Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A911FDBA/077851A41D9D11E2987CEE8B08B02CD2/931C5524175011EB8585CA60C4F9AE02.roa
File:                     931C5524175011EB8585CA60C4F9AE02.roa (raw, json)
Hash identifier:          zSmeOMcR4UTwUq4R32M120QhIdCnmd/G6j8Yf4YDhJ0=
Subject key identifier:   B2:E8:46:2D:C6:9C:70:DC:86:A2:27:07:88:30:45:8E:8C:B4:3F:9E
Certificate issuer:       /CN=A911FDBA/serialNumber=FEF9143B1616CDA1159B59ECD5E3993E982654FE
Certificate serial:       34E1
Authority key identifier: FE:F9:14:3B:16:16:CD:A1:15:9B:59:EC:D5:E3:99:3E:98:26:54:FE
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_vkUOxYWzaEVm1ns1eOZPpgmVP4.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A911FDBA/077851A41D9D11E2987CEE8B08B02CD2/931C5524175011EB8585CA60C4F9AE02.roa
Signing time:             Fri 18 Apr 2025 15:31:12 +0000
ROA not before:           Fri 18 Apr 2025 15:31:12 +0000
ROA not after:            Wed 01 Jul 2026 00:00:00 +0000
asID:                     18345
IP address blocks:        202.60.80.0/24 maxlen: 24
                          202.60.81.0/24 maxlen: 24
                          202.60.82.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A911FDBA/077851A41D9D11E2987CEE8B08B02CD2/_vkUOxYWzaEVm1ns1eOZPpgmVP4.crl
                          rsync://rpki.apnic.net/member_repository/A911FDBA/077851A41D9D11E2987CEE8B08B02CD2/_vkUOxYWzaEVm1ns1eOZPpgmVP4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_vkUOxYWzaEVm1ns1eOZPpgmVP4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 01 May 2025 14:59:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 13537 (0x34e1)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A911FDBA, serialNumber=FEF9143B1616CDA1159B59ECD5E3993E982654FE
        Validity
            Not Before: Apr 18 15:31:12 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=68027040-6f57
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:d0:0a:a5:91:c9:c9:5a:9c:6e:78:59:a0:04:
                    a2:f5:52:ff:65:58:61:f1:e7:03:69:e7:ba:eb:83:
                    9e:0f:a7:e2:3e:30:cd:96:0b:d3:1a:c9:df:d7:10:
                    29:b7:3f:e9:82:88:67:cc:b1:7f:50:e2:d1:43:83:
                    d9:ed:b1:23:ff:2f:62:c9:d9:05:5e:2d:1d:65:d5:
                    26:f9:c6:ea:86:f8:55:02:6d:e5:6e:5f:af:bb:65:
                    54:db:49:73:b1:52:a7:76:17:89:c5:65:d7:d7:b7:
                    42:3d:42:58:36:29:a6:41:e8:c5:4e:cf:65:fa:95:
                    af:65:0d:77:c0:f4:c3:c5:1b:70:81:37:8c:dd:d1:
                    fe:96:7e:46:6f:47:a4:c6:34:53:07:b8:e5:51:97:
                    81:9e:88:e9:2e:c4:03:6a:21:3e:40:1a:d8:d5:d8:
                    69:0c:24:3e:f6:a1:88:ed:40:b5:58:a3:5a:1a:1a:
                    38:a7:a6:84:68:96:c1:26:64:80:a3:d7:00:a1:ce:
                    f0:be:f3:b0:9f:b5:90:09:9e:db:c1:bd:bb:a6:db:
                    75:61:ae:05:ae:8c:95:41:ea:d7:6a:0c:44:c6:d1:
                    48:22:cd:b9:54:23:7f:30:9f:5a:da:4e:e5:c2:db:
                    27:bb:53:1b:cb:32:d5:5c:bd:74:ec:fb:d2:f4:07:
                    cb:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B2:E8:46:2D:C6:9C:70:DC:86:A2:27:07:88:30:45:8E:8C:B4:3F:9E
            X509v3 Authority Key Identifier:
                keyid:FE:F9:14:3B:16:16:CD:A1:15:9B:59:EC:D5:E3:99:3E:98:26:54:FE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A911FDBA/077851A41D9D11E2987CEE8B08B02CD2/_vkUOxYWzaEVm1ns1eOZPpgmVP4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_vkUOxYWzaEVm1ns1eOZPpgmVP4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911FDBA/077851A41D9D11E2987CEE8B08B02CD2/931C5524175011EB8585CA60C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  202.60.80.0-202.60.82.255

    Signature Algorithm: sha256WithRSAEncryption
         69:9d:5d:90:85:da:0a:6c:d1:aa:a6:a1:7b:a1:ef:d6:c5:a1:
         cd:dd:e0:60:be:e4:d0:60:34:74:05:c9:56:25:3e:25:01:69:
         b4:db:eb:e7:d5:60:87:11:54:65:a0:99:ef:1a:c5:57:22:ab:
         4c:8c:9d:49:42:8d:e5:7e:00:6a:d9:0a:a1:3a:cb:a5:56:d4:
         9d:af:8e:be:da:a9:14:e4:c3:c6:5f:80:6f:69:c0:d1:27:e0:
         8c:2c:4c:84:6d:00:46:ca:aa:16:79:6d:c0:51:8c:b2:f7:da:
         a7:74:59:4b:ff:a1:75:55:7b:e6:86:2c:18:1a:4e:c8:b3:6b:
         96:0c:e3:9d:f8:0b:33:75:92:70:9d:7b:53:2e:e1:9c:6e:c5:
         78:29:06:fb:25:55:d1:a6:ec:ff:ca:51:8c:a6:18:e4:fc:c1:
         dc:82:a2:1d:82:42:b1:88:86:64:ae:3b:8b:bf:63:5e:d8:42:
         ca:ee:ab:c5:22:35:83:2a:c7:b3:f3:50:eb:30:a4:be:02:f4:
         45:31:98:ed:4b:3e:47:13:01:42:fe:2f:55:e9:99:1a:ba:b2:
         4a:1a:91:2d:0f:86:4e:f1:bd:5a:8f:bb:6c:62:44:75:b5:4c:
         98:8d:00:95:8d:0f:18:5f:fa:e2:82:f1:66:fd:b8:fd:fe:ea:
         86:ef:bd:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 13:00:16 2025 by rpki-client