Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91697FA/27F83B701D8311E2932921D808B02CD2/F7318C2CBA3E11ECA0543F6BC4F9AE02.roa
File:                     F7318C2CBA3E11ECA0543F6BC4F9AE02.roa (raw, json)
Hash identifier:          MeS1DOyTdCwke/RbgIIQT3rBZNWyYB2mfEuyQ/lkLGY=
Subject key identifier:   37:4B:CD:56:D7:79:EE:F8:F1:EA:AA:20:82:B9:2B:24:81:7D:AB:AA
Certificate issuer:       /CN=A91697FA/serialNumber=9F82DBC9466312C5BA2E921279302400956A982A
Certificate serial:       34DA
Authority key identifier: 9F:82:DB:C9:46:63:12:C5:BA:2E:92:12:79:30:24:00:95:6A:98:2A
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/n4LbyUZjEsW6LpISeTAkAJVqmCo.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91697FA/27F83B701D8311E2932921D808B02CD2/F7318C2CBA3E11ECA0543F6BC4F9AE02.roa
Signing time:             Mon 22 Jul 2024 14:40:22 +0000
ROA not before:           Mon 22 Jul 2024 14:40:22 +0000
ROA not after:            Fri 31 Oct 2025 00:00:00 +0000
asID:                     149762
IP address blocks:        58.181.182.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91697FA/27F83B701D8311E2932921D808B02CD2/n4LbyUZjEsW6LpISeTAkAJVqmCo.crl
                          rsync://rpki.apnic.net/member_repository/A91697FA/27F83B701D8311E2932921D808B02CD2/n4LbyUZjEsW6LpISeTAkAJVqmCo.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/n4LbyUZjEsW6LpISeTAkAJVqmCo.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 21 Feb 2025 05:15:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 13530 (0x34da)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91697FA
        Validity
            Not Before: Jul 22 14:40:22 2024 GMT
            Not After : Oct 31 00:00:00 2025 GMT
        Subject: CN=669e6f56-a09d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:c7:57:2e:8f:da:30:95:14:2f:47:c8:13:a4:
                    df:75:1b:30:c0:83:90:79:06:2b:b9:32:d9:6d:fb:
                    82:4d:58:38:a3:3f:96:80:0c:13:7d:46:0e:7b:44:
                    59:dc:ed:75:4e:e9:de:ac:66:6b:ff:07:c5:ba:55:
                    67:1a:96:f9:46:28:6c:d6:07:3f:4f:57:1f:0c:1f:
                    bc:a9:e5:16:49:a7:3f:7a:df:99:9f:3b:29:fa:72:
                    0d:5e:66:dd:30:ee:0f:83:06:73:92:5a:a0:0a:ea:
                    7f:81:d1:f1:2f:0c:c1:74:62:f5:23:6b:3d:a4:a2:
                    0e:a1:d9:02:5c:59:e4:19:a2:d0:9b:d1:6e:a5:cd:
                    88:51:41:07:ee:5e:11:16:6d:1e:78:11:07:71:13:
                    f6:82:1d:87:fd:2e:80:79:02:d7:22:ed:f5:54:5b:
                    8e:51:c8:27:7a:00:15:70:d3:6a:48:f2:ee:ee:1f:
                    3c:76:23:c3:da:45:db:c0:47:38:41:41:de:4f:e8:
                    c2:d3:9d:b7:05:f6:3f:e4:70:79:d1:75:1f:33:c3:
                    4b:18:ee:fc:3c:df:56:42:9b:70:5a:85:cc:07:a4:
                    67:b9:4c:3c:c7:2a:ad:98:70:69:dc:af:a0:ff:6c:
                    ff:e5:c2:b8:c8:c5:fd:6b:a7:e7:01:a5:c7:b4:3c:
                    ca:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                37:4B:CD:56:D7:79:EE:F8:F1:EA:AA:20:82:B9:2B:24:81:7D:AB:AA
            X509v3 Authority Key Identifier:
                keyid:9F:82:DB:C9:46:63:12:C5:BA:2E:92:12:79:30:24:00:95:6A:98:2A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91697FA/27F83B701D8311E2932921D808B02CD2/n4LbyUZjEsW6LpISeTAkAJVqmCo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/n4LbyUZjEsW6LpISeTAkAJVqmCo.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91697FA/27F83B701D8311E2932921D808B02CD2/F7318C2CBA3E11ECA0543F6BC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  58.181.182.0/24

    Signature Algorithm: sha256WithRSAEncryption
         7b:8d:e2:a3:8d:e5:96:22:37:c5:0a:c4:18:e9:07:8f:47:81:
         ce:28:9c:b4:46:14:da:2e:9f:84:75:2c:38:16:ff:d4:8c:bd:
         a3:79:36:a3:54:38:e2:dc:92:07:c4:be:fd:87:d2:1f:c1:d9:
         2f:fe:6d:11:6e:f5:2f:43:24:4b:41:6d:bd:fa:c0:e0:d2:36:
         16:52:a0:5d:8c:4c:87:5e:fc:41:c4:0b:bf:b0:4f:aa:a0:39:
         c8:71:18:51:e4:d3:c1:61:c9:95:56:8a:e0:26:a5:4c:8d:a9:
         60:c4:55:fb:7f:71:71:93:b3:69:dc:31:ac:8e:fe:f3:8b:a3:
         7e:d5:dc:12:a2:3e:9f:ee:97:a2:15:81:87:0b:47:28:18:3c:
         17:4c:ab:e9:bb:e3:c3:7a:6f:77:e6:1f:27:c9:bd:8a:6a:2f:
         d8:bb:96:ad:2b:95:2d:68:2c:61:dd:e9:bd:bf:d7:e9:5f:1d:
         88:8b:be:0f:50:dd:c6:9c:f4:47:74:87:6d:31:81:3a:e7:80:
         a2:fd:56:6a:fe:4b:42:38:9f:68:c6:35:18:fe:39:dd:46:b6:
         58:6b:c8:ab:0f:d1:67:47:c3:07:c6:52:03:f1:57:14:d9:04:
         c0:22:82:cb:00:fc:a7:8d:c7:fd:16:50:fa:dc:19:89:a0:ba:
         d6:36:19:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 22:29:10 2025 by rpki-client