Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A912142C/20B37CFE1D8711E2BDEFF7DE08B02CD2/F73D1642F30B11EFA86D9348C4F9AE02.roa
File:                     F73D1642F30B11EFA86D9348C4F9AE02.roa (raw, json)
Hash identifier:          OiDTuOtU2sr+4kSXlrCpirnD6tpZhdVqcG76Sqtu1lo=
Subject key identifier:   C3:F7:5F:58:99:D3:B2:2C:F7:ED:A5:06:41:D3:FB:85:65:AD:01:2A
Certificate issuer:       /CN=A912142C/serialNumber=BF583FF07DA356FDE282819F47BCEE247513119A
Certificate serial:       3480
Authority key identifier: BF:58:3F:F0:7D:A3:56:FD:E2:82:81:9F:47:BC:EE:24:75:13:11:9A
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/v1g_8H2jVv3igoGfR7zuJHUTEZo.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A912142C/20B37CFE1D8711E2BDEFF7DE08B02CD2/F73D1642F30B11EFA86D9348C4F9AE02.roa
Signing time:             Tue 25 Feb 2025 00:03:39 +0000
ROA not before:           Tue 25 Feb 2025 00:03:39 +0000
ROA not after:            Sun 31 Aug 2025 00:00:00 +0000
asID:                     56293
IP address blocks:        202.5.193.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A912142C/20B37CFE1D8711E2BDEFF7DE08B02CD2/v1g_8H2jVv3igoGfR7zuJHUTEZo.crl
                          rsync://rpki.apnic.net/member_repository/A912142C/20B37CFE1D8711E2BDEFF7DE08B02CD2/v1g_8H2jVv3igoGfR7zuJHUTEZo.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/v1g_8H2jVv3igoGfR7zuJHUTEZo.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 01 May 2025 14:27:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 13440 (0x3480)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A912142C, serialNumber=BF583FF07DA356FDE282819F47BCEE247513119A
        Validity
            Not Before: Feb 25 00:03:39 2025 GMT
            Not After : Aug 31 00:00:00 2025 GMT
        Subject: CN=67bd08db-6bcd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:63:d5:82:ac:a5:91:38:38:88:cb:ff:6d:97:
                    63:59:ac:10:4b:90:48:63:3e:cf:49:6b:fe:06:5e:
                    84:74:a5:82:aa:56:dc:4e:94:8d:3c:b4:34:6e:48:
                    4d:3d:fa:cf:76:86:ef:ad:e0:f0:98:ae:fc:b9:99:
                    86:1d:87:0c:33:20:f4:bc:08:78:79:63:2b:bd:05:
                    e1:39:fe:43:0d:3b:0a:a5:97:4f:94:0f:c7:e7:e6:
                    7c:bf:ec:a9:59:93:2d:a4:47:16:60:ae:5b:47:d4:
                    10:89:23:e4:7a:ea:49:cc:18:e5:f9:33:c5:a5:02:
                    0d:a4:30:53:00:f6:2c:85:4a:8c:47:32:db:25:8e:
                    80:10:cc:a1:9f:2d:02:3c:68:55:14:11:ab:93:95:
                    81:07:bf:fd:d6:5f:e9:37:d0:73:95:36:d7:46:2f:
                    d0:f2:97:ce:bf:35:27:f5:d1:4f:3f:9c:81:a0:45:
                    54:0d:5e:9d:f1:94:46:d1:9a:0b:f1:d1:6e:6e:ca:
                    86:34:80:51:5a:61:a9:3d:65:a9:a8:7d:02:48:d2:
                    03:25:c8:29:f9:39:27:f2:eb:ad:e0:87:69:da:04:
                    8d:33:4b:29:d5:b9:37:f1:fa:13:cc:cf:78:a6:67:
                    c3:81:9b:28:36:12:df:d2:1d:e7:c6:8e:af:73:e7:
                    c0:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C3:F7:5F:58:99:D3:B2:2C:F7:ED:A5:06:41:D3:FB:85:65:AD:01:2A
            X509v3 Authority Key Identifier:
                keyid:BF:58:3F:F0:7D:A3:56:FD:E2:82:81:9F:47:BC:EE:24:75:13:11:9A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A912142C/20B37CFE1D8711E2BDEFF7DE08B02CD2/v1g_8H2jVv3igoGfR7zuJHUTEZo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/v1g_8H2jVv3igoGfR7zuJHUTEZo.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912142C/20B37CFE1D8711E2BDEFF7DE08B02CD2/F73D1642F30B11EFA86D9348C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  202.5.193.0/24

    Signature Algorithm: sha256WithRSAEncryption
         9c:c7:53:b3:b3:45:dd:a6:9d:24:99:b1:eb:de:41:01:38:4b:
         ed:a1:de:94:74:48:8d:48:16:d8:85:bb:95:aa:92:45:fe:5f:
         dd:7f:b4:6b:bc:1f:cd:6b:5b:6b:c1:8f:45:a9:16:0c:98:d4:
         71:78:1b:3d:3b:5d:db:2a:e0:bc:c9:5e:0e:78:60:9d:9b:b1:
         06:df:a3:40:48:6a:13:83:c0:3e:4a:e5:11:08:fb:2d:9c:87:
         25:ab:ca:35:ba:25:8c:71:26:74:24:49:76:39:98:d1:90:c6:
         27:77:d0:af:e9:f1:9e:c0:ce:fe:11:0e:ce:65:e3:3f:22:16:
         f0:8e:65:76:f3:04:43:98:0b:e9:15:a3:94:d3:89:f7:98:07:
         bd:ec:4b:22:91:0d:76:b7:63:9b:ac:e1:df:e9:a6:6b:63:7d:
         00:b3:f2:34:19:bc:fe:a2:db:db:15:5b:42:a2:cb:f2:5f:72:
         73:8e:8e:ff:2a:e1:c8:87:35:e4:d4:04:bb:67:5a:37:1b:89:
         ad:9b:0d:f5:98:a2:4b:72:b9:c5:32:e4:00:38:c0:d3:29:aa:
         65:b0:b4:a2:35:e4:21:e7:05:46:04:11:0c:d8:d5:a5:a2:1b:
         98:33:3a:9d:9b:52:75:49:63:45:a9:c2:87:7c:c5:6d:70:75:
         6c:9a:36:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 05:56:35 2025 by rpki-client