Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A913860A/B50A3C248B5411EF94747249C4F9AE02/74D48D868CED11EF820CF762C4F9AE02.roa
File:                     74D48D868CED11EF820CF762C4F9AE02.roa (raw, json)
Hash identifier:          lEKcqkGGYKFU4hSf3vJKxp5n9BmHjN5M8357AH3FFg8=
Subject key identifier:   82:78:24:69:D1:1C:31:FF:E3:36:AE:2E:63:D3:1B:F6:FA:D6:D2:F9
Certificate issuer:       /CN=A913860A/serialNumber=65627112EAE7B2C92F89F7A78A71A2A4FA95F53D
Certificate serial:       14
Authority key identifier: 65:62:71:12:EA:E7:B2:C9:2F:89:F7:A7:8A:71:A2:A4:FA:95:F5:3D
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZWJxEurnsskvifeninGipPqV9T0.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A913860A/B50A3C248B5411EF94747249C4F9AE02/74D48D868CED11EF820CF762C4F9AE02.roa
Signing time:             Fri 08 Nov 2024 04:14:40 +0000
ROA not before:           Fri 08 Nov 2024 04:14:40 +0000
ROA not after:            Tue 30 Dec 2025 00:00:00 +0000
asID:                     24046
IP address blocks:        203.10.25.0/24 maxlen: 24
                          203.10.31.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A913860A/B50A3C248B5411EF94747249C4F9AE02/ZWJxEurnsskvifeninGipPqV9T0.crl
                          rsync://rpki.apnic.net/member_repository/A913860A/B50A3C248B5411EF94747249C4F9AE02/ZWJxEurnsskvifeninGipPqV9T0.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZWJxEurnsskvifeninGipPqV9T0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 21 Feb 2025 05:15:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 20 (0x14)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A913860A
        Validity
            Not Before: Nov  8 04:14:40 2024 GMT
            Not After : Dec 30 00:00:00 2025 GMT
        Subject: CN=672d9030-f9d0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:78:8c:24:b2:bf:15:47:50:d6:dd:85:7d:59:
                    56:48:fd:f3:85:24:fe:d2:7f:eb:16:a3:9e:ff:0d:
                    05:ac:2d:3a:19:cc:84:62:75:e9:dd:f4:cc:2a:11:
                    24:e2:65:c7:9c:cf:93:2a:ef:4f:fb:5d:85:0f:60:
                    5a:80:62:be:bc:62:d6:a2:b9:6a:26:e6:8d:e1:37:
                    1c:7a:55:2c:d2:a9:0f:e6:47:3b:33:58:11:f3:4e:
                    f7:a1:7c:1a:c8:44:6b:ad:6f:bf:41:c7:a0:db:13:
                    53:6e:07:a6:c3:b5:7b:4c:b7:ef:05:ce:0f:1e:8d:
                    69:94:af:43:79:fa:41:f4:aa:23:a2:35:19:06:fa:
                    09:d3:fc:90:71:6c:d1:69:8d:7d:53:44:ce:3d:03:
                    6e:78:80:ab:35:a6:cb:8f:e0:50:bf:fc:6c:78:b3:
                    05:28:65:ed:2e:20:92:ab:4c:b7:ba:8b:61:38:3a:
                    d7:1a:15:07:6c:d4:9d:1d:b5:78:65:86:ec:4d:9b:
                    54:a7:a8:ba:a9:ff:80:6e:12:38:69:0f:40:8f:d9:
                    28:86:11:d3:4e:0d:1d:7d:bd:c7:8e:26:e8:b5:77:
                    12:fe:6f:d5:54:df:8b:de:3f:f3:7b:47:8d:fe:56:
                    9e:18:89:ee:cc:c4:75:cb:17:6e:5a:42:39:4d:e8:
                    0a:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                82:78:24:69:D1:1C:31:FF:E3:36:AE:2E:63:D3:1B:F6:FA:D6:D2:F9
            X509v3 Authority Key Identifier:
                keyid:65:62:71:12:EA:E7:B2:C9:2F:89:F7:A7:8A:71:A2:A4:FA:95:F5:3D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A913860A/B50A3C248B5411EF94747249C4F9AE02/ZWJxEurnsskvifeninGipPqV9T0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZWJxEurnsskvifeninGipPqV9T0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913860A/B50A3C248B5411EF94747249C4F9AE02/74D48D868CED11EF820CF762C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  203.10.25.0/24
                  203.10.31.0/24

    Signature Algorithm: sha256WithRSAEncryption
         99:95:23:78:9f:68:93:1e:aa:78:10:94:6e:8a:f1:9b:a2:cc:
         9b:5f:e7:19:26:1a:f2:d5:a0:96:5b:38:97:29:6c:e2:b9:13:
         c3:33:9a:7e:6b:12:c7:94:47:1b:18:46:77:65:36:51:78:b8:
         7f:31:15:ab:7f:7b:6f:4f:98:b3:51:34:a0:07:47:ec:26:49:
         e8:bb:de:82:22:5d:48:3a:8d:c3:3c:d3:49:ec:c7:98:24:35:
         76:10:c5:6b:58:50:85:fa:b0:31:c9:56:c5:e4:f8:bb:45:56:
         ad:be:87:cc:c4:0f:7c:40:7a:33:96:28:fc:1c:50:88:4c:be:
         e1:26:f6:11:98:36:90:e1:bd:88:1c:80:06:42:30:18:5e:44:
         a8:e8:51:79:36:5a:18:6f:c9:ff:18:f5:ec:1d:6f:65:7e:88:
         f4:33:ac:4f:20:0f:dc:e5:60:5e:62:8f:99:21:54:e7:4c:8b:
         3a:f2:db:72:fc:be:36:0e:72:11:cd:65:47:5c:11:49:b9:40:
         f2:ae:39:3e:15:f3:6e:dc:bc:e7:c4:ab:45:49:9c:4f:64:6f:
         f4:11:ee:80:a9:cf:6d:91:97:d8:2f:74:bd:67:6a:1b:70:1e:
         d2:1d:e1:33:2f:09:fc:3e:6d:ba:7f:71:48:2f:c4:68:59:6d:
         92:8b:10:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 21:44:13 2025 by rpki-client