:4b:30:
         c3:68:98:42:94:62:8f:e1:1b:0a:b4:6f:e0:24:07:2d:eb:07:
         83:75:05:46:78:5d:cf:9a:37:26:25:82:f4:12:af:65:1c:5e:
         f0:14:64:ca:3e:3e:1d:59:63:34:0e:f8:0d:5b:52:f6:fe:78:
         0a:d9:0a:3f:cc:6b:a3:b2:34:80:76:fd:75:63:dc:ef:09:4b:
         12:57:e6:b4:ed:36:44:d4:70:fa:ff:b4:e0:ca:56:d6:e1:99:
         5e:8b:b5:40:49:9e:43:c8:73:ab:a2:da:b3:2b:d2:b7:d5:5d:
         df:64:98:89:e9:ae:77:60:3e:19:b6:9f:43:1b:7b:64:a5:5b:
         f7:d1:c8:83:e9:01:7b:fa:2a:16:25:5f:03:de:fa:c3:97:be:
         4f:25:56:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 08:15:29 2025 by rpki-client