Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91F4268/C78EBCEA219311EC900C5653C4F9AE02/905F258E24F211EEA0863328C4F9AE02.roa
File:                     905F258E24F211EEA0863328C4F9AE02.roa (raw, json)
Hash identifier:          JFZr5fqj2WXrU9XCj8pCx90LDWf5PYcEkCopcpVaJPw=
Subject key identifier:   DC:57:1D:97:21:95:E2:C0:59:75:CF:2C:26:D9:64:DF:ED:31:A5:4E
Certificate issuer:       /CN=A91F4268/serialNumber=93732F3FC31359BBBF8B379624BF91351CCAD857
Certificate serial:       0515
Authority key identifier: 93:73:2F:3F:C3:13:59:BB:BF:8B:37:96:24:BF:91:35:1C:CA:D8:57
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/k3MvP8MTWbu_izeWJL-RNRzK2Fc.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91F4268/C78EBCEA219311EC900C5653C4F9AE02/905F258E24F211EEA0863328C4F9AE02.roa
Signing time:             Thu 06 Feb 2025 23:42:20 +0000
ROA not before:           Thu 06 Feb 2025 23:42:20 +0000
ROA not after:            Tue 31 Mar 2026 00:00:00 +0000
asID:                     45396
IP address blocks:        203.9.179.0/24 maxlen: 24
                          203.9.181.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91F4268/C78EBCEA219311EC900C5653C4F9AE02/k3MvP8MTWbu_izeWJL-RNRzK2Fc.crl
                          rsync://rpki.apnic.net/member_repository/A91F4268/C78EBCEA219311EC900C5653C4F9AE02/k3MvP8MTWbu_izeWJL-RNRzK2Fc.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/k3MvP8MTWbu_izeWJL-RNRzK2Fc.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 23 Apr 2025 23:30:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1301 (0x515)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91F4268, serialNumber=93732F3FC31359BBBF8B379624BF91351CCAD857
        Validity
            Not Before: Feb  6 23:42:20 2025 GMT
            Not After : Mar 31 00:00:00 2026 GMT
        Subject: CN=67a548db-9127
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:e2:e1:94:1d:18:b2:c0:cf:b0:f1:b2:83:91:
                    f4:d7:30:76:07:1e:f3:f7:ae:38:b0:7b:7b:92:6c:
                    60:35:b8:69:99:53:d5:30:d8:e2:78:cc:a4:0b:41:
                    ee:bb:8b:fc:6c:bb:05:2a:f1:08:14:21:50:e7:af:
                    4d:cc:35:55:6b:b3:5d:10:c7:a0:50:3a:2b:b2:23:
                    d3:15:fd:8e:06:fb:d9:61:ec:e2:85:a0:83:df:43:
                    7e:0a:16:b9:8a:74:87:18:f6:58:30:b6:13:cc:74:
                    70:46:5a:f6:12:64:5c:70:fa:23:8d:2d:09:91:f1:
                    80:36:1a:d2:cf:df:e3:a0:37:91:e7:d3:9b:62:60:
                    ba:45:4c:52:2b:45:a2:f7:0a:0f:bc:ad:50:27:55:
                    c3:79:1e:47:89:2b:a1:8c:fb:17:1a:bf:04:06:53:
                    3e:50:be:20:0c:8e:6c:87:a9:35:6d:db:64:fe:fe:
                    d2:53:df:06:34:f7:34:35:91:b1:94:87:8e:b4:4a:
                    f3:78:57:00:66:a1:c0:5d:e8:81:93:bc:95:e4:1b:
                    ca:76:95:70:4f:b6:44:fb:ea:ac:41:4c:63:5d:d2:
                    f9:33:12:36:09:3a:d5:fe:1b:88:fb:27:93:6c:67:
                    fe:31:51:62:03:d3:ef:bf:a1:00:6b:b6:2e:ff:f7:
                    96:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DC:57:1D:97:21:95:E2:C0:59:75:CF:2C:26:D9:64:DF:ED:31:A5:4E
            X509v3 Authority Key Identifier:
                keyid:93:73:2F:3F:C3:13:59:BB:BF:8B:37:96:24:BF:91:35:1C:CA:D8:57

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91F4268/C78EBCEA219311EC900C5653C4F9AE02/k3MvP8MTWbu_izeWJL-RNRzK2Fc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/k3MvP8MTWbu_izeWJL-RNRzK2Fc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F4268/C78EBCEA219311EC900C5653C4F9AE02/905F258E24F211EEA0863328C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  203.9.179.0/24
                  203.9.181.0/24

    Signature Algorithm: sha256WithRSAEncryption
         0d:23:99:6e:cd:fe:6b:79:ea:81:2a:02:10:fc:1d:c9:af:d6:
         47:1a:46:f5:32:21:fc:c9:b1:f8:20:f8:cd:b4:e1:e5:68:15:
         fe:65:28:c9:6e:93:69:db:2e:98:67:c6:71:6c:d6:10:93:ae:
         fb:22:d3:4d:4d:71:be:91:3a:dc:e1:f8:f4:a4:9b:08:7a:64:
         4c:4a:8c:18:39:b1:4d:08:14:88:05:8e:7a:bf:d6:a5:0a:6a:
         a4:de:1d:54:70:26:a5:4c:ab:9e:5b:05:98:45:11:ea:37:d7:
         fe:76:51:1c:96:7f:6e:1a:00:57:10:99:d0:76:15:38:0c:89:
         1c:9b:97:58:8f:bd:04:ca:be:61:d0:a6:c6:53:de:26:f5:60:
         52:41:18:82:25:e4:f4:b3:75:39:ea:16:4f:1c:73:b4:3d:12:
         d8:dd:9a:a7:2c:34:9e:55:81:ac:e4:d7:3d:3e:99:df:8f:5d:
         bf:eb:e8:43:8a:49:7e:fd:3b:f1:35:b4:c9:2f:29:41:36:a8:
         f9:5c:a9:ad:4d:98:1c:ce:06:46:37:e2:72:7c:c2:81:73:98:
         0a:e1:bf:3f:57:df:72:4c:33:c9:ce:73:ef:f3:8e:ff:9a:b3:
         dd:5a:1c:c7:d4:34:c0:0c:c5:2b:33:63:77:89:d7:22:7b:21:
         f9:d9:b1:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 18 00:48:55 2025 by rpki-client