Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91C6BB2/5D4CC2F608C811ED944F2566C4F9AE02/810DCA288C6511EF813EB90EC4F9AE02.roa
File:                     810DCA288C6511EF813EB90EC4F9AE02.roa (raw, json)
Hash identifier:          uXjCh7TkzA4xr6P8TlTEkjQ53fF7fy/5V3MP61ICuDM=
Subject key identifier:   BB:BB:4D:FE:39:49:FD:D5:A5:59:59:3A:D7:3B:AC:31:B1:87:CA:A1
Certificate issuer:       /CN=A91C6BB2/serialNumber=03BC749AC1682C4B46DA259AB7EB662AA225B0EE
Certificate serial:       0221
Authority key identifier: 03:BC:74:9A:C1:68:2C:4B:46:DA:25:9A:B7:EB:66:2A:A2:25:B0:EE
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/A7x0msFoLEtG2iWat-tmKqIlsO4.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91C6BB2/5D4CC2F608C811ED944F2566C4F9AE02/810DCA288C6511EF813EB90EC4F9AE02.roa
Signing time:             Thu 17 Oct 2024 08:55:06 +0000
ROA not before:           Thu 17 Oct 2024 08:55:06 +0000
ROA not after:            Sun 31 Aug 2025 00:00:00 +0000
asID:                     150774
IP address blocks:        45.117.61.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91C6BB2/5D4CC2F608C811ED944F2566C4F9AE02/A7x0msFoLEtG2iWat-tmKqIlsO4.crl
                          rsync://rpki.apnic.net/member_repository/A91C6BB2/5D4CC2F608C811ED944F2566C4F9AE02/A7x0msFoLEtG2iWat-tmKqIlsO4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/A7x0msFoLEtG2iWat-tmKqIlsO4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 21 Feb 2025 05:15:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 545 (0x221)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91C6BB2
        Validity
            Not Before: Oct 17 08:55:06 2024 GMT
            Not After : Aug 31 00:00:00 2025 GMT
        Subject: CN=6710d0e9-970b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:10:e2:56:47:85:b9:0a:c8:68:91:18:a1:88:
                    c6:68:15:dd:ef:55:9b:d4:6d:08:47:9a:e3:89:fe:
                    c8:09:88:31:21:4b:09:7f:a5:72:bc:55:d8:32:7d:
                    30:06:69:e4:12:6f:ab:3f:cd:2c:8e:e4:c9:c1:37:
                    76:a9:0a:d0:5e:e8:5c:db:c6:57:f2:93:86:b2:2d:
                    57:22:63:14:fc:78:b4:2a:ba:d1:8a:2c:6a:06:b1:
                    35:eb:89:35:57:4a:96:58:3e:19:99:8e:ac:d9:b2:
                    58:b3:03:58:b0:a5:24:3c:26:86:b8:04:02:db:7e:
                    5d:a4:a5:08:da:32:b0:26:43:4d:5c:6d:00:af:37:
                    3c:28:ed:c9:6d:3b:bc:8a:46:23:6f:f8:df:fe:28:
                    b9:37:af:1c:62:0c:de:46:39:1c:d5:0e:bc:13:3b:
                    48:cc:66:98:5f:43:64:12:27:f7:f9:d1:96:07:6e:
                    3d:84:3b:15:f3:f7:37:7a:2c:1e:11:25:93:07:37:
                    a5:76:46:de:f8:8e:8a:db:4e:5a:22:4d:0c:66:59:
                    70:b1:2c:a5:fd:55:98:f8:f6:a0:c6:d6:9b:80:de:
                    b8:42:a6:de:14:1e:74:47:5b:5d:a4:18:cc:2a:d3:
                    1e:e8:13:eb:50:88:6b:a9:7e:a3:c6:d9:03:fb:ae:
                    8b:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BB:BB:4D:FE:39:49:FD:D5:A5:59:59:3A:D7:3B:AC:31:B1:87:CA:A1
            X509v3 Authority Key Identifier:
                keyid:03:BC:74:9A:C1:68:2C:4B:46:DA:25:9A:B7:EB:66:2A:A2:25:B0:EE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91C6BB2/5D4CC2F608C811ED944F2566C4F9AE02/A7x0msFoLEtG2iWat-tmKqIlsO4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/A7x0msFoLEtG2iWat-tmKqIlsO4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C6BB2/5D4CC2F608C811ED944F2566C4F9AE02/810DCA288C6511EF813EB90EC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.117.61.0/24

    Signature Algorithm: sha256WithRSAEncryption
         82:45:7d:a5:cf:2f:49:7c:87:ca:81:c7:04:81:eb:2e:a5:1b:
         81:b1:36:d7:b0:59:fe:90:8b:98:16:a0:19:19:44:31:ff:06:
         98:c8:6b:b3:c7:ec:63:61:20:65:f2:75:3a:ea:ae:27:a7:18:
         34:7b:dd:a0:ca:e5:4b:7a:13:3a:c3:a8:0a:7c:df:cf:d7:35:
         c4:b8:e9:ac:bb:f2:ac:55:de:d6:39:52:dc:d3:8b:b9:8b:3a:
         3f:3d:a8:ac:84:7a:28:2a:cc:77:33:7b:da:ba:2a:9c:a3:75:
         6f:7e:c3:1a:f9:26:0a:98:b9:2a:d3:d0:61:99:bd:01:74:df:
         da:f2:d2:34:cf:d3:c8:7b:e5:ed:44:f5:6d:c7:92:9d:6d:de:
         42:ba:27:9e:a4:28:bb:20:3f:e7:ca:91:e2:2f:67:46:19:f8:
         62:ab:4f:df:7a:58:21:32:05:3b:c8:5a:e4:69:7d:7a:0a:82:
         a8:a7:d3:d3:d9:7c:d6:9d:31:de:5a:1e:f9:29:a1:d7:e0:74:
         19:d4:03:50:89:ca:9a:4e:50:f3:c8:ad:39:b7:13:1e:91:f0:
         0d:0a:df:74:6e:c5:5f:11:11:eb:dd:37:30:93:dc:14:63:b6:
         36:90:b7:ef:62:34:e8:25:a6:9f:97:bf:9f:78:21:60:3f:a7:
         82:a1:c5:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 08:31:59 2025 by rpki-client