Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9150F66/3D981CCC3A1E11E79AA0D51CC4F9AE02/753F0A48CFB611EE83724A58C4F9AE02.roa
File:                     753F0A48CFB611EE83724A58C4F9AE02.roa (raw, json)
Hash identifier:          Y0zJtnbzpmd90X17sv9yMGgLuPfyz+VuYGcqduHEde8=
Subject key identifier:   E1:AA:D0:45:FC:26:8B:CB:B8:BC:2B:8B:F8:5B:1B:8A:FB:41:FD:A2
Certificate issuer:       /CN=A9150F66/serialNumber=AA32562429F896C0A5CBDE564431480339BEBA97
Certificate serial:       1AA0
Authority key identifier: AA:32:56:24:29:F8:96:C0:A5:CB:DE:56:44:31:48:03:39:BE:BA:97
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/qjJWJCn4lsCly95WRDFIAzm-upc.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9150F66/3D981CCC3A1E11E79AA0D51CC4F9AE02/753F0A48CFB611EE83724A58C4F9AE02.roa
Signing time:             Sat 24 May 2025 15:43:37 +0000
ROA not before:           Sat 24 May 2025 15:43:37 +0000
ROA not after:            Thu 30 Jul 2026 00:00:00 +0000
asID:                     24440
IP address blocks:        72.255.0.0/18 maxlen: 24
                          139.135.32.0/19 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9150F66/3D981CCC3A1E11E79AA0D51CC4F9AE02/qjJWJCn4lsCly95WRDFIAzm-upc.crl
                          rsync://rpki.apnic.net/member_repository/A9150F66/3D981CCC3A1E11E79AA0D51CC4F9AE02/qjJWJCn4lsCly95WRDFIAzm-upc.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/qjJWJCn4lsCly95WRDFIAzm-upc.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 09 Jun 2025 15:48:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 6816 (0x1aa0)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9150F66, serialNumber=AA32562429F896C0A5CBDE564431480339BEBA97
        Validity
            Not Before: May 24 15:43:37 2025 GMT
            Not After : Jul 30 00:00:00 2026 GMT
        Subject: CN=6831e929-0db5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:86:12:b3:9d:85:78:75:9b:f2:c8:f5:50:75:
                    81:c1:cf:6c:f1:b6:ee:0b:f1:92:49:89:a2:1a:fc:
                    50:ca:af:47:f1:b9:9b:a3:f8:77:34:de:62:98:cc:
                    33:48:cd:2e:16:37:ad:af:8a:6a:e3:49:20:aa:f7:
                    da:6b:ae:70:b6:49:b1:d0:09:6e:86:5f:1d:13:99:
                    3b:21:5e:28:75:59:d2:05:f0:fa:94:f6:c2:67:a7:
                    c2:1f:32:9a:57:71:e5:ea:64:8a:7f:f5:4e:9d:89:
                    27:f5:d1:fe:2c:76:e5:1a:c2:fe:d3:9f:46:e8:f6:
                    f4:15:19:2b:a3:26:eb:b3:62:f9:24:fb:3b:5b:73:
                    98:86:85:78:7f:35:1a:38:c0:67:8f:35:40:1c:ea:
                    40:3d:1a:bd:0e:5f:db:c3:87:39:13:7a:7a:52:a8:
                    6b:fc:70:cb:09:cc:1f:30:1b:14:48:a4:2d:4d:93:
                    03:85:71:f5:9c:f2:0a:ad:5d:be:66:5a:fd:b8:97:
                    b1:10:f1:9e:06:e0:a3:44:54:f7:9d:d0:d9:af:40:
                    f1:24:8a:5c:12:48:c4:0b:cb:18:51:be:72:df:ff:
                    2c:e8:02:ec:9e:28:e4:fb:ef:a7:8f:3e:c7:eb:e0:
                    2b:12:df:3d:86:6c:ce:18:40:01:58:d6:2c:a7:31:
                    37:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E1:AA:D0:45:FC:26:8B:CB:B8:BC:2B:8B:F8:5B:1B:8A:FB:41:FD:A2
            X509v3 Authority Key Identifier:
                keyid:AA:32:56:24:29:F8:96:C0:A5:CB:DE:56:44:31:48:03:39:BE:BA:97

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9150F66/3D981CCC3A1E11E79AA0D51CC4F9AE02/qjJWJCn4lsCly95WRDFIAzm-upc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/qjJWJCn4lsCly95WRDFIAzm-upc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9150F66/3D981CCC3A1E11E79AA0D51CC4F9AE02/753F0A48CFB611EE83724A58C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  72.255.0.0/18
                  139.135.32.0/19

    Signature Algorithm: sha256WithRSAEncryption
         b5:0a:83:50:6c:79:42:d6:84:d4:ff:d0:c9:7f:40:bb:33:3a:
         12:4f:d6:2e:09:1a:7d:79:d7:7a:94:e8:ce:20:38:db:d9:3f:
         f8:34:9b:dc:6e:2e:09:f1:32:27:2f:5c:cc:a0:3a:b1:41:9a:
         ab:42:7d:d9:bc:00:33:ed:0f:18:3b:46:1a:29:fc:3d:0b:74:
         c1:8a:d0:3a:8f:58:1a:ca:a2:6b:47:ff:83:b5:36:f1:b2:9c:
         d1:94:0f:d0:25:93:a5:26:9f:a4:22:7d:9b:8b:9a:05:56:fd:
         b8:d6:36:3c:8b:4e:9a:41:7f:fa:89:84:ff:86:90:cb:a7:51:
         00:8e:bc:9e:dd:33:2f:3a:dc:0f:ef:45:3f:46:58:9d:ce:9c:
         be:5a:8b:97:da:3a:33:6e:7c:aa:1c:74:37:83:c6:a7:a1:47:
         78:8e:4c:6f:2d:b1:c0:9e:b5:01:bd:84:56:bb:28:52:99:cd:
         de:a0:68:1d:19:99:cc:43:a4:f9:5e:19:6b:66:2f:ee:79:fc:
         13:87:c3:b4:65:b6:c3:58:7c:92:75:fd:74:bd:92:95:2f:10:
         7e:d1:aa:b3:46:19:93:1d:ad:2e:5d:23:29:55:b8:87:20:d8:
         b9:08:6a:73:50:b6:73:59:48:e3:56:96:ac:ac:8a:4a:59:cd:
         78:0a:cc:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 4 12:22:13 2025 by rpki-client