Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9189396/3B8D7488102911F09022263DC4F9AE02/7CBE8274103011F08606D714C4F9AE02.roa
File:                     7CBE8274103011F08606D714C4F9AE02.roa (raw, json)
Hash identifier:          IuWisIzOrWuJ3prCFTYRSnmT2eAgA9CS8sTrUTpGkp0=
Subject key identifier:   2D:22:B3:11:CA:38:FF:83:E2:FD:FA:27:A4:AA:2C:CB:68:8F:B3:6A
Certificate issuer:       /CN=A9189396/serialNumber=EF85AEFC7B0814DF3F410DA01CA34BE4D66BB1A3
Certificate serial:       02
Authority key identifier: EF:85:AE:FC:7B:08:14:DF:3F:41:0D:A0:1C:A3:4B:E4:D6:6B:B1:A3
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/74Wu_HsIFN8_QQ2gHKNL5NZrsaM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9189396/3B8D7488102911F09022263DC4F9AE02/7CBE8274103011F08606D714C4F9AE02.roa
Signing time:             Thu 03 Apr 2025 02:08:08 +0000
ROA not before:           Thu 03 Apr 2025 02:08:08 +0000
ROA not after:            Tue 30 Sep 2025 00:00:00 +0000
asID:                     24436
IP address blocks:        152.98.192.0/18 maxlen: 18
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9189396/3B8D7488102911F09022263DC4F9AE02/74Wu_HsIFN8_QQ2gHKNL5NZrsaM.crl
                          rsync://rpki.apnic.net/member_repository/A9189396/3B8D7488102911F09022263DC4F9AE02/74Wu_HsIFN8_QQ2gHKNL5NZrsaM.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/74Wu_HsIFN8_QQ2gHKNL5NZrsaM.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 14 Apr 2025 06:50:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2 (0x2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9189396
        Validity
            Not Before: Apr  3 02:08:08 2025 GMT
            Not After : Sep 30 00:00:00 2025 GMT
        Subject: CN=67eded88-df32
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:bb:c4:0d:e6:7f:3e:2c:77:f0:1f:98:0c:08:
                    f9:2a:5b:c1:2d:a5:98:42:22:d2:e3:46:7e:a5:40:
                    86:99:43:08:4b:05:70:26:2e:ff:34:b3:63:cb:23:
                    41:e1:c1:73:68:6b:94:e0:37:bb:43:4d:db:ca:b3:
                    bd:6a:08:f0:6b:7a:d9:d2:76:5d:35:f9:9d:63:23:
                    8e:3e:29:09:dd:ed:32:47:3c:48:58:ed:a7:ca:7d:
                    1c:cf:5e:4a:89:30:8f:be:4a:17:82:58:fb:8c:04:
                    6f:ef:99:0a:c1:e9:63:6b:26:49:bd:4e:40:19:87:
                    24:f7:2a:b2:cc:2f:c1:1f:3d:eb:1c:eb:1e:74:88:
                    23:cb:32:b6:50:60:cd:e9:d3:ca:2b:46:64:67:29:
                    e9:b6:32:41:7a:1c:1d:9f:f0:eb:8c:5f:85:e4:45:
                    23:80:fa:6a:f9:11:b3:47:ed:51:19:9e:6e:21:49:
                    fc:fa:1e:81:2e:26:14:4b:d8:a0:d0:fa:70:53:78:
                    fe:7e:a7:f2:94:66:aa:04:63:6b:81:1e:43:d6:8d:
                    b7:bb:ff:b6:d9:8b:f3:0d:04:19:97:99:4e:1d:7d:
                    d1:c6:a5:ef:a5:dc:35:c3:16:6c:a3:5a:4c:72:34:
                    6d:d9:60:bb:9a:4a:97:fb:1e:e4:3f:65:98:d9:09:
                    63:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2D:22:B3:11:CA:38:FF:83:E2:FD:FA:27:A4:AA:2C:CB:68:8F:B3:6A
            X509v3 Authority Key Identifier:
                keyid:EF:85:AE:FC:7B:08:14:DF:3F:41:0D:A0:1C:A3:4B:E4:D6:6B:B1:A3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9189396/3B8D7488102911F09022263DC4F9AE02/74Wu_HsIFN8_QQ2gHKNL5NZrsaM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/74Wu_HsIFN8_QQ2gHKNL5NZrsaM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9189396/3B8D7488102911F09022263DC4F9AE02/7CBE8274103011F08606D714C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  152.98.192.0/18

    Signature Algorithm: sha256WithRSAEncryption
         99:91:e7:16:8d:97:23:91:6f:e8:c5:ea:3c:13:24:9d:6e:5f:
         93:7e:9a:19:bc:e7:75:c3:11:12:be:c2:24:2c:ff:d1:71:bd:
         b4:75:55:95:50:4d:6f:da:98:82:1b:aa:1c:5f:64:57:1b:b5:
         d7:33:3c:e6:d4:be:d6:83:95:ea:da:1d:3e:1b:83:f2:f3:82:
         09:b2:44:3e:ad:da:d5:44:65:92:fc:65:df:a9:69:23:63:c5:
         54:78:9f:81:cc:ad:ab:17:75:ba:79:94:e1:c9:2f:b0:e8:aa:
         6e:86:ae:b3:97:1e:41:46:74:e7:7f:83:d5:dc:2a:5e:55:a8:
         b3:a4:4d:54:6e:3c:0b:87:2d:c4:89:a1:83:c1:c6:cf:46:d6:
         90:cd:fd:94:9e:36:1f:b9:33:20:09:87:7a:a8:89:51:ee:d1:
         37:6d:2a:7a:6b:6a:e9:ed:17:58:7e:35:89:d7:bb:79:6c:c4:
         76:9d:98:8c:01:c0:f9:d5:19:53:e8:71:c1:27:44:51:0e:96:
         8c:c4:44:c9:f1:78:bb:54:36:05:19:70:03:b1:1d:e1:65:dc:
         bb:0c:21:cc:b1:ef:f2:bd:e9:55:35:cd:f4:10:68:53:0a:52:
         e5:fb:07:88:6c:4e:58:e4:cf:ca:d3:8e:d7:39:92:2e:64:ad:
         13:11:2e:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 11:34:35 2025 by rpki-client