Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A914BFE5/9DAF486EDDEB11EAB30ED921C4F9AE02/58A9026623AD11EBB858645DC4F9AE02.roa
File:                     58A9026623AD11EBB858645DC4F9AE02.roa (raw, json)
Hash identifier:          XB8wSFVQZAHvqakZ35MOgP2u0Ix9DouCb4nv3BULPR8=
Subject key identifier:   A5:0B:2A:5F:91:43:26:E4:FA:FB:89:8C:DD:5F:57:3F:AC:A8:9F:28
Certificate issuer:       /CN=A914BFE5/serialNumber=78A9977FFB47AF3EC1E946BC10F81376949EBEC2
Certificate serial:       080F
Authority key identifier: 78:A9:97:7F:FB:47:AF:3E:C1:E9:46:BC:10:F8:13:76:94:9E:BE:C2
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eKmXf_tHrz7B6Ua8EPgTdpSevsI.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A914BFE5/9DAF486EDDEB11EAB30ED921C4F9AE02/58A9026623AD11EBB858645DC4F9AE02.roa
Signing time:             Fri 18 Apr 2025 21:23:41 +0000
ROA not before:           Fri 18 Apr 2025 21:23:41 +0000
ROA not after:            Wed 01 Jul 2026 00:00:00 +0000
asID:                     38880
IP address blocks:        119.252.176.0/24 maxlen: 24
                          119.252.179.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A914BFE5/9DAF486EDDEB11EAB30ED921C4F9AE02/eKmXf_tHrz7B6Ua8EPgTdpSevsI.crl
                          rsync://rpki.apnic.net/member_repository/A914BFE5/9DAF486EDDEB11EAB30ED921C4F9AE02/eKmXf_tHrz7B6Ua8EPgTdpSevsI.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eKmXf_tHrz7B6Ua8EPgTdpSevsI.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 01 May 2025 20:47:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2063 (0x80f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A914BFE5, serialNumber=78A9977FFB47AF3EC1E946BC10F81376949EBEC2
        Validity
            Not Before: Apr 18 21:23:41 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=6802c2dd-6e26
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:87:a4:e5:2b:b6:b4:1c:e8:b1:88:3a:e7:08:
                    d3:d0:fb:d9:91:75:8b:fd:16:72:78:41:f5:c2:42:
                    0e:64:b1:11:34:47:d0:54:d8:98:b3:fb:f9:e7:79:
                    a6:df:5a:c4:3c:e8:a4:af:97:05:9e:ff:88:11:95:
                    c8:6d:8a:e8:46:1d:b5:59:82:34:94:11:47:36:d7:
                    61:a4:12:4d:e1:03:78:f8:f3:70:1e:49:37:e5:c1:
                    cc:22:4c:71:04:13:3f:a5:c3:06:b4:55:46:c0:5d:
                    d2:c5:f0:71:33:8b:51:b4:69:25:73:f7:5a:2a:cd:
                    6d:8c:33:6d:4d:b3:d2:e7:74:3e:79:fb:2d:09:b9:
                    7b:b7:2e:6d:4c:0a:b1:aa:f4:43:83:a6:ec:bb:c0:
                    51:50:63:bc:5e:4e:99:e3:8f:d4:77:bf:d8:d7:f3:
                    8d:5c:27:35:1b:6e:3b:9c:ec:a6:78:01:d0:9c:e7:
                    67:1f:ed:81:7a:83:9c:a6:8f:bc:82:42:aa:18:f9:
                    db:61:fd:fb:67:e3:e8:61:80:cf:91:ba:72:d7:10:
                    91:28:6a:8f:67:42:b0:70:a2:11:87:c5:81:d4:44:
                    e4:7c:27:e4:2c:6b:c9:7c:8a:ed:b7:94:ab:ad:98:
                    db:28:ae:ec:d6:e5:5b:ff:c5:e7:9f:7e:4a:15:95:
                    96:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A5:0B:2A:5F:91:43:26:E4:FA:FB:89:8C:DD:5F:57:3F:AC:A8:9F:28
            X509v3 Authority Key Identifier:
                keyid:78:A9:97:7F:FB:47:AF:3E:C1:E9:46:BC:10:F8:13:76:94:9E:BE:C2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A914BFE5/9DAF486EDDEB11EAB30ED921C4F9AE02/eKmXf_tHrz7B6Ua8EPgTdpSevsI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eKmXf_tHrz7B6Ua8EPgTdpSevsI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914BFE5/9DAF486EDDEB11EAB30ED921C4F9AE02/58A9026623AD11EBB858645DC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  119.252.176.0/24
                  119.252.179.0/24

    Signature Algorithm: sha256WithRSAEncryption
         5f:06:6d:d1:74:55:e1:bf:4e:0b:a0:1e:78:d4:3e:28:64:a8:
         cd:dc:b4:77:85:4b:69:e6:46:a3:10:52:72:6b:bf:0c:06:8a:
         d6:aa:71:d3:a8:4e:a3:ed:85:b7:2b:15:c6:c7:06:0e:b3:ca:
         90:44:da:94:36:b7:62:01:3f:3d:49:eb:2a:c3:89:e8:ca:9e:
         25:56:79:f9:fc:cf:53:1f:eb:6d:85:2d:ae:de:9a:30:59:22:
         8d:bb:27:52:42:93:49:ff:a0:b9:ac:b5:25:0d:6e:43:90:43:
         0d:e1:d5:47:bb:f4:eb:92:37:a1:4f:89:bc:f9:d7:aa:83:c1:
         4f:54:ec:e9:6b:45:9b:e9:64:96:e7:c7:cb:6a:e9:ae:d1:c0:
         48:dc:5b:ee:37:30:be:aa:ac:e9:f8:6d:ae:17:db:ab:5b:7e:
         e3:b4:ce:35:f2:e4:36:ac:d8:74:4f:ca:e3:63:39:15:12:ab:
         12:82:53:7d:b6:07:7b:09:69:7f:96:53:0b:80:72:a1:f7:4c:
         ad:db:c4:74:07:48:a5:09:c5:a7:ae:a7:4d:9f:0d:ff:eb:82:
         75:a2:67:ee:5c:98:bc:71:c0:08:f1:3a:a3:51:11:3d:fa:c4:
         59:e6:00:a0:b0:d8:1b:89:8a:81:7d:be:82:00:8a:53:fa:b2:
         91:b7:25:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 12:36:32 2025 by rpki-client