Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A919EAF3/9D200DBC6D1811E7A815DA80C4F9AE02/361BDEB6315011F0A08FB267C4F9AE02.roa
File:                     361BDEB6315011F0A08FB267C4F9AE02.roa (raw, json)
Hash identifier:          8NgyiTZuzWWxeh5N576WOky8V+rwppnwZswDffKQdlc=
Subject key identifier:   1F:2B:86:38:F9:44:51:AA:58:1A:9B:55:78:CF:17:76:97:E9:53:92
Certificate issuer:       /CN=A919EAF3/serialNumber=ED3694218DCB1EAF3D1AF5C6ABC031A6DB7E6CE5
Certificate serial:       1988
Authority key identifier: ED:36:94:21:8D:CB:1E:AF:3D:1A:F5:C6:AB:C0:31:A6:DB:7E:6C:E5
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7TaUIY3LHq89GvXGq8Axptt-bOU.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A919EAF3/9D200DBC6D1811E7A815DA80C4F9AE02/361BDEB6315011F0A08FB267C4F9AE02.roa
Signing time:             Thu 15 May 2025 05:48:22 +0000
ROA not before:           Thu 15 May 2025 05:48:22 +0000
ROA not after:            Tue 30 Sep 2025 00:00:00 +0000
asID:                     141109
IP address blocks:        43.255.58.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A919EAF3/9D200DBC6D1811E7A815DA80C4F9AE02/7TaUIY3LHq89GvXGq8Axptt-bOU.crl
                          rsync://rpki.apnic.net/member_repository/A919EAF3/9D200DBC6D1811E7A815DA80C4F9AE02/7TaUIY3LHq89GvXGq8Axptt-bOU.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7TaUIY3LHq89GvXGq8Axptt-bOU.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 07 Jun 2025 16:21:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 6536 (0x1988)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A919EAF3, serialNumber=ED3694218DCB1EAF3D1AF5C6ABC031A6DB7E6CE5
        Validity
            Not Before: May 15 05:48:22 2025 GMT
            Not After : Sep 30 00:00:00 2025 GMT
        Subject: CN=68258026-1496
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:c7:06:42:f4:42:0c:a7:d7:6f:5b:87:37:c3:
                    b3:fd:6f:97:e0:80:92:a9:98:ba:6a:30:68:0c:ac:
                    23:5c:38:77:cf:02:0c:83:2e:02:27:e7:2f:e6:5a:
                    ba:cd:14:e4:a1:aa:71:f7:74:a9:73:27:d6:74:0d:
                    2a:26:27:09:cd:54:d4:98:c3:8e:49:9a:9c:d0:20:
                    c1:f0:7d:c0:87:a4:f8:f7:8e:00:33:cc:31:f1:15:
                    89:a9:d3:04:9a:2e:48:9b:e7:d8:55:4f:2c:79:db:
                    ff:09:b0:1b:48:8b:e2:8e:39:3f:da:18:1a:b7:fe:
                    e4:a9:b0:72:b2:27:d3:30:50:23:8c:37:ae:00:cd:
                    36:ed:a9:78:8d:50:ab:18:b0:1a:e3:cd:8d:dc:59:
                    41:8d:6a:16:d3:29:1f:f8:cd:30:50:78:ee:15:05:
                    27:36:6d:0a:65:f3:2b:07:d9:f7:87:8b:37:c9:a2:
                    59:13:10:85:ba:96:9a:e5:65:9f:fb:d6:33:98:af:
                    fa:9c:4d:e8:54:43:c8:fb:ba:b3:f2:8d:83:17:ce:
                    cb:61:fc:98:22:91:ae:52:89:d7:04:23:24:ef:57:
                    9f:ac:aa:b0:bc:14:ae:5c:8a:67:5f:96:6d:70:6f:
                    7a:e1:14:fd:8f:dc:db:73:5b:88:d6:0f:e5:3f:09:
                    f0:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1F:2B:86:38:F9:44:51:AA:58:1A:9B:55:78:CF:17:76:97:E9:53:92
            X509v3 Authority Key Identifier:
                keyid:ED:36:94:21:8D:CB:1E:AF:3D:1A:F5:C6:AB:C0:31:A6:DB:7E:6C:E5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A919EAF3/9D200DBC6D1811E7A815DA80C4F9AE02/7TaUIY3LHq89GvXGq8Axptt-bOU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7TaUIY3LHq89GvXGq8Axptt-bOU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919EAF3/9D200DBC6D1811E7A815DA80C4F9AE02/361BDEB6315011F0A08FB267C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  43.255.58.0/23

    Signature Algorithm: sha256WithRSAEncryption
         89:55:64:9c:3b:2b:25:5e:46:65:43:0c:f0:f0:7a:be:8b:93:
         66:cb:68:36:06:75:c0:a3:5c:07:fe:7e:1d:13:63:bb:01:b9:
         e3:aa:78:fd:38:a2:a6:55:d4:a1:36:65:d0:83:4e:30:45:73:
         9b:b7:8d:b3:e3:60:b9:2d:95:30:e0:8b:5b:94:2b:13:41:94:
         bf:26:26:73:f5:43:61:5b:8d:58:50:f9:0d:ae:fa:91:44:a1:
         19:ca:af:dd:45:ce:8c:b6:8f:9d:da:c2:ee:59:cf:84:80:52:
         c7:5b:03:37:07:b7:06:e5:56:a5:38:6c:7b:2c:a2:bd:76:d9:
         be:bb:b3:49:ef:da:23:bb:0d:8e:f3:d4:d0:8a:2a:49:af:7a:
         26:d2:f8:d1:f2:9b:1b:5c:44:d7:94:f6:31:ae:1d:86:3a:d5:
         71:5e:34:69:63:39:6b:84:7a:43:1d:8f:1a:57:2d:5e:c4:f9:
         d2:39:12:ae:fd:8f:1b:06:db:c4:5e:7c:7e:ce:3d:3e:91:aa:
         0a:64:ab:29:a1:dd:f1:25:ee:26:c1:7d:b1:9a:59:ad:2a:6b:
         24:3d:72:26:49:9f:53:39:7f:70:de:55:24:7c:ec:a0:2d:28:
         a8:3d:3f:04:84:9f:36:04:cf:9a:d4:81:f2:aa:0d:ac:68:b0:
         96:26:0a:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 2 07:12:34 2025 by rpki-client