Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91342C5/16637C2EA4E911ECAF3FB152C4F9AE02/E8E194B8A5CC11EC85A86A1FC4F9AE02.roa
File:                     E8E194B8A5CC11EC85A86A1FC4F9AE02.roa (raw, json)
Hash identifier:          ypQGr8fcGrxnVWfQ2RrFsZZ4R7tmsDgEITmj6bx0ScA=
Subject key identifier:   BB:A9:4E:E3:24:CD:8C:34:B5:3B:8F:96:90:74:94:66:2A:F1:F2:D0
Certificate issuer:       /CN=A91342C5/serialNumber=4D278951E2BD8AD285B940A8EA9E57E379711E6B
Certificate serial:       0373
Authority key identifier: 4D:27:89:51:E2:BD:8A:D2:85:B9:40:A8:EA:9E:57:E3:79:71:1E:6B
Authority info access:    rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/TSeJUeK9itKFuUCo6p5X43lxHms.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91342C5/16637C2EA4E911ECAF3FB152C4F9AE02/E8E194B8A5CC11EC85A86A1FC4F9AE02.roa
Signing time:             Wed 09 Apr 2025 01:07:26 +0000
ROA not before:           Wed 09 Apr 2025 01:07:26 +0000
ROA not after:            Wed 01 Jul 2026 00:00:00 +0000
asID:                     142005
IP address blocks:        85.113.86.0/23 maxlen: 24
                          193.149.158.0/23 maxlen: 24
                          193.149.166.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91342C5/16637C2EA4E911ECAF3FB152C4F9AE02/TSeJUeK9itKFuUCo6p5X43lxHms.crl
                          rsync://rpki.apnic.net/member_repository/A91342C5/16637C2EA4E911ECAF3FB152C4F9AE02/TSeJUeK9itKFuUCo6p5X43lxHms.mft
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/TSeJUeK9itKFuUCo6p5X43lxHms.cer
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 19 Apr 2025 17:49:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 883 (0x373)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91342C5, serialNumber=4D278951E2BD8AD285B940A8EA9E57E379711E6B
        Validity
            Not Before: Apr  9 01:07:26 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=67f5c84e-f5ed
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:ca:c8:88:9a:68:bb:8f:07:8c:94:08:6d:06:
                    b9:39:51:e2:62:79:fb:1c:88:d8:28:17:49:a8:fb:
                    5a:87:8c:47:4e:ec:11:91:3f:0f:44:5c:ab:10:a7:
                    41:82:50:23:ad:14:36:46:48:52:4c:ee:ef:e4:40:
                    49:df:5a:23:a3:25:56:a5:8b:b4:23:dd:a3:1e:30:
                    78:6a:0d:e2:08:c2:d4:84:fc:5e:59:b3:bf:07:aa:
                    62:6b:c7:f4:ca:97:c3:7b:b5:23:cd:51:6d:90:2d:
                    37:30:c4:e5:b2:85:9a:39:03:7a:34:2e:e8:f7:38:
                    78:d3:f6:59:46:a5:f6:8a:52:92:32:ee:18:d5:a0:
                    1e:4a:5a:5d:f2:0b:a8:26:0b:07:26:8d:bd:bc:cd:
                    67:b8:8b:08:99:2a:bc:9b:bc:04:ab:9e:03:c0:54:
                    7b:59:71:03:d9:ad:c0:d7:4e:88:2f:2e:4a:97:23:
                    42:be:54:73:45:41:65:e9:ab:cf:4a:be:12:db:e8:
                    a3:56:47:62:35:48:24:cc:06:cb:88:e3:2c:70:6c:
                    b6:29:db:20:36:60:ea:77:98:0e:a0:42:7a:7e:b5:
                    06:08:95:4f:90:16:6d:cf:ea:54:91:57:29:5a:f0:
                    03:4f:59:18:62:3d:cb:d5:5b:42:ee:e4:eb:90:e1:
                    c1:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BB:A9:4E:E3:24:CD:8C:34:B5:3B:8F:96:90:74:94:66:2A:F1:F2:D0
            X509v3 Authority Key Identifier:
                keyid:4D:27:89:51:E2:BD:8A:D2:85:B9:40:A8:EA:9E:57:E3:79:71:1E:6B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91342C5/16637C2EA4E911ECAF3FB152C4F9AE02/TSeJUeK9itKFuUCo6p5X43lxHms.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/TSeJUeK9itKFuUCo6p5X43lxHms.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91342C5/16637C2EA4E911ECAF3FB152C4F9AE02/E8E194B8A5CC11EC85A86A1FC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  85.113.86.0/23
                  193.149.158.0/23
                  193.149.166.0/23

    Signature Algorithm: sha256WithRSAEncryption
         20:b0:f4:f7:2f:73:02:52:9d:1f:b0:3b:60:f1:f6:7f:be:7b:
         22:cc:2f:ce:aa:65:58:93:65:c7:91:c2:a1:ed:ca:28:5b:86:
         a3:b5:88:ba:fe:65:67:fa:53:1c:0e:df:40:09:14:7d:77:6b:
         c6:79:47:de:20:d9:f1:da:55:22:aa:0c:ee:79:9d:1c:50:6e:
         75:20:8f:d5:8f:06:9b:d1:73:6e:46:14:f2:6b:1e:97:7f:7a:
         4f:ca:eb:77:90:f8:09:bd:07:5f:6f:11:67:a6:34:ea:ea:27:
         fa:5c:52:93:a7:b7:dc:77:9f:70:cc:7e:e7:41:4e:97:75:43:
         b5:48:57:7b:7e:b3:76:5e:19:85:44:90:14:67:0e:69:f9:60:
         1b:5c:d0:34:81:35:c1:b4:41:ea:dc:dc:78:14:11:3d:8a:b1:
         05:57:f3:e8:40:d4:62:80:21:55:c5:e9:3f:55:c6:6b:ec:45:
         43:68:e8:3d:aa:56:68:40:74:b1:1f:05:01:d1:6f:27:77:e5:
         04:14:5e:3d:4a:37:ac:4a:c2:c6:8d:b8:3e:0d:21:49:53:31:
         ec:67:af:8f:31:bf:dc:3c:ad:ab:90:9e:42:b3:6b:6a:f5:18:
         27:02:ed:d5:f4:43:9f:70:8d:0e:f4:2b:29:70:1b:b8:df:01:
         90:2c:4b:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 13 03:49:17 2025 by rpki-client