Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A911691A/751F31DAA28511EF842B9410C4F9AE02/5A844AC639D511F0AE239C5CC4F9AE02.roa
File:                     5A844AC639D511F0AE239C5CC4F9AE02.roa (raw, json)
Hash identifier:          sn6Hj5PK8tuNbIiWw17hS3Q3BDP+yAs1sYIOGHh0Wfg=
Subject key identifier:   6D:43:03:94:D0:83:35:7A:0B:23:C4:43:06:9F:E5:AC:0A:66:43:49
Certificate issuer:       /CN=A911691A/serialNumber=74CB85A6349C3CA6184AECF70F83AFFDFCE0A7F7
Certificate serial:       76
Authority key identifier: 74:CB:85:A6:34:9C:3C:A6:18:4A:EC:F7:0F:83:AF:FD:FC:E0:A7:F7
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dMuFpjScPKYYSuz3D4Ov_fzgp_c.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A911691A/751F31DAA28511EF842B9410C4F9AE02/5A844AC639D511F0AE239C5CC4F9AE02.roa
Signing time:             Mon 26 May 2025 02:01:36 +0000
ROA not before:           Mon 26 May 2025 02:01:36 +0000
ROA not after:            Mon 02 Mar 2026 00:00:00 +0000
asID:                     139648
IP address blocks:        160.250.11.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A911691A/751F31DAA28511EF842B9410C4F9AE02/dMuFpjScPKYYSuz3D4Ov_fzgp_c.crl
                          rsync://rpki.apnic.net/member_repository/A911691A/751F31DAA28511EF842B9410C4F9AE02/dMuFpjScPKYYSuz3D4Ov_fzgp_c.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dMuFpjScPKYYSuz3D4Ov_fzgp_c.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 24 Jun 2025 05:46:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 118 (0x76)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A911691A, serialNumber=74CB85A6349C3CA6184AECF70F83AFFDFCE0A7F7
        Validity
            Not Before: May 26 02:01:36 2025 GMT
            Not After : Mar  2 00:00:00 2026 GMT
        Subject: CN=6833cb80-6d9d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ea:0a:9e:e0:aa:7b:9a:86:9f:0f:e9:3f:54:a7:
                    fc:3d:2c:ae:d6:8d:a7:1b:49:b0:49:58:bc:b6:89:
                    3b:a4:2b:49:99:ed:51:b5:ab:a5:bf:7c:e3:a0:da:
                    a8:94:b5:58:f5:ca:a0:d8:5f:d6:4a:b8:07:99:83:
                    e8:6b:bd:1b:d3:93:e0:2b:4f:19:d8:5a:9a:2c:ef:
                    a8:b7:b2:1d:94:01:bd:f1:f2:2a:1f:33:49:fc:d1:
                    f4:de:66:dc:85:3c:8a:a0:cf:03:c8:05:16:57:9e:
                    3c:f5:fc:f3:e5:4e:bd:43:69:8f:42:9e:46:fd:f0:
                    84:94:bc:af:a4:27:ff:88:be:df:d8:fa:34:cc:e5:
                    01:0f:a3:78:18:5e:0b:1c:d3:39:48:e7:fe:d3:fe:
                    5c:cd:74:49:96:3f:bb:74:7c:4d:db:a2:ca:28:a6:
                    23:be:b5:8a:f3:ec:33:27:c0:96:d9:3a:97:59:a1:
                    84:91:84:4f:e4:8f:f4:07:27:ae:2b:0e:ed:e0:71:
                    54:35:4f:48:0e:0c:9d:6b:d5:0f:8b:96:36:d3:c3:
                    0f:ae:90:91:d2:94:04:ec:33:cf:d5:b4:2d:ed:e9:
                    02:eb:28:1c:a9:3e:63:bd:fc:29:ef:bc:f4:af:d0:
                    7f:20:55:89:d7:a4:ce:57:06:0c:f7:bc:8f:77:b0:
                    fd:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6D:43:03:94:D0:83:35:7A:0B:23:C4:43:06:9F:E5:AC:0A:66:43:49
            X509v3 Authority Key Identifier:
                keyid:74:CB:85:A6:34:9C:3C:A6:18:4A:EC:F7:0F:83:AF:FD:FC:E0:A7:F7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A911691A/751F31DAA28511EF842B9410C4F9AE02/dMuFpjScPKYYSuz3D4Ov_fzgp_c.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dMuFpjScPKYYSuz3D4Ov_fzgp_c.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911691A/751F31DAA28511EF842B9410C4F9AE02/5A844AC639D511F0AE239C5CC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  160.250.11.0/24

    Signature Algorithm: sha256WithRSAEncryption
         78:78:ee:7b:92:77:bd:67:f7:8b:94:dd:0e:76:70:f5:90:ee:
         b3:0a:3d:8f:86:aa:73:d2:6e:11:1f:9e:45:a9:fc:be:60:b2:
         a1:59:37:07:dc:8f:7a:15:13:5c:1b:12:37:37:3d:1c:80:eb:
         21:a2:63:fe:54:97:f9:94:77:bc:d5:11:40:eb:71:d2:1e:55:
         4e:4d:8a:ab:fa:7d:d8:aa:b2:92:e3:01:7f:12:ac:76:42:fc:
         f3:64:71:e6:e8:76:d7:a3:01:ac:23:25:46:1d:f9:79:a8:3e:
         89:c3:e8:34:e7:eb:1c:72:aa:21:c3:a3:9e:f9:00:09:e4:d5:
         e4:cf:a9:96:ff:3d:d8:6d:c9:24:8c:e8:26:8c:ff:b1:db:a8:
         74:a0:54:e2:3e:5b:fb:05:04:f5:4f:5b:6b:e2:bc:99:d8:f1:
         58:49:39:71:e2:3c:00:9e:47:43:d7:c5:72:19:4a:49:15:78:
         f2:68:4b:69:c8:db:84:f9:97:39:86:f9:54:38:39:42:b1:c9:
         8d:19:be:3e:4d:48:cf:38:c7:e2:02:87:82:b2:0c:d8:bf:9c:
         66:c9:4f:10:70:5b:b3:35:4b:5f:40:70:aa:5c:b9:30:6d:b7:
         16:d0:10:36:f4:04:51:b7:f5:68:6d:fb:f8:db:0a:05:aa:fa:
         55:ec:98:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 18 06:27:05 2025 by rpki-client