Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A914E1F1/4FEBF24A09DA11EDA03C9817C4F9AE02/1E00C58C145C11F094FADD38C4F9AE02.roa
File:                     1E00C58C145C11F094FADD38C4F9AE02.roa (raw, json)
Hash identifier:          XjpAhwEE1pSxcomjAf7JGmGOWyetZlZpCZkZjy+8eHs=
Subject key identifier:   B2:7A:89:C9:59:F8:74:FD:49:23:89:75:A6:BD:C4:B8:2A:F6:CC:7A
Certificate issuer:       /CN=A914E1F1/serialNumber=F3F273F3EFCE551EE33C844D440AA30EDA087E2C
Certificate serial:       0278
Authority key identifier: F3:F2:73:F3:EF:CE:55:1E:E3:3C:84:4D:44:0A:A3:0E:DA:08:7E:2C
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8_Jz8-_OVR7jPIRNRAqjDtoIfiw.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A914E1F1/4FEBF24A09DA11EDA03C9817C4F9AE02/1E00C58C145C11F094FADD38C4F9AE02.roa
Signing time:             Tue 08 Apr 2025 09:30:32 +0000
ROA not before:           Tue 08 Apr 2025 09:30:32 +0000
ROA not after:            Sat 31 Jan 2026 00:00:00 +0000
asID:                     149006
IP address blocks:        2400:1fe0::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A914E1F1/4FEBF24A09DA11EDA03C9817C4F9AE02/8_Jz8-_OVR7jPIRNRAqjDtoIfiw.crl
                          rsync://rpki.apnic.net/member_repository/A914E1F1/4FEBF24A09DA11EDA03C9817C4F9AE02/8_Jz8-_OVR7jPIRNRAqjDtoIfiw.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8_Jz8-_OVR7jPIRNRAqjDtoIfiw.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 02 May 2025 01:28:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 632 (0x278)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A914E1F1, serialNumber=F3F273F3EFCE551EE33C844D440AA30EDA087E2C
        Validity
            Not Before: Apr  8 09:30:32 2025 GMT
            Not After : Jan 31 00:00:00 2026 GMT
        Subject: CN=67f4ecb8-7d53
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:9c:29:27:f5:56:cc:cc:f1:91:ca:d7:31:8e:
                    3b:37:34:fa:01:d5:79:c2:fd:30:61:ce:10:56:ea:
                    30:eb:fc:09:2d:19:6c:4f:ca:cc:3b:2b:4a:39:42:
                    58:c1:20:1e:90:38:73:24:37:56:84:18:3f:43:cb:
                    d3:c1:87:2a:af:b2:d8:e7:f7:67:51:d7:e6:8d:07:
                    a6:c1:e1:45:69:d9:b6:b1:2b:d4:4c:cb:25:e1:34:
                    39:fc:21:a7:01:eb:11:03:c7:ef:fd:e9:2d:33:f7:
                    f7:e0:7d:02:24:51:20:61:50:e9:60:af:cf:f3:0d:
                    b7:25:ac:71:41:fd:e9:24:fa:66:25:a3:80:b0:88:
                    ca:86:f0:ff:90:1f:0f:d8:59:c8:32:9b:32:bb:89:
                    8c:a1:00:f6:6f:2f:68:64:5c:67:cf:ac:3e:22:75:
                    8a:f6:c2:0a:67:93:65:37:98:d0:0f:7e:60:27:ee:
                    c7:3b:6d:77:67:2d:ca:44:55:c6:b2:95:6f:81:7f:
                    6c:96:84:f4:4b:14:f2:21:98:c0:c9:73:99:18:5a:
                    50:60:a1:e7:da:dc:6a:8b:40:d8:62:bc:20:bd:73:
                    7a:e1:57:fe:f8:33:c8:13:ed:bb:ef:d0:bc:65:c7:
                    e7:46:fa:13:10:60:0f:48:d0:8f:d1:6c:56:e6:5a:
                    cd:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B2:7A:89:C9:59:F8:74:FD:49:23:89:75:A6:BD:C4:B8:2A:F6:CC:7A
            X509v3 Authority Key Identifier:
                keyid:F3:F2:73:F3:EF:CE:55:1E:E3:3C:84:4D:44:0A:A3:0E:DA:08:7E:2C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A914E1F1/4FEBF24A09DA11EDA03C9817C4F9AE02/8_Jz8-_OVR7jPIRNRAqjDtoIfiw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8_Jz8-_OVR7jPIRNRAqjDtoIfiw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914E1F1/4FEBF24A09DA11EDA03C9817C4F9AE02/1E00C58C145C11F094FADD38C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  2400:1fe0::/32

    Signature Algorithm: sha256WithRSAEncryption
         12:bc:8e:43:6a:cd:03:58:12:c8:54:f6:1b:76:8d:ea:53:35:
         0a:5a:7c:3e:ba:df:61:96:12:79:f5:8f:cd:57:e4:c8:da:4e:
         a4:e1:6c:07:c7:45:b7:0e:86:9d:ed:74:9c:0b:2e:0d:d6:89:
         90:57:69:0e:e0:8d:2c:02:a1:89:c1:b8:2d:54:ee:9f:f2:98:
         89:f3:0a:11:a3:14:34:31:75:4b:74:5d:d8:72:89:87:4b:1b:
         1e:be:8a:8e:99:1a:0a:ea:75:b5:9a:f1:9b:04:c0:b8:a3:12:
         e9:82:63:23:7b:f8:52:01:73:22:ec:c6:89:a2:55:1e:1c:b9:
         b0:7b:40:fe:e8:4d:bf:27:cb:31:35:31:0c:7d:96:70:ee:82:
         41:bf:75:20:e2:a8:7f:8f:91:1d:e8:1a:3d:6c:76:b1:30:98:
         07:e4:88:61:62:78:d6:6e:09:fc:a1:36:5b:78:2f:c7:10:08:
         3a:ab:34:c8:e0:02:08:ea:99:9e:e0:98:cb:85:26:f4:f4:7e:
         ef:8e:25:15:16:c3:d3:ff:84:aa:79:e9:8f:0d:15:d0:6f:05:
         3d:d7:c7:9a:da:ed:c2:99:ca:dc:33:65:f9:ca:98:ef:9c:65:
         39:f9:c6:cd:19:7b:72:48:e2:48:b8:61:e5:1b:c2:72:41:2e:
         68:28:be:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 07:50:17 2025 by rpki-client