Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A919536C/75B98BF0366011EE88E0F530C4F9AE02/9FE1BE90366311EEB376DC3AC4F9AE02.roa
File:                     9FE1BE90366311EEB376DC3AC4F9AE02.roa (raw, json)
Hash identifier:          qF8dwyJS0OcLRM+lRZeGO8KZj/gqh2DhUGlNyStGdKM=
Subject key identifier:   8F:0B:CC:4B:B0:02:D4:49:26:4B:31:1D:D7:21:7A:C5:9B:81:16:16
Certificate issuer:       /CN=A919536C/serialNumber=A090E520BF9D51F2FDCEED413AF27AC758F6AE1D
Certificate serial:       CA
Authority key identifier: A0:90:E5:20:BF:9D:51:F2:FD:CE:ED:41:3A:F2:7A:C7:58:F6:AE:1D
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/oJDlIL-dUfL9zu1BOvJ6x1j2rh0.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A919536C/75B98BF0366011EE88E0F530C4F9AE02/9FE1BE90366311EEB376DC3AC4F9AE02.roa
Signing time:             Tue 25 Jun 2024 06:21:59 +0000
ROA not before:           Tue 25 Jun 2024 06:21:59 +0000
ROA not after:            Sun 31 Aug 2025 00:00:00 +0000
asID:                     137885
IP address blocks:        161.82.224.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A919536C/75B98BF0366011EE88E0F530C4F9AE02/oJDlIL-dUfL9zu1BOvJ6x1j2rh0.crl
                          rsync://rpki.apnic.net/member_repository/A919536C/75B98BF0366011EE88E0F530C4F9AE02/oJDlIL-dUfL9zu1BOvJ6x1j2rh0.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/oJDlIL-dUfL9zu1BOvJ6x1j2rh0.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 26 Feb 2025 05:57:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 202 (0xca)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A919536C
        Validity
            Not Before: Jun 25 06:21:59 2024 GMT
            Not After : Aug 31 00:00:00 2025 GMT
        Subject: CN=667a6207-897d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:c5:77:13:f5:59:f0:7f:9a:25:36:fe:51:bc:
                    28:59:34:ed:c3:ed:1a:28:20:cb:c8:27:33:e1:27:
                    40:f5:9f:47:d9:92:72:d1:ef:a1:a9:7a:ea:90:e1:
                    53:a4:0a:c3:92:47:33:5c:aa:41:93:95:de:72:4f:
                    dc:b5:d0:58:57:6f:da:c9:32:8f:ab:53:22:b5:80:
                    c1:49:6e:16:2b:44:b6:7c:38:dd:96:c0:cf:6a:fd:
                    17:d9:87:80:cf:aa:4c:7a:40:69:b7:58:d9:6a:12:
                    22:b7:5d:fc:90:7c:91:cd:ad:8d:cb:f0:8b:02:a8:
                    58:07:2f:33:03:7d:08:54:06:17:93:aa:0a:c6:21:
                    e7:7f:02:e5:b9:28:ce:21:36:21:c7:bb:0c:e4:9b:
                    c3:cb:03:8e:02:ef:0e:12:16:2f:ad:64:29:46:db:
                    c5:20:ac:ca:1f:08:d5:3e:d6:25:85:b6:67:69:97:
                    36:a7:18:23:ec:a6:c1:23:07:07:a7:31:29:ec:dc:
                    3f:9f:ba:ae:a2:b2:1f:e6:c8:11:fe:c9:54:9d:a5:
                    87:25:06:16:4b:0f:50:48:af:e4:e3:1a:a9:13:6f:
                    a0:93:51:31:04:1a:9d:38:1c:f8:c7:ee:16:48:8b:
                    44:7a:37:db:1f:8b:86:b6:f7:0c:ef:d9:a9:ef:04:
                    37:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8F:0B:CC:4B:B0:02:D4:49:26:4B:31:1D:D7:21:7A:C5:9B:81:16:16
            X509v3 Authority Key Identifier:
                keyid:A0:90:E5:20:BF:9D:51:F2:FD:CE:ED:41:3A:F2:7A:C7:58:F6:AE:1D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A919536C/75B98BF0366011EE88E0F530C4F9AE02/oJDlIL-dUfL9zu1BOvJ6x1j2rh0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/oJDlIL-dUfL9zu1BOvJ6x1j2rh0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919536C/75B98BF0366011EE88E0F530C4F9AE02/9FE1BE90366311EEB376DC3AC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  161.82.224.0/24

    Signature Algorithm: sha256WithRSAEncryption
         01:fe:91:31:32:dd:69:2d:2e:3f:39:00:3f:e6:f6:a1:99:54:
         0e:5f:f3:03:18:bc:54:60:37:c2:6a:e3:58:37:8b:86:ed:68:
         20:15:7e:43:e9:47:a7:81:36:26:15:4b:54:89:89:56:3a:9f:
         1d:e8:29:01:aa:60:41:71:80:0c:40:d8:d6:30:9f:50:c0:dc:
         58:06:00:c0:ba:e2:d6:de:c0:11:b3:74:5c:b6:90:ab:4d:d7:
         ad:99:78:6b:c8:57:0e:c7:c9:a3:07:81:8c:f9:bf:a5:0f:37:
         9e:c3:57:cf:a1:ac:93:24:3c:fd:e8:91:07:25:c2:74:b5:3e:
         07:06:15:9b:24:d2:a4:98:a4:6f:f3:a0:26:52:9d:33:a8:4f:
         76:a5:9f:a6:23:07:66:a2:25:20:b0:15:3f:4f:31:68:5e:c1:
         e0:4c:20:4d:b7:93:36:c5:c6:12:7e:56:42:fb:98:a6:8e:8c:
         93:2c:84:97:fe:10:cc:50:4c:51:3b:36:4d:e8:90:dd:a4:35:
         64:4a:06:1b:5b:f8:07:06:6c:42:68:51:45:4a:2d:3c:87:47:
         6b:93:b2:47:dc:a1:ae:f7:e5:18:cc:f7:dc:3a:50:57:c2:b8:
         26:99:7e:de:dd:07:86:1d:cb:97:b6:9c:1b:fb:94:8b:7e:4c:
         b2:27:f9:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 20:32:12 2025 by rpki-client