Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9178AF2/73C88792E06711ECB9D2FF81C4F9AE02/010342748FE911EDA6F5922AC4F9AE02.roa
File:                     010342748FE911EDA6F5922AC4F9AE02.roa (raw, json)
Hash identifier:          5w2gwK/+zmYTYrBGcuIv1emp3tFDL4QjnfqeQ2tORBo=
Subject key identifier:   BA:21:23:7B:B5:6B:00:F7:70:E2:31:D5:BF:9B:6B:71:86:0E:78:E4
Certificate issuer:       /CN=A9178AF2/serialNumber=1005CCD5E18230FBA9ADD3D27F85DA38F13E4172
Certificate serial:       03A0
Authority key identifier: 10:05:CC:D5:E1:82:30:FB:A9:AD:D3:D2:7F:85:DA:38:F1:3E:41:72
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EAXM1eGCMPuprdPSf4XaOPE-QXI.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9178AF2/73C88792E06711ECB9D2FF81C4F9AE02/010342748FE911EDA6F5922AC4F9AE02.roa
Signing time:             Wed 07 May 2025 01:38:23 +0000
ROA not before:           Wed 07 May 2025 01:38:23 +0000
ROA not after:            Wed 01 Jul 2026 00:00:00 +0000
asID:                     40676
IP address blocks:        45.113.80.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9178AF2/73C88792E06711ECB9D2FF81C4F9AE02/EAXM1eGCMPuprdPSf4XaOPE-QXI.crl
                          rsync://rpki.apnic.net/member_repository/A9178AF2/73C88792E06711ECB9D2FF81C4F9AE02/EAXM1eGCMPuprdPSf4XaOPE-QXI.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EAXM1eGCMPuprdPSf4XaOPE-QXI.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 08 Jun 2025 01:32:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 928 (0x3a0)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9178AF2, serialNumber=1005CCD5E18230FBA9ADD3D27F85DA38F13E4172
        Validity
            Not Before: May  7 01:38:23 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=681ab98f-1894
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:0b:cc:ca:5f:25:2c:5a:9a:7a:f3:14:d6:3f:
                    f1:4c:58:56:7f:47:95:08:7a:99:1f:f8:83:a6:3c:
                    34:b1:81:bf:54:42:69:c0:a7:79:cd:d5:69:01:66:
                    d5:88:00:e1:10:c0:b0:1e:39:49:4d:f0:e9:e8:25:
                    59:7f:f9:09:fe:7e:c3:b4:47:e0:b6:36:cf:41:10:
                    6c:ff:d2:56:7b:2b:50:15:01:fa:5d:46:ef:26:31:
                    2d:09:c1:8d:51:7a:46:8d:b9:74:f7:86:10:27:61:
                    d5:62:0a:48:80:c5:2e:3d:77:02:5c:5b:c8:ee:13:
                    09:5e:a1:e4:a5:6b:f8:c4:96:28:61:d8:c4:07:9b:
                    16:27:bd:79:ba:fd:7a:f5:ae:a2:3c:4b:34:62:b9:
                    0d:30:50:1a:e6:2f:0c:21:5c:d7:1e:f1:6e:77:ec:
                    c9:39:b4:ae:e2:5a:f1:69:10:2f:a7:e0:4d:66:3f:
                    d4:4f:95:d8:45:3b:c0:c8:a5:7a:33:f1:a2:ed:e3:
                    76:7e:9d:8c:28:cc:d2:2d:74:0e:90:21:9e:c0:bb:
                    7e:99:ad:58:91:d2:ae:0f:45:6d:9c:20:17:18:00:
                    78:84:05:91:96:94:1e:2c:83:49:d2:a6:43:eb:11:
                    2a:99:87:03:30:22:da:24:fe:b9:aa:58:da:c3:86:
                    ea:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BA:21:23:7B:B5:6B:00:F7:70:E2:31:D5:BF:9B:6B:71:86:0E:78:E4
            X509v3 Authority Key Identifier:
                keyid:10:05:CC:D5:E1:82:30:FB:A9:AD:D3:D2:7F:85:DA:38:F1:3E:41:72

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9178AF2/73C88792E06711ECB9D2FF81C4F9AE02/EAXM1eGCMPuprdPSf4XaOPE-QXI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EAXM1eGCMPuprdPSf4XaOPE-QXI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9178AF2/73C88792E06711ECB9D2FF81C4F9AE02/010342748FE911EDA6F5922AC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.113.80.0/24

    Signature Algorithm: sha256WithRSAEncryption
         91:aa:39:e8:3a:a3:7a:f1:66:98:9d:66:82:bb:23:c7:4a:dd:
         f8:fd:0f:9e:78:c1:21:e7:7d:2c:e6:c4:ad:98:27:25:06:01:
         8b:12:57:e9:01:e2:48:77:de:01:7a:e2:ed:b8:e5:27:f3:1b:
         74:6d:c8:07:1c:3f:1b:6c:86:a1:97:d0:a6:3c:64:85:37:80:
         19:e9:ea:7d:e7:49:af:e3:18:53:25:5a:f0:a0:25:b9:8d:55:
         21:12:7e:c9:13:bf:cb:32:1c:9c:fb:92:56:12:25:a3:f9:4a:
         a5:de:0d:4c:d7:46:8c:19:53:5f:bd:4b:56:c8:43:4f:4c:70:
         b5:da:42:19:a6:96:b6:4b:10:6d:46:b6:4e:d0:e7:ad:f2:e2:
         83:50:49:0f:c9:da:03:93:05:4d:e9:ba:25:66:71:7b:02:3e:
         b1:91:89:76:d5:1f:6a:fa:50:c4:1d:81:e2:16:11:66:d2:26:
         26:91:53:46:70:0f:a3:40:97:b2:7e:63:ea:59:a1:7b:13:5a:
         18:3b:d9:eb:3b:bb:4f:36:57:7e:24:03:22:eb:71:c0:1a:26:
         d5:ba:a9:8e:c3:ce:a4:8e:c6:03:f4:c3:47:67:b9:54:db:88:
         e6:69:c4:c2:da:92:1b:1f:a6:a7:b2:ec:e4:6b:2d:14:3e:ce:
         72:6c:e2:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 2 04:53:15 2025 by rpki-client