Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91AE972/245B3DDCA3E611EEADF94855C4F9AE02/DCCEA912A3EB11EE8049E335C4F9AE02.roa
File:                     DCCEA912A3EB11EE8049E335C4F9AE02.roa (raw, json)
Hash identifier:          mJeqjVOv7jvR5HIjSJKMtiF4WeNSaF9wcOpOHqbk62w=
Subject key identifier:   8D:09:AC:3E:01:B0:E6:4D:2D:F5:D9:2C:9A:58:8B:AB:EA:E5:20:FC
Certificate issuer:       /CN=A91AE972/serialNumber=5D185B712D93056BF274B8B7A898C69254EBB983
Certificate serial:       011B
Authority key identifier: 5D:18:5B:71:2D:93:05:6B:F2:74:B8:B7:A8:98:C6:92:54:EB:B9:83
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XRhbcS2TBWvydLi3qJjGklTruYM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91AE972/245B3DDCA3E611EEADF94855C4F9AE02/DCCEA912A3EB11EE8049E335C4F9AE02.roa
Signing time:             Sat 17 May 2025 05:05:03 +0000
ROA not before:           Sat 17 May 2025 05:05:03 +0000
ROA not after:            Tue 31 Mar 2026 00:00:00 +0000
asID:                     152189
IP address blocks:        36.50.198.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91AE972/245B3DDCA3E611EEADF94855C4F9AE02/XRhbcS2TBWvydLi3qJjGklTruYM.crl
                          rsync://rpki.apnic.net/member_repository/A91AE972/245B3DDCA3E611EEADF94855C4F9AE02/XRhbcS2TBWvydLi3qJjGklTruYM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XRhbcS2TBWvydLi3qJjGklTruYM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 16 Jun 2025 03:57:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 283 (0x11b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91AE972, serialNumber=5D185B712D93056BF274B8B7A898C69254EBB983
        Validity
            Not Before: May 17 05:05:03 2025 GMT
            Not After : Mar 31 00:00:00 2026 GMT
        Subject: CN=682818fe-9a3d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:dc:a5:c9:b4:ba:ac:52:72:72:70:e3:21:45:
                    c3:64:34:d6:2d:8a:6d:02:21:fa:f8:c4:62:75:7c:
                    81:6f:2e:77:48:80:cb:c0:84:2a:30:99:89:f2:51:
                    ed:b5:34:b0:cc:95:52:57:1a:e1:02:1a:32:5f:9d:
                    52:dc:54:8f:38:d5:e1:9a:be:20:51:92:2e:9a:03:
                    30:85:d5:5c:46:5f:e0:61:61:67:6b:b0:98:66:20:
                    02:f9:d4:99:33:c5:13:1e:21:8e:28:79:22:6b:61:
                    e5:08:df:89:08:74:8b:f3:2a:27:1e:64:9f:a3:ff:
                    bb:a5:df:47:12:65:6d:1c:06:10:e7:c1:62:19:a8:
                    64:69:6c:b5:9c:33:c4:ba:5c:fb:17:43:ee:97:06:
                    29:54:70:25:f0:22:4d:be:39:61:b6:c0:bb:19:95:
                    48:88:67:7b:ea:9d:8c:4a:c9:f2:ad:7e:14:a5:76:
                    13:fd:7f:33:54:d6:2e:12:83:2d:19:fe:ea:08:c8:
                    5d:ae:1a:fa:5a:df:58:8a:eb:dc:0f:b8:2f:40:52:
                    10:da:8b:99:09:a5:58:67:a4:6f:88:b1:39:ab:f9:
                    f8:60:be:7e:9f:a4:26:cf:cb:ba:e7:af:fd:1f:08:
                    26:5b:33:8b:98:40:b0:73:83:38:a1:d3:c0:eb:b7:
                    91:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8D:09:AC:3E:01:B0:E6:4D:2D:F5:D9:2C:9A:58:8B:AB:EA:E5:20:FC
            X509v3 Authority Key Identifier:
                keyid:5D:18:5B:71:2D:93:05:6B:F2:74:B8:B7:A8:98:C6:92:54:EB:B9:83

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91AE972/245B3DDCA3E611EEADF94855C4F9AE02/XRhbcS2TBWvydLi3qJjGklTruYM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XRhbcS2TBWvydLi3qJjGklTruYM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AE972/245B3DDCA3E611EEADF94855C4F9AE02/DCCEA912A3EB11EE8049E335C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  36.50.198.0/24

    Signature Algorithm: sha256WithRSAEncryption
         83:19:ff:33:4a:d2:3a:7d:9f:20:89:e8:a4:a7:1b:12:c7:cb:
         3c:56:03:ba:cd:54:f8:d9:f2:b7:95:76:b4:bc:f1:07:6a:01:
         8e:92:6d:4b:80:80:1f:ea:97:1e:cd:34:3d:b1:6e:3e:5a:99:
         af:6f:89:d3:68:d5:5b:46:73:b8:b0:67:40:f2:cf:05:2f:cb:
         61:1b:58:b4:9e:7d:04:66:3b:ba:27:8f:b9:a3:46:f7:0f:a3:
         fd:b6:48:a0:14:77:80:e5:f4:5d:1f:f0:b6:fb:fb:8f:e1:bb:
         4d:6e:0a:8d:a6:5f:32:2f:7c:6a:a6:94:1e:54:72:d4:04:d5:
         45:1b:a1:fe:a7:0a:d8:de:56:01:d5:f6:08:ed:0e:b8:6e:86:
         c5:db:3c:fe:65:f2:31:ad:cd:57:c6:0c:a5:af:51:eb:4d:ec:
         b4:2d:eb:35:98:d5:30:6f:fc:87:7e:08:b4:0b:0c:ac:25:82:
         c1:68:42:60:84:5e:87:65:7f:3b:01:ed:5f:6a:b0:f3:07:da:
         d2:ac:fd:9b:2b:08:f8:21:48:bf:67:a5:69:fc:51:d3:5b:30:
         c1:fe:45:93:7c:f4:44:5b:23:2c:37:a7:14:cb:44:3f:12:5f:
         bf:5c:8b:62:ac:6b:1d:f9:2c:cd:32:c8:11:7e:19:cf:8f:b4:
         5b:fb:79:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 10 12:53:01 2025 by rpki-client