Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9110718/9283EDEE0E9411EB9669E133C4F9AE02/8197DA7E0E9711EB9A6C2B3CC4F9AE02.roa
File:                     8197DA7E0E9711EB9A6C2B3CC4F9AE02.roa (raw, json)
Hash identifier:          bczxjt2FwG7ZvqXhUNRx4J14OqU7vScZjaB3EzaWWXs=
Subject key identifier:   42:34:F8:16:32:20:CF:9E:7A:D4:72:A0:B3:C9:25:A8:A5:EA:EF:71
Certificate issuer:       /CN=A9110718/serialNumber=76174625E81632D38DF62A83B57B03BA2887E6F5
Certificate serial:       07B7
Authority key identifier: 76:17:46:25:E8:16:32:D3:8D:F6:2A:83:B5:7B:03:BA:28:87:E6:F5
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dhdGJegWMtON9iqDtXsDuiiH5vU.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9110718/9283EDEE0E9411EB9669E133C4F9AE02/8197DA7E0E9711EB9A6C2B3CC4F9AE02.roa
Signing time:             Wed 16 Apr 2025 21:31:43 +0000
ROA not before:           Wed 16 Apr 2025 21:31:43 +0000
ROA not after:            Mon 31 Aug 2026 00:00:00 +0000
asID:                     132792
IP address blocks:        202.92.152.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9110718/9283EDEE0E9411EB9669E133C4F9AE02/dhdGJegWMtON9iqDtXsDuiiH5vU.crl
                          rsync://rpki.apnic.net/member_repository/A9110718/9283EDEE0E9411EB9669E133C4F9AE02/dhdGJegWMtON9iqDtXsDuiiH5vU.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dhdGJegWMtON9iqDtXsDuiiH5vU.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 01 May 2025 21:16:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1975 (0x7b7)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9110718, serialNumber=76174625E81632D38DF62A83B57B03BA2887E6F5
        Validity
            Not Before: Apr 16 21:31:43 2025 GMT
            Not After : Aug 31 00:00:00 2026 GMT
        Subject: CN=680021be-c7ca
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:27:65:e4:7c:cc:63:31:db:aa:a9:23:2b:68:
                    7b:d2:c9:93:c9:05:cd:02:ea:5a:57:a1:80:0a:3e:
                    7a:5f:6c:87:69:c0:28:f7:b1:c8:1d:6f:89:81:07:
                    54:96:46:6a:73:62:e0:61:ce:c9:52:79:27:b1:4c:
                    14:13:3c:b4:db:b7:a9:35:06:18:d2:6d:f7:3f:18:
                    00:67:4b:27:dd:f9:dc:9b:69:da:35:b6:5f:b9:ed:
                    90:70:2f:7f:e4:7d:c6:10:f1:84:e6:1b:94:1c:77:
                    06:f6:6e:cb:61:c2:9a:b4:5e:85:5b:17:f1:3a:41:
                    13:f5:95:0a:c8:99:09:1f:1a:3b:9d:1f:42:ec:ad:
                    23:12:87:d7:30:db:a4:31:1d:17:f3:aa:35:8f:bf:
                    bc:8c:98:c0:45:45:2c:8c:0b:3f:0f:ca:fd:d8:a7:
                    ff:a8:81:50:ee:67:60:c3:a9:67:1d:ae:b3:12:b7:
                    ec:38:4d:e5:25:ed:9c:0e:a9:ae:1b:cd:19:fc:b5:
                    ae:38:c5:72:33:9f:74:7f:3c:65:6d:7c:ff:2a:d7:
                    fe:53:5b:c4:e6:c2:5b:4c:96:65:22:49:de:bd:de:
                    70:af:7c:6f:ba:82:d6:69:43:25:db:53:56:1e:7a:
                    a0:6b:d8:3f:b1:50:bb:b2:6f:8e:6f:7f:58:c5:49:
                    48:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                42:34:F8:16:32:20:CF:9E:7A:D4:72:A0:B3:C9:25:A8:A5:EA:EF:71
            X509v3 Authority Key Identifier:
                keyid:76:17:46:25:E8:16:32:D3:8D:F6:2A:83:B5:7B:03:BA:28:87:E6:F5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9110718/9283EDEE0E9411EB9669E133C4F9AE02/dhdGJegWMtON9iqDtXsDuiiH5vU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dhdGJegWMtON9iqDtXsDuiiH5vU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9110718/9283EDEE0E9411EB9669E133C4F9AE02/8197DA7E0E9711EB9A6C2B3CC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  202.92.152.0/24

    Signature Algorithm: sha256WithRSAEncryption
         3f:16:a3:fb:3a:98:56:67:5c:3c:1a:e6:41:35:6b:19:1a:d0:
         03:28:5d:89:44:33:ee:77:2f:98:fc:ff:47:5e:bf:be:c8:75:
         2a:5d:39:61:a1:81:bd:76:61:b7:ea:c1:ef:76:a2:20:e2:4c:
         af:70:51:5f:2d:fa:6e:dc:61:23:5c:0a:9a:b3:f5:13:5b:34:
         6e:30:5e:73:23:0d:37:60:09:9e:28:d6:8d:b9:a0:e0:50:8c:
         0e:0b:b8:20:f4:ba:0b:47:52:19:24:52:7d:ac:01:20:ab:04:
         21:10:da:9d:7a:7b:6d:3f:fe:51:db:d3:2b:e9:26:d7:9c:6c:
         a5:3c:05:71:f3:00:96:89:a0:82:56:36:d8:0d:94:86:fd:a5:
         76:71:b3:2b:2d:24:e5:35:ac:8c:03:f2:c3:a5:3c:d6:9f:2a:
         c6:23:59:d7:5c:b7:73:7d:1b:3b:3d:e8:ac:c4:75:59:74:e0:
         81:f6:85:de:9f:6d:0c:ad:9f:83:4e:40:80:da:ba:8c:ba:87:
         c0:7c:b2:76:55:fb:e6:91:b2:6c:cc:ce:b9:51:6b:8b:26:19:
         d6:3f:f7:7b:17:e1:51:42:41:e0:40:f9:5b:a0:69:e6:1d:f6:
         62:dd:40:8f:69:40:e2:64:bf:ba:55:48:ad:bc:b9:e6:cc:72:
         a9:2c:26:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 08:08:41 2025 by rpki-client