Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A912C8AF/EE0AEECA3E8111EB9ABD920FC4F9AE02/510308503E8211EBA910FF57C4F9AE02.roa
File:                     510308503E8211EBA910FF57C4F9AE02.roa (raw, json)
Hash identifier:          PjHH406K/ka7XNZ7a0h9GqbdKh0e4+H0cJO6YTJYTgA=
Subject key identifier:   55:61:B4:18:C0:1E:EC:8E:8B:50:5B:62:F4:91:FC:ED:85:CB:1E:7A
Certificate issuer:       /CN=A912C8AF/serialNumber=424E0A3843F3FA1F44B6AF2EF3EE11815C4B5209
Certificate serial:       070B
Authority key identifier: 42:4E:0A:38:43:F3:FA:1F:44:B6:AF:2E:F3:EE:11:81:5C:4B:52:09
Authority info access:    rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/Qk4KOEPz-h9Etq8u8-4RgVxLUgk.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A912C8AF/EE0AEECA3E8111EB9ABD920FC4F9AE02/510308503E8211EBA910FF57C4F9AE02.roa
Signing time:             Wed 02 Apr 2025 19:50:36 +0000
ROA not before:           Wed 02 Apr 2025 19:50:36 +0000
ROA not after:            Wed 01 Jul 2026 00:00:00 +0000
asID:                     138915
IP address blocks:        194.26.72.0/24 maxlen: 24
                          194.26.73.0/24 maxlen: 24
                          194.26.74.0/24 maxlen: 24
                          194.26.75.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A912C8AF/EE0AEECA3E8111EB9ABD920FC4F9AE02/Qk4KOEPz-h9Etq8u8-4RgVxLUgk.crl
                          rsync://rpki.apnic.net/member_repository/A912C8AF/EE0AEECA3E8111EB9ABD920FC4F9AE02/Qk4KOEPz-h9Etq8u8-4RgVxLUgk.mft
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/Qk4KOEPz-h9Etq8u8-4RgVxLUgk.cer
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 17 Apr 2025 19:37:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1803 (0x70b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A912C8AF
        Validity
            Not Before: Apr  2 19:50:36 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=67ed950c-dddb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:7b:11:e1:3e:3f:31:39:bc:07:fe:62:75:b7:
                    a5:81:5a:44:fe:ec:a1:3a:54:c5:13:9e:08:36:4c:
                    a3:bb:85:bc:c4:11:74:5a:27:30:65:cc:9e:2b:9c:
                    51:be:b8:5b:39:1f:b2:c1:7e:b6:76:f5:7b:25:7e:
                    4e:55:c7:0c:53:d5:45:09:07:96:2d:cf:ed:0f:c6:
                    ed:2b:e0:a6:b1:29:f6:f7:69:63:89:6d:1c:e0:a8:
                    87:ee:f3:2c:ea:9e:b4:4f:c3:82:c9:16:c2:7d:ad:
                    0b:d8:1e:83:97:7f:91:9d:bf:ad:66:72:b6:f9:ad:
                    74:74:7a:dc:7b:ef:ca:37:31:1e:45:4e:41:f3:39:
                    01:87:0a:c0:9f:57:7f:35:02:79:02:78:47:ba:5b:
                    bd:a4:02:a0:76:bb:e0:d8:18:fd:ec:30:12:36:22:
                    14:60:db:df:25:7a:5f:44:1b:1b:68:3c:e3:86:ce:
                    01:39:5d:4a:32:dc:12:94:1f:8e:40:ab:c4:30:db:
                    1e:f7:22:77:25:f7:6c:59:a2:fa:9a:ca:4f:7e:12:
                    5d:e0:71:bf:5c:92:a5:f8:83:7d:d6:e5:b3:3d:3d:
                    b6:2e:f7:b4:87:e7:f5:51:e2:ca:be:d8:a3:34:e9:
                    33:de:00:a3:6e:60:19:cf:2d:e0:38:1f:2a:02:e5:
                    e4:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                55:61:B4:18:C0:1E:EC:8E:8B:50:5B:62:F4:91:FC:ED:85:CB:1E:7A
            X509v3 Authority Key Identifier:
                keyid:42:4E:0A:38:43:F3:FA:1F:44:B6:AF:2E:F3:EE:11:81:5C:4B:52:09

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A912C8AF/EE0AEECA3E8111EB9ABD920FC4F9AE02/Qk4KOEPz-h9Etq8u8-4RgVxLUgk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/Qk4KOEPz-h9Etq8u8-4RgVxLUgk.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912C8AF/EE0AEECA3E8111EB9ABD920FC4F9AE02/510308503E8211EBA910FF57C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  194.26.72.0/22

    Signature Algorithm: sha256WithRSAEncryption
         5f:25:e6:74:44:39:a5:0d:5b:ed:2a:ee:aa:97:9c:4a:1c:be:
         fe:0e:0e:20:09:bf:a7:77:fc:70:da:3c:97:ab:dd:f7:13:f5:
         0f:b5:05:ef:a1:fd:af:8b:2b:d7:c9:c9:7a:18:cf:3a:5f:fd:
         87:64:f5:e2:e1:49:00:d5:ab:3a:fe:62:d2:c7:dc:d6:eb:fb:
         ee:cc:97:da:33:a2:4f:5f:65:d2:d0:02:07:e0:59:68:b9:2f:
         29:e0:c8:91:54:2a:1b:f7:04:38:e1:71:e0:46:6c:2c:a3:ae:
         0d:86:3d:e7:d8:22:7b:f5:b6:79:56:9e:25:74:ff:05:78:c7:
         71:13:31:0f:a9:f6:7d:e9:09:ff:e8:58:0e:04:1f:2b:7b:c4:
         db:22:f1:c2:bc:ff:5f:8d:26:62:dc:5b:36:fe:41:8f:9d:f8:
         96:a2:77:8b:7c:e8:68:e8:0c:4e:2b:b3:fd:dd:6a:90:31:74:
         40:cf:94:13:a8:1b:5f:8f:f0:47:69:9f:cd:7e:a9:47:14:8f:
         95:83:fc:05:ba:a0:3e:09:fa:9a:63:b5:f8:c5:66:83:c6:8d:
         c8:15:a7:c8:ab:48:39:a3:66:e4:e6:dd:c8:f0:d6:09:36:2f:
         a9:00:71:89:8f:78:07:f1:40:36:5b:fe:e1:0b:a6:e5:24:29:
         85:7f:9b:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 08:03:34 2025 by rpki-client