Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91C728A/537E46C6F9C411ED89682481C4F9AE02/C369BA98260D11F082934618C4F9AE02.roa
File:                     C369BA98260D11F082934618C4F9AE02.roa (raw, json)
Hash identifier:          Iy42QwXSYupuqL3QvzsRCg121JGBmvoKUxVedTulj7g=
Subject key identifier:   EF:51:8C:1A:54:8D:0E:AF:76:07:C1:8B:FB:C9:52:C3:38:63:F2:DB
Certificate issuer:       /CN=A91C728A/serialNumber=1DAAF45FB4D272407A52A63BB73965369E9120ED
Certificate serial:       0171
Authority key identifier: 1D:AA:F4:5F:B4:D2:72:40:7A:52:A6:3B:B7:39:65:36:9E:91:20:ED
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Har0X7TSckB6UqY7tzllNp6RIO0.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91C728A/537E46C6F9C411ED89682481C4F9AE02/C369BA98260D11F082934618C4F9AE02.roa
Signing time:             Wed 30 Apr 2025 21:55:00 +0000
ROA not before:           Wed 30 Apr 2025 21:55:00 +0000
ROA not after:            Fri 31 Oct 2025 00:00:00 +0000
asID:                     8075
IP address blocks:        202.12.70.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91C728A/537E46C6F9C411ED89682481C4F9AE02/Har0X7TSckB6UqY7tzllNp6RIO0.crl
                          rsync://rpki.apnic.net/member_repository/A91C728A/537E46C6F9C411ED89682481C4F9AE02/Har0X7TSckB6UqY7tzllNp6RIO0.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Har0X7TSckB6UqY7tzllNp6RIO0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 08 Jun 2025 03:25:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 369 (0x171)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91C728A, serialNumber=1DAAF45FB4D272407A52A63BB73965369E9120ED
        Validity
            Not Before: Apr 30 21:55:00 2025 GMT
            Not After : Oct 31 00:00:00 2025 GMT
        Subject: CN=68129c34-2591
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:fb:d2:57:16:5f:be:f6:d8:cc:aa:e5:4e:e4:
                    2e:2f:2f:ff:ac:c5:28:32:bb:af:ce:1a:6d:63:1e:
                    7c:0c:ac:54:40:2e:34:df:ba:45:0c:9c:f9:2b:2c:
                    66:75:10:21:52:cd:fe:ad:b2:42:d6:b2:b7:cf:6e:
                    31:3c:62:02:af:da:79:43:4e:14:db:92:13:ad:6f:
                    9f:44:de:7c:00:95:a9:b3:17:d2:15:48:6f:fa:f1:
                    db:7b:0b:6c:3c:f5:5a:01:9a:df:c3:17:f3:c7:dc:
                    20:8b:10:03:05:8f:8d:68:45:46:6e:71:16:22:28:
                    d0:fb:f5:47:b7:dc:74:bd:e8:a1:91:1d:12:61:77:
                    9c:c4:7b:f5:b0:c9:30:5f:ae:c1:7a:f9:94:22:ea:
                    49:db:5e:2e:33:6d:54:7b:a0:48:f8:ed:77:ed:0d:
                    e2:a5:43:74:fe:06:3e:ae:7d:59:65:27:e0:e0:be:
                    d1:4d:7e:4f:fe:6c:9f:77:65:ce:b1:13:bf:fe:d6:
                    4f:23:61:46:c4:a3:80:94:d2:87:6b:80:2f:17:ec:
                    b1:7b:7f:af:83:29:e9:c3:db:6c:ef:be:d4:04:dc:
                    60:d3:a0:b3:81:f9:32:74:15:c2:cb:4c:f9:18:4c:
                    e6:42:60:e6:8c:58:39:58:77:5c:6f:72:c5:af:00:
                    a1:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EF:51:8C:1A:54:8D:0E:AF:76:07:C1:8B:FB:C9:52:C3:38:63:F2:DB
            X509v3 Authority Key Identifier:
                keyid:1D:AA:F4:5F:B4:D2:72:40:7A:52:A6:3B:B7:39:65:36:9E:91:20:ED

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91C728A/537E46C6F9C411ED89682481C4F9AE02/Har0X7TSckB6UqY7tzllNp6RIO0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Har0X7TSckB6UqY7tzllNp6RIO0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C728A/537E46C6F9C411ED89682481C4F9AE02/C369BA98260D11F082934618C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  202.12.70.0/24

    Signature Algorithm: sha256WithRSAEncryption
         16:7c:5f:c0:01:14:29:b8:ef:88:c7:fb:5a:69:3c:3f:8b:23:
         28:3e:cf:77:b1:94:1a:f0:16:f6:34:eb:1f:95:ed:1a:3e:d1:
         de:9e:79:81:a4:a4:35:35:1f:8b:93:59:f6:4b:9b:e9:30:3b:
         2a:8f:b2:9d:38:4e:a5:09:23:b5:7c:da:ed:d0:39:eb:f5:4b:
         f4:96:86:ef:32:84:e1:bf:45:48:a2:41:e3:d6:73:5d:51:bd:
         74:60:fe:af:d4:25:26:9f:b0:d9:21:75:6a:e5:e5:1d:36:bc:
         ef:08:af:6a:cd:a7:00:73:9c:d4:12:d1:a4:71:84:7b:03:d0:
         ff:6b:a5:94:01:96:11:65:f9:d8:c7:e8:6a:24:41:55:6b:31:
         8e:aa:04:c2:11:26:2e:8f:8d:38:20:48:94:38:b6:8c:50:49:
         20:a0:e1:be:89:be:0e:6a:26:dc:bd:d3:45:b4:45:99:8d:a2:
         4b:c2:1d:24:e4:96:7e:57:c9:a8:be:74:60:c8:77:c7:c3:34:
         dc:1b:16:78:50:5f:e9:dd:4a:3e:06:77:d7:51:4e:4d:af:48:
         b8:e5:47:23:14:3d:07:d1:bc:99:54:6a:92:fa:5c:51:09:e1:
         bf:a3:60:f9:89:27:07:a3:a8:d1:4a:a5:da:84:ff:89:b6:d0:
         cb:35:ad:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 2 06:53:41 2025 by rpki-client