Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9146514/B773A164EBC011EE9BB3F43FC4F9AE02/8C73DD2414F711F088D0424FC4F9AE02.roa
File:                     8C73DD2414F711F088D0424FC4F9AE02.roa (raw, json)
Hash identifier:          N79cTf02LFfn72p1E/Pdk3bdjiKVq2hrPT4kWU8lFBY=
Subject key identifier:   DC:24:52:A0:2D:E5:9E:18:26:31:3C:6B:A8:44:7F:E6:4B:D7:D2:2B
Certificate issuer:       /CN=A9146514/serialNumber=4A4D7F58EFBD48B8636DB6A0BF7C2DE50F043621
Certificate serial:       C6
Authority key identifier: 4A:4D:7F:58:EF:BD:48:B8:63:6D:B6:A0:BF:7C:2D:E5:0F:04:36:21
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Sk1_WO-9SLhjbbagv3wt5Q8ENiE.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9146514/B773A164EBC011EE9BB3F43FC4F9AE02/8C73DD2414F711F088D0424FC4F9AE02.roa
Signing time:             Wed 09 Apr 2025 04:03:10 +0000
ROA not before:           Wed 09 Apr 2025 04:03:10 +0000
ROA not after:            Wed 30 Jul 2025 00:00:00 +0000
asID:                     23838
IP address blocks:        115.126.128.0/24 maxlen: 24
                          202.162.177.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9146514/B773A164EBC011EE9BB3F43FC4F9AE02/Sk1_WO-9SLhjbbagv3wt5Q8ENiE.crl
                          rsync://rpki.apnic.net/member_repository/A9146514/B773A164EBC011EE9BB3F43FC4F9AE02/Sk1_WO-9SLhjbbagv3wt5Q8ENiE.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Sk1_WO-9SLhjbbagv3wt5Q8ENiE.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 02 May 2025 04:46:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 198 (0xc6)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9146514, serialNumber=4A4D7F58EFBD48B8636DB6A0BF7C2DE50F043621
        Validity
            Not Before: Apr  9 04:03:10 2025 GMT
            Not After : Jul 30 00:00:00 2025 GMT
        Subject: CN=67f5f17d-f610
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e5:df:3f:c4:06:67:c8:ef:a3:83:49:49:6e:4c:
                    a2:00:4d:f4:1d:58:fb:6c:57:71:8c:81:63:24:fe:
                    58:a1:d5:60:ce:44:80:49:a7:3a:2a:35:a1:92:08:
                    33:8a:aa:49:92:3a:66:58:39:55:49:25:8d:57:09:
                    b6:a9:d0:03:17:0d:74:89:5a:10:f6:7d:49:e2:36:
                    03:4e:71:a1:46:b5:d3:1f:91:fa:04:2e:76:79:8f:
                    c0:62:3c:32:3c:dc:77:31:22:a1:e9:49:40:18:32:
                    6b:fd:ce:8a:c7:0a:41:59:c1:89:4e:48:e3:4b:71:
                    ae:67:bb:c7:c2:f2:35:56:15:05:c9:c3:4b:22:36:
                    bf:fd:91:3a:6b:db:52:5a:9d:c6:3a:66:99:ac:9d:
                    5d:0b:c2:b0:78:a4:ac:3d:c2:a9:61:b9:3a:fa:16:
                    29:1f:3e:0c:b1:a0:a1:16:f8:9f:df:6c:a2:71:f8:
                    51:2c:f8:f6:71:b9:2d:94:aa:3b:f8:6c:c1:12:ed:
                    44:23:86:11:2a:4b:e5:fd:17:2b:8e:6e:13:fc:4d:
                    8b:1a:be:c2:09:9a:67:4f:14:00:26:3e:d6:86:66:
                    1d:93:5a:2a:c3:66:15:8a:15:2f:aa:b1:bc:b5:5c:
                    fe:9f:ef:3f:ae:e1:19:39:a9:bf:be:f7:3d:a9:fa:
                    69:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DC:24:52:A0:2D:E5:9E:18:26:31:3C:6B:A8:44:7F:E6:4B:D7:D2:2B
            X509v3 Authority Key Identifier:
                keyid:4A:4D:7F:58:EF:BD:48:B8:63:6D:B6:A0:BF:7C:2D:E5:0F:04:36:21

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9146514/B773A164EBC011EE9BB3F43FC4F9AE02/Sk1_WO-9SLhjbbagv3wt5Q8ENiE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Sk1_WO-9SLhjbbagv3wt5Q8ENiE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9146514/B773A164EBC011EE9BB3F43FC4F9AE02/8C73DD2414F711F088D0424FC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  115.126.128.0/24
                  202.162.177.0/24

    Signature Algorithm: sha256WithRSAEncryption
         59:fc:a0:97:55:23:58:3a:c2:fc:ae:e7:aa:1c:90:26:30:98:
         da:75:8d:ea:78:57:97:cf:04:a4:38:f6:6d:8e:ff:20:50:24:
         6e:20:fe:52:29:be:c9:3a:11:6c:53:a4:99:b0:c2:98:26:03:
         03:54:ed:53:28:82:76:40:0b:63:3a:dd:04:25:26:31:ed:dc:
         3c:f1:77:87:df:95:f6:e2:d1:0c:03:97:95:e8:c6:6c:37:4b:
         b6:90:9f:9f:3e:36:ba:2a:8f:a1:2c:89:84:d5:da:b4:6a:38:
         18:e8:98:cd:41:ca:ab:0e:2f:ca:5e:b6:e5:df:00:a7:8e:ce:
         d8:7f:84:ca:14:a6:91:7e:18:3d:82:23:c8:b1:05:1b:be:2b:
         31:86:5f:70:c9:65:27:d4:02:bc:8d:93:7f:00:7e:45:67:a4:
         a6:d4:69:bf:f7:4e:dc:eb:c9:03:f5:f6:25:a4:f9:2b:8c:c6:
         2d:85:bc:8f:78:46:9c:28:4e:2f:d2:95:3f:b1:84:bf:5d:95:
         b0:e7:ae:0d:d7:f8:25:e9:5a:07:59:bb:7e:ef:11:1a:36:61:
         29:81:4d:a1:04:93:da:20:63:5b:17:6a:48:7e:4e:88:72:f0:
         0b:8d:a4:14:2b:70:83:7e:e7:a8:46:fe:ba:37:cc:24:b5:b7:
         b1:0b:b2:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 13:38:56 2025 by rpki-client