Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9184F65/AC63ADC6252411EF82A95B74C4F9AE02/9F0B162A252C11EFB58A7552C4F9AE02.roa
File:                     9F0B162A252C11EFB58A7552C4F9AE02.roa (raw, json)
Hash identifier:          recSAfAQrqtQaEHIzSjruotoH+IobzT5ObtgaKvqx8U=
Subject key identifier:   D4:4F:94:FA:E8:27:36:0F:F5:94:85:A3:89:04:C6:C5:1B:B5:71:5A
Certificate issuer:       /CN=A9184F65/serialNumber=DAD5E0D73D054A697B22839AF1FA4ACD94F50A1A
Certificate serial:       9A
Authority key identifier: DA:D5:E0:D7:3D:05:4A:69:7B:22:83:9A:F1:FA:4A:CD:94:F5:0A:1A
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2tXg1z0FSml7IoOa8fpKzZT1Cho.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9184F65/AC63ADC6252411EF82A95B74C4F9AE02/9F0B162A252C11EFB58A7552C4F9AE02.roa
Signing time:             Wed 05 Mar 2025 06:52:34 +0000
ROA not before:           Wed 05 Mar 2025 06:52:34 +0000
ROA not after:            Fri 01 May 2026 00:00:00 +0000
asID:                     56106
IP address blocks:        119.252.189.0/24 maxlen: 24
                          119.252.190.0/24 maxlen: 24
                          119.252.191.0/24 maxlen: 24
                          203.98.81.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9184F65/AC63ADC6252411EF82A95B74C4F9AE02/2tXg1z0FSml7IoOa8fpKzZT1Cho.crl
                          rsync://rpki.apnic.net/member_repository/A9184F65/AC63ADC6252411EF82A95B74C4F9AE02/2tXg1z0FSml7IoOa8fpKzZT1Cho.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2tXg1z0FSml7IoOa8fpKzZT1Cho.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 12 Apr 2025 05:34:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 154 (0x9a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9184F65
        Validity
            Not Before: Mar  5 06:52:34 2025 GMT
            Not After : May  1 00:00:00 2026 GMT
        Subject: CN=67c7f4b2-e249
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:83:53:f9:83:1e:12:05:b0:4e:45:e7:7f:67:
                    17:27:30:53:27:d2:57:44:a2:c3:17:10:27:88:fc:
                    b1:92:b8:b9:4c:82:4f:12:08:1e:7e:b7:a1:51:20:
                    a1:6e:68:d9:fe:15:41:ce:36:c7:e5:cf:03:95:49:
                    f1:69:a7:3d:ad:ff:b8:7a:b5:5c:ee:a3:78:82:d5:
                    5d:92:2a:05:9e:41:5a:5e:05:52:58:8e:4d:d3:14:
                    68:3b:29:15:b2:2a:46:f9:97:e2:34:e3:85:3f:af:
                    b1:6f:17:aa:db:4d:85:44:48:29:3f:2a:18:d4:9f:
                    44:09:92:4c:54:06:38:dc:f2:c7:62:54:27:9c:3e:
                    71:34:8e:e5:b4:3f:4b:6f:9e:00:fe:03:b3:d5:4f:
                    63:f4:b9:19:b2:a0:80:46:c4:c5:48:5e:5c:87:6a:
                    24:1e:f2:a2:64:c9:a1:45:c7:9a:8a:1b:11:af:a7:
                    e4:da:d9:6f:3a:9e:74:66:d8:1a:26:6d:6b:47:bb:
                    6f:00:c1:c3:5b:bc:0f:9b:07:2a:57:16:f9:a8:43:
                    8d:fb:8c:bb:c8:09:94:b1:3c:bf:f6:a5:21:93:b5:
                    79:79:cb:b1:51:6f:0f:44:f1:8c:56:75:37:be:7e:
                    ca:94:88:5c:50:d6:48:11:a3:12:33:05:4c:f2:a6:
                    f5:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D4:4F:94:FA:E8:27:36:0F:F5:94:85:A3:89:04:C6:C5:1B:B5:71:5A
            X509v3 Authority Key Identifier:
                keyid:DA:D5:E0:D7:3D:05:4A:69:7B:22:83:9A:F1:FA:4A:CD:94:F5:0A:1A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9184F65/AC63ADC6252411EF82A95B74C4F9AE02/2tXg1z0FSml7IoOa8fpKzZT1Cho.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2tXg1z0FSml7IoOa8fpKzZT1Cho.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9184F65/AC63ADC6252411EF82A95B74C4F9AE02/9F0B162A252C11EFB58A7552C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  119.252.189.0-119.252.191.255
                  203.98.81.0/24

    Signature Algorithm: sha256WithRSAEncryption
         4f:85:7c:b6:64:fd:c8:dd:a8:86:ae:2f:ca:b6:8d:7d:fb:09:
         a4:1a:03:0c:5c:fe:1e:1d:c3:4f:80:7f:02:a7:2f:47:32:46:
         f6:c6:9f:3c:aa:f1:0f:09:fb:9a:01:28:27:4e:52:77:04:7c:
         b3:db:4c:8b:d4:bb:8e:6a:5d:bc:16:c2:7e:a3:02:0e:10:e9:
         11:a0:b3:04:67:ab:9c:21:5b:94:63:6c:28:f4:2a:82:49:59:
         21:2b:fb:35:ce:92:3d:2d:e5:4a:35:6e:83:53:ff:63:91:97:
         3a:a5:c9:45:48:56:20:2a:be:92:e8:cf:c7:85:fa:93:09:d0:
         b1:9b:df:90:b3:88:62:bb:75:85:b4:62:c6:63:ff:5a:59:ec:
         df:e1:a3:fc:8a:a3:97:52:78:38:ff:d0:32:ff:17:64:15:f5:
         82:be:cb:f5:da:a5:35:4d:43:47:2c:ed:2d:f1:ee:a5:02:84:
         8e:4c:c4:ab:e3:f7:e6:ec:6a:f0:14:2f:eb:6e:20:f9:61:c7:
         94:44:6c:8e:30:d5:09:74:29:ca:f7:d5:5d:fd:9d:d5:5a:e1:
         b8:ff:89:27:71:6d:2a:2d:ad:c9:2a:99:42:c5:d1:51:bd:06:
         0c:42:22:49:c4:ff:2a:37:f4:13:a0:87:00:23:3f:8f:79:38:
         5f:6e:eb:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 19:52:25 2025 by rpki-client