Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91C1323/084D88D495B711EABB824F1BC4F9AE02/3741E882335B11F09856AA2CC4F9AE02.roa
File:                     3741E882335B11F09856AA2CC4F9AE02.roa (raw, json)
Hash identifier:          I1om6Z35PgcQnR4tjz4pbyGoyUMuqTXYeYm6doCi4Eo=
Subject key identifier:   0D:5C:36:E9:70:93:1E:89:09:3D:FF:1F:52:71:A8:84:8F:84:B5:CD
Certificate issuer:       /CN=A91C1323/serialNumber=412A6511CFEDCFECB5590C96C8C361E2FED44857
Certificate serial:       605C
Authority key identifier: 41:2A:65:11:CF:ED:CF:EC:B5:59:0C:96:C8:C3:61:E2:FE:D4:48:57
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QSplEc_tz-y1WQyWyMNh4v7USFc.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91C1323/084D88D495B711EABB824F1BC4F9AE02/3741E882335B11F09856AA2CC4F9AE02.roa
Signing time:             Sat 17 May 2025 20:12:11 +0000
ROA not before:           Sat 17 May 2025 20:12:11 +0000
ROA not after:            Thu 30 Jul 2026 00:00:00 +0000
asID:                     38802
IP address blocks:        118.143.1.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91C1323/084D88D495B711EABB824F1BC4F9AE02/QSplEc_tz-y1WQyWyMNh4v7USFc.crl
                          rsync://rpki.apnic.net/member_repository/A91C1323/084D88D495B711EABB824F1BC4F9AE02/QSplEc_tz-y1WQyWyMNh4v7USFc.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QSplEc_tz-y1WQyWyMNh4v7USFc.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 09 Jun 2025 20:20:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 24668 (0x605c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91C1323, serialNumber=412A6511CFEDCFECB5590C96C8C361E2FED44857
        Validity
            Not Before: May 17 20:12:11 2025 GMT
            Not After : Jul 30 00:00:00 2026 GMT
        Subject: CN=6828ed9b-bef5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:5e:25:b2:1a:69:3d:dd:70:2e:be:98:69:c8:
                    eb:bb:ba:98:37:4b:4c:da:72:e1:f2:30:68:61:e8:
                    26:6d:28:49:ae:fa:89:72:fa:43:22:6a:2e:27:ad:
                    b9:ff:6e:07:23:d5:72:03:1f:87:6e:2e:a6:69:a0:
                    dc:ed:b3:c4:8d:2b:99:7c:1a:07:b6:0a:ee:1b:5d:
                    ed:ae:db:bb:df:f4:a1:c2:d8:e0:d4:5e:47:e2:71:
                    12:0e:8e:f6:17:9f:8d:cb:6c:b1:2d:30:29:a2:7a:
                    c0:cc:0d:e3:be:dd:77:01:df:c7:22:e7:db:c3:f8:
                    fb:54:cd:b1:59:79:51:31:22:1f:8c:65:7f:fc:5a:
                    0b:42:7d:9a:fc:5e:bf:b1:79:a0:6b:a4:1e:8d:fc:
                    06:db:50:e7:9d:27:f1:87:b0:81:90:50:34:c7:af:
                    0e:48:77:b0:05:bf:93:a0:04:92:4b:1c:0a:9e:d1:
                    ea:ee:cc:ca:32:7f:c1:a3:d4:23:22:17:a6:30:7b:
                    4d:50:44:7c:cd:33:c5:dc:f9:3d:05:05:f1:8a:a0:
                    28:d5:b4:9e:0a:58:d0:b4:26:f7:c9:84:89:e7:74:
                    5e:52:a2:06:2f:73:d8:18:47:e5:37:f4:31:66:0c:
                    72:41:f1:29:bc:8f:c4:55:26:d7:e0:14:12:6e:79:
                    30:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0D:5C:36:E9:70:93:1E:89:09:3D:FF:1F:52:71:A8:84:8F:84:B5:CD
            X509v3 Authority Key Identifier:
                keyid:41:2A:65:11:CF:ED:CF:EC:B5:59:0C:96:C8:C3:61:E2:FE:D4:48:57

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91C1323/084D88D495B711EABB824F1BC4F9AE02/QSplEc_tz-y1WQyWyMNh4v7USFc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QSplEc_tz-y1WQyWyMNh4v7USFc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C1323/084D88D495B711EABB824F1BC4F9AE02/3741E882335B11F09856AA2CC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  118.143.1.0/24

    Signature Algorithm: sha256WithRSAEncryption
         1b:5c:29:a8:4f:48:58:3a:63:f5:76:c8:1c:ca:18:ba:5f:5d:
         c9:fa:05:73:c4:2c:d2:b5:cc:6e:dd:1e:c0:cd:c2:c5:0e:93:
         c6:24:9b:98:a3:cc:35:35:58:dc:bf:e5:cd:4e:61:4c:96:30:
         9d:b9:33:d0:38:b6:fd:9d:9e:e0:4e:97:7a:05:40:3f:de:d6:
         30:a5:76:62:d5:42:84:a6:55:de:0b:61:1f:82:a4:e9:f6:78:
         a7:4b:af:cb:39:05:35:96:4a:e9:e5:f6:86:e6:6f:9f:3c:14:
         ec:5b:59:36:15:af:3c:23:b3:ca:c9:be:2e:c4:14:f9:1d:a1:
         30:44:af:74:01:46:03:3a:69:91:79:39:5d:2e:9e:63:eb:43:
         32:7e:77:1f:08:96:48:24:71:78:0e:33:9c:bb:cc:57:64:7d:
         95:90:65:73:96:81:dd:2b:ab:3c:9c:e9:c1:6d:db:22:13:57:
         dc:4b:18:01:a5:ab:e6:d0:9e:59:68:bb:4e:6d:60:d5:cb:5a:
         06:a0:ac:47:98:3d:64:d6:ba:e4:34:21:a1:03:5e:52:25:1d:
         1a:7b:96:37:01:05:6d:f9:d0:72:fc:53:cb:61:4e:eb:ae:10:
         2d:ef:3f:74:ee:cf:ab:c1:14:ce:14:ab:aa:75:b7:4a:39:35:
         9d:75:17:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 3 23:57:28 2025 by rpki-client