Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91982B6/DE7E321ECB5911EF86915B61C4F9AE02/56B4DCD039AD11F0B50C1612C4F9AE02.roa
File:                     56B4DCD039AD11F0B50C1612C4F9AE02.roa (raw, json)
Hash identifier:          vuKzESxfL6KPMKp9BJFrs+559Jkr7A+7rgOLiDzyq7A=
Subject key identifier:   81:BF:EC:AE:25:39:98:1E:E4:EF:3F:50:F4:0C:F9:80:E5:41:A5:48
Certificate issuer:       /CN=A91982B6/serialNumber=390A3837ABA6912A2CF29E610DA49555DF2C6FA5
Certificate serial:       4E
Authority key identifier: 39:0A:38:37:AB:A6:91:2A:2C:F2:9E:61:0D:A4:95:55:DF:2C:6F:A5
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/OQo4N6umkSos8p5hDaSVVd8sb6U.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91982B6/DE7E321ECB5911EF86915B61C4F9AE02/56B4DCD039AD11F0B50C1612C4F9AE02.roa
Signing time:             Sun 25 May 2025 21:15:09 +0000
ROA not before:           Sun 25 May 2025 21:15:09 +0000
ROA not after:            Tue 31 Mar 2026 00:00:00 +0000
asID:                     133446
IP address blocks:        160.250.241.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91982B6/DE7E321ECB5911EF86915B61C4F9AE02/OQo4N6umkSos8p5hDaSVVd8sb6U.crl
                          rsync://rpki.apnic.net/member_repository/A91982B6/DE7E321ECB5911EF86915B61C4F9AE02/OQo4N6umkSos8p5hDaSVVd8sb6U.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/OQo4N6umkSos8p5hDaSVVd8sb6U.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 12 Jun 2025 06:39:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 78 (0x4e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91982B6, serialNumber=390A3837ABA6912A2CF29E610DA49555DF2C6FA5
        Validity
            Not Before: May 25 21:15:09 2025 GMT
            Not After : Mar 31 00:00:00 2026 GMT
        Subject: CN=6833885d-c295
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e5:9d:7f:c4:44:af:3c:55:62:25:b6:63:c5:e2:
                    58:d8:9d:f8:24:31:37:53:dc:15:9f:73:82:cb:3f:
                    ce:48:f3:e9:c0:9f:05:f6:f2:0a:8f:4c:7b:7d:5d:
                    b9:54:82:13:e9:97:9d:d6:68:1c:d7:37:34:f6:f7:
                    f6:e3:d9:a6:c8:57:78:11:74:07:a8:0a:0b:26:7d:
                    cd:d1:cc:4c:9c:cd:49:cb:ca:5f:b2:68:af:9c:1f:
                    04:2a:60:fb:1b:e1:af:55:40:b0:97:d9:4a:f2:42:
                    e8:1e:33:29:41:79:ba:a9:14:7c:81:43:f9:0f:a0:
                    09:d3:a0:c3:5f:c5:cf:6f:8a:d6:5b:47:87:53:c4:
                    60:c4:6a:66:ef:e6:a3:41:fd:9f:2c:4e:53:9c:7f:
                    bc:74:5b:f8:d2:9c:92:02:9a:67:00:c4:5c:06:69:
                    4c:f0:7b:1e:aa:de:c4:33:97:58:fd:29:43:77:5e:
                    18:a4:5d:d7:72:c5:68:33:94:00:61:36:98:90:ae:
                    0d:d9:a9:a6:98:6a:f1:10:a1:ad:28:f1:c7:3a:4a:
                    fe:b6:5e:07:2f:0c:79:7c:30:19:1f:6c:27:df:7c:
                    b6:17:a7:7b:91:d5:a7:08:8f:b6:a0:94:a9:ba:3c:
                    4f:47:a5:0d:8a:a2:0d:53:f7:f5:19:a4:66:09:10:
                    2b:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                81:BF:EC:AE:25:39:98:1E:E4:EF:3F:50:F4:0C:F9:80:E5:41:A5:48
            X509v3 Authority Key Identifier:
                keyid:39:0A:38:37:AB:A6:91:2A:2C:F2:9E:61:0D:A4:95:55:DF:2C:6F:A5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91982B6/DE7E321ECB5911EF86915B61C4F9AE02/OQo4N6umkSos8p5hDaSVVd8sb6U.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/OQo4N6umkSos8p5hDaSVVd8sb6U.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91982B6/DE7E321ECB5911EF86915B61C4F9AE02/56B4DCD039AD11F0B50C1612C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  160.250.241.0/24

    Signature Algorithm: sha256WithRSAEncryption
         8a:d5:54:4a:0d:c6:79:44:24:c0:42:97:66:c8:1b:c0:e0:14:
         7b:18:23:96:c1:b2:3c:7d:a3:b9:fa:5e:56:cd:4b:07:c7:2e:
         8b:fd:28:61:8b:f4:16:22:57:bf:a3:cd:3d:6f:97:2e:2d:33:
         46:cf:4c:b1:a2:c4:32:da:26:98:b1:af:63:d2:c0:8e:0f:9e:
         4b:71:fd:2d:41:da:29:22:2b:d1:3c:b8:7d:3c:f8:02:f1:14:
         e7:45:0d:aa:ed:cc:5a:e6:11:55:8a:52:81:eb:fa:fd:44:5f:
         46:e7:9c:b7:74:7e:a9:73:87:cc:41:2f:28:21:f3:17:1a:12:
         04:58:c0:d3:8f:86:92:92:12:77:ff:53:7e:07:52:14:cc:0d:
         4c:73:82:3d:9e:ae:1c:a1:53:07:91:86:57:08:d9:40:08:4f:
         2b:55:de:f5:36:80:f2:63:0d:d3:9b:c4:42:cc:11:41:ee:4a:
         2a:7a:39:f5:55:73:97:e3:e3:ed:64:01:ca:c4:86:8c:fa:19:
         3f:ea:01:e4:3e:7c:0d:5c:74:1d:85:00:8f:bb:1b:ba:8b:d7:
         65:e2:3c:7c:14:5e:7a:4c:c8:cb:82:83:9c:57:2b:72:b3:23:
         95:34:c7:e4:7f:bb:8a:03:37:e8:ec:9a:73:bf:0d:52:f7:98:
         ca:75:57:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 5 20:08:05 2025 by rpki-client