Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91474C3/6F8B52A01D7011E2BC11DAB408B02CD2/D96D4614B0F811E595E0F761C4F9AE02.roa
File:                     D96D4614B0F811E595E0F761C4F9AE02.roa (raw, json)
Hash identifier:          kY2rjuppUd4UGAcVEwItvPQGG6DPd7eeHrFYcVM9F2I=
Subject key identifier:   93:0F:9F:A2:3B:00:FE:96:DA:04:D5:01:4E:88:45:6A:A5:CE:24:10
Certificate issuer:       /CN=A91474C3/serialNumber=F3FEF462A4D8E2F7FA0735A6AB645EE5635DA8F2
Certificate serial:       34E4
Authority key identifier: F3:FE:F4:62:A4:D8:E2:F7:FA:07:35:A6:AB:64:5E:E5:63:5D:A8:F2
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8_70YqTY4vf6BzWmq2Re5WNdqPI.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91474C3/6F8B52A01D7011E2BC11DAB408B02CD2/D96D4614B0F811E595E0F761C4F9AE02.roa
Signing time:             Thu 10 Apr 2025 14:50:12 +0000
ROA not before:           Thu 10 Apr 2025 14:50:12 +0000
ROA not after:            Wed 01 Jul 2026 00:00:00 +0000
asID:                     38478
IP address blocks:        27.50.34.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91474C3/6F8B52A01D7011E2BC11DAB408B02CD2/8_70YqTY4vf6BzWmq2Re5WNdqPI.crl
                          rsync://rpki.apnic.net/member_repository/A91474C3/6F8B52A01D7011E2BC11DAB408B02CD2/8_70YqTY4vf6BzWmq2Re5WNdqPI.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8_70YqTY4vf6BzWmq2Re5WNdqPI.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 01 May 2025 14:19:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 13540 (0x34e4)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91474C3, serialNumber=F3FEF462A4D8E2F7FA0735A6AB645EE5635DA8F2
        Validity
            Not Before: Apr 10 14:50:12 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=67f7daa4-d333
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:39:50:be:80:4b:83:2c:00:af:c8:d0:4e:0d:
                    64:d2:e6:3f:a1:2a:05:53:16:92:43:8e:d4:15:13:
                    a5:d8:9e:ef:69:d8:e3:ea:67:ce:e1:e9:92:0b:a6:
                    4c:e9:c3:10:7d:fd:02:41:8e:78:99:6d:0f:5f:6f:
                    a6:38:35:d2:4c:0a:1d:c5:a9:70:51:20:7c:0c:bb:
                    2d:42:e3:39:e7:2f:4d:37:02:d0:ea:08:ae:45:fc:
                    a1:08:7b:ca:86:eb:e7:aa:0d:d8:36:07:53:9a:5f:
                    f4:4e:c8:41:95:65:c4:e1:3b:5e:cb:c3:6c:50:ca:
                    e5:f7:c4:9c:3d:af:c7:13:98:cc:c7:f2:d4:90:a1:
                    e6:8a:cc:02:96:15:55:3f:fe:cb:44:4b:bc:1f:3c:
                    6a:b4:f4:1f:f9:53:a5:bf:f1:58:91:ab:0d:5f:db:
                    30:42:16:0a:8e:fc:04:64:75:87:ad:e7:ee:6c:8d:
                    ef:48:53:f3:d9:0a:d8:a7:bd:cc:68:8f:a2:f0:f9:
                    59:39:07:15:4f:d2:12:e8:c7:03:b6:d4:78:bd:e5:
                    98:f2:c5:c0:06:f0:5a:f0:6f:e8:a4:8f:ff:c1:90:
                    df:90:38:14:ac:c4:c6:e1:63:3d:03:e9:06:eb:08:
                    be:f7:cf:3a:81:0e:55:73:da:36:5d:c4:37:ed:1d:
                    54:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                93:0F:9F:A2:3B:00:FE:96:DA:04:D5:01:4E:88:45:6A:A5:CE:24:10
            X509v3 Authority Key Identifier:
                keyid:F3:FE:F4:62:A4:D8:E2:F7:FA:07:35:A6:AB:64:5E:E5:63:5D:A8:F2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91474C3/6F8B52A01D7011E2BC11DAB408B02CD2/8_70YqTY4vf6BzWmq2Re5WNdqPI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8_70YqTY4vf6BzWmq2Re5WNdqPI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91474C3/6F8B52A01D7011E2BC11DAB408B02CD2/D96D4614B0F811E595E0F761C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  27.50.34.0/24

    Signature Algorithm: sha256WithRSAEncryption
         4e:63:46:99:37:30:ea:bc:90:cc:43:a3:a0:72:23:9f:60:1e:
         81:9e:12:39:f8:4e:c2:46:6a:72:12:85:a1:aa:ac:60:8e:37:
         fd:59:ac:15:8a:40:6e:bd:4e:22:85:bd:36:a6:66:27:d7:c4:
         48:c9:76:9b:98:e8:5a:44:f1:d8:55:08:df:1d:b9:1a:dd:68:
         7b:c6:0f:c9:21:b8:08:93:a1:6c:89:42:ef:62:89:c2:e1:96:
         55:fd:3d:72:af:76:cc:a7:77:f1:ac:f6:c5:ef:80:a4:9a:1b:
         4b:77:4d:17:70:cc:c1:1b:05:e5:10:64:4c:25:01:f2:b0:0d:
         98:6b:62:c1:f1:3e:30:73:4d:6e:4e:14:ee:fe:96:f5:63:ff:
         89:b0:ad:e1:02:6a:30:29:14:77:0a:ab:4f:3b:b9:a8:01:3e:
         8b:b5:41:9a:fc:0c:a2:17:15:ef:db:74:a5:a5:1d:a8:50:9c:
         66:a2:80:bf:ee:88:98:f8:d5:5a:3c:dd:6e:15:12:b6:b4:b3:
         5f:5c:ee:06:2f:45:e6:d0:35:a4:7e:20:ef:ee:1d:3c:c0:08:
         ca:bc:97:aa:cd:ea:ba:fc:b5:db:62:15:f7:ca:35:34:f4:0e:
         f9:8d:76:78:03:f1:c2:e0:a3:06:a8:b6:cb:b6:45:a9:6c:bd:
         ad:88:a2:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 08:21:30 2025 by rpki-client