Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91A0832/9DAF780E1D9411E29901F3F808B02CD2/B34368F8BA9311EEB0A64B2AC4F9AE02.roa
File:                     B34368F8BA9311EEB0A64B2AC4F9AE02.roa (raw, json)
Hash identifier:          vzBcTdf96+UTQqQZlkeYwtQci7kemGbUS01k0jfvWtI=
Subject key identifier:   4D:A9:BC:C6:AE:16:3A:41:21:B2:E3:87:11:31:66:12:E2:17:EA:55
Certificate issuer:       /CN=A91A0832/serialNumber=9ED9055107C70F85BB91A8DA0270B5CA760AEB54
Certificate serial:       36B3
Authority key identifier: 9E:D9:05:51:07:C7:0F:85:BB:91:A8:DA:02:70:B5:CA:76:0A:EB:54
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ntkFUQfHD4W7kajaAnC1ynYK61Q.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91A0832/9DAF780E1D9411E29901F3F808B02CD2/B34368F8BA9311EEB0A64B2AC4F9AE02.roa
Signing time:             Sat 22 Mar 2025 15:00:53 +0000
ROA not before:           Sat 22 Mar 2025 15:00:53 +0000
ROA not after:            Wed 01 Jul 2026 00:00:00 +0000
asID:                     0
IP address blocks:        58.181.127.0/24 maxlen: 24
                          2001:df2:b940::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91A0832/9DAF780E1D9411E29901F3F808B02CD2/ntkFUQfHD4W7kajaAnC1ynYK61Q.crl
                          rsync://rpki.apnic.net/member_repository/A91A0832/9DAF780E1D9411E29901F3F808B02CD2/ntkFUQfHD4W7kajaAnC1ynYK61Q.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ntkFUQfHD4W7kajaAnC1ynYK61Q.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 15 Apr 2025 14:49:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 14003 (0x36b3)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A0832
        Validity
            Not Before: Mar 22 15:00:53 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=67ded0a5-54e9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:cd:9a:2d:bf:2f:ee:61:64:9d:f9:ed:35:26:
                    68:24:c1:b0:21:4b:bd:19:55:64:d8:5c:c3:e9:e3:
                    ec:47:f7:a8:94:32:21:12:89:3b:51:e1:b5:35:b0:
                    18:fa:55:4c:b5:8e:9e:fe:eb:d0:b6:9d:28:4b:31:
                    22:22:f3:fa:12:ac:fd:17:cc:70:29:81:f7:27:ae:
                    cc:25:50:71:5d:5e:f2:f9:8d:9b:97:d6:cb:81:4a:
                    39:b8:68:ad:e2:ac:41:88:db:64:9a:fd:a7:c0:bc:
                    54:f9:16:12:92:61:30:38:47:a0:1a:64:a0:68:da:
                    3f:19:45:54:e2:61:45:8f:5b:3d:72:bc:32:55:9f:
                    1d:57:bf:7f:e3:e9:0c:3d:78:ff:7b:f4:95:de:4a:
                    60:8a:07:9b:f7:b9:c7:55:ca:55:c8:ab:99:f5:40:
                    61:00:14:19:13:c4:a0:d3:dc:fe:01:be:30:2f:dc:
                    fa:04:fb:74:e2:f5:f4:b1:d7:7f:3d:53:14:ab:d6:
                    c9:80:66:dd:88:b6:11:48:d6:75:38:24:ea:72:3b:
                    03:cd:37:11:ea:ff:a1:bb:67:70:c4:45:0d:ce:11:
                    c7:c8:96:11:df:90:fc:76:82:c1:ef:9e:d2:a9:30:
                    04:de:23:f8:5f:32:25:ea:85:4e:e8:8a:52:7e:ab:
                    41:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4D:A9:BC:C6:AE:16:3A:41:21:B2:E3:87:11:31:66:12:E2:17:EA:55
            X509v3 Authority Key Identifier:
                keyid:9E:D9:05:51:07:C7:0F:85:BB:91:A8:DA:02:70:B5:CA:76:0A:EB:54

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91A0832/9DAF780E1D9411E29901F3F808B02CD2/ntkFUQfHD4W7kajaAnC1ynYK61Q.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ntkFUQfHD4W7kajaAnC1ynYK61Q.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A0832/9DAF780E1D9411E29901F3F808B02CD2/B34368F8BA9311EEB0A64B2AC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  58.181.127.0/24
                IPv6:
                  2001:df2:b940::/48

    Signature Algorithm: sha256WithRSAEncryption
         ca:1b:7e:20:9c:d9:a4:eb:9b:0a:7b:3f:49:a0:42:9b:22:7f:
         43:91:4f:22:c3:8b:29:84:5b:ea:54:a0:01:ba:68:7b:ef:b4:
         68:77:f8:a0:cf:e1:ba:5d:77:cc:d4:4a:2f:49:39:78:5e:ac:
         19:b0:3c:b5:de:06:19:06:6c:fb:f2:31:0e:0d:ed:0a:fd:9d:
         44:d2:ec:6d:69:e1:5d:60:93:f9:0f:23:e0:af:b4:b7:61:97:
         ac:2c:21:32:f9:03:21:65:28:3a:21:9f:83:c6:03:dd:51:f9:
         b9:f5:c4:04:bf:0a:5f:42:0f:a5:4f:dd:42:83:0f:f0:57:73:
         34:ce:ee:c5:68:a0:9e:d8:92:a0:cd:73:2d:62:5f:dc:06:6d:
         5c:82:e2:30:73:c4:42:94:a0:a7:d6:e6:97:75:75:d7:3a:ac:
         ab:64:c7:79:1d:0f:ca:75:d8:a5:e7:97:ed:69:6b:0d:9a:b1:
         e8:32:58:5d:a9:09:9b:d1:00:8f:71:ec:b3:07:54:3f:17:f0:
         c2:38:aa:b0:38:66:6b:0a:fe:68:84:fd:62:98:f7:1d:8c:11:
         60:18:67:48:99:f3:6e:d4:19:30:88:4e:af:fc:3e:e5:b4:0f:
         fb:c2:5f:67:b3:e6:55:e0:5d:00:d1:4e:96:58:e9:db:3c:85:
         01:b6:22:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 10 07:06:36 2025 by rpki-client