Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A914E93F/2ED775DAA36C11E891405926C4F9AE02/ECC070D01A0A11F0AEC42962C4F9AE02.roa
File:                     ECC070D01A0A11F0AEC42962C4F9AE02.roa (raw, json)
Hash identifier:          zPt3WaZB55oiJiagWNoB0U+AQGeypkiLTjNNKfKGqH4=
Subject key identifier:   11:E5:14:22:7A:7D:EF:08:8B:CC:5E:71:A7:2D:B1:EC:67:BB:C0:B4
Certificate issuer:       /CN=A914E93F/serialNumber=B2F8AB00D57464DD5D05A45A47C420F5F896B8FC
Certificate serial:       13C8
Authority key identifier: B2:F8:AB:00:D5:74:64:DD:5D:05:A4:5A:47:C4:20:F5:F8:96:B8:FC
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/svirANV0ZN1dBaRaR8Qg9fiWuPw.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A914E93F/2ED775DAA36C11E891405926C4F9AE02/ECC070D01A0A11F0AEC42962C4F9AE02.roa
Signing time:             Tue 15 Apr 2025 15:04:27 +0000
ROA not before:           Tue 15 Apr 2025 15:04:27 +0000
ROA not after:            Sun 31 Aug 2025 00:00:00 +0000
asID:                     152700
IP address blocks:        14.192.49.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A914E93F/2ED775DAA36C11E891405926C4F9AE02/svirANV0ZN1dBaRaR8Qg9fiWuPw.crl
                          rsync://rpki.apnic.net/member_repository/A914E93F/2ED775DAA36C11E891405926C4F9AE02/svirANV0ZN1dBaRaR8Qg9fiWuPw.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/svirANV0ZN1dBaRaR8Qg9fiWuPw.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 01 May 2025 17:01:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 5064 (0x13c8)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A914E93F, serialNumber=B2F8AB00D57464DD5D05A45A47C420F5F896B8FC
        Validity
            Not Before: Apr 15 15:04:27 2025 GMT
            Not After : Aug 31 00:00:00 2025 GMT
        Subject: CN=67fe757b-20bd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:2e:a9:cf:e7:37:a8:3c:7b:7c:18:66:93:ff:
                    cf:1d:b5:4d:02:d7:3e:9c:c0:66:e3:f6:cb:d8:e6:
                    13:d5:ee:a8:49:16:7d:2d:26:a5:b9:a9:f7:72:10:
                    b3:18:7f:b3:c6:e8:93:b1:41:1a:89:4b:22:7f:ae:
                    85:fe:18:9b:8c:a8:1a:01:42:9a:32:80:23:0b:ab:
                    12:bb:50:a5:b8:3c:96:1c:25:ff:9f:05:ec:a1:68:
                    27:24:98:97:0c:61:b5:8a:c3:05:5e:cb:45:64:1b:
                    1f:7b:42:15:8d:c1:e2:d0:65:c7:fe:70:1c:8d:5f:
                    8f:77:85:92:aa:4b:b8:8e:67:2d:8d:34:27:d6:3a:
                    73:2f:0f:9d:3b:ad:c0:34:ae:c8:f3:fe:ba:58:09:
                    ac:9b:49:81:24:a3:5f:93:73:5b:18:ad:5e:3a:76:
                    45:16:45:16:34:5d:02:3a:27:79:b8:be:56:fc:d9:
                    c7:47:07:98:46:dc:87:8a:90:d8:af:e8:6f:58:5b:
                    6c:39:1f:18:9c:60:b5:59:82:16:79:dc:ce:ce:95:
                    e5:77:03:18:9e:00:08:97:88:6e:b6:29:c0:3a:ac:
                    85:a4:a8:47:88:82:e8:4d:40:d2:7a:f2:be:b5:5a:
                    5a:d1:34:f2:25:e0:69:37:46:e0:79:70:19:c7:93:
                    d1:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                11:E5:14:22:7A:7D:EF:08:8B:CC:5E:71:A7:2D:B1:EC:67:BB:C0:B4
            X509v3 Authority Key Identifier:
                keyid:B2:F8:AB:00:D5:74:64:DD:5D:05:A4:5A:47:C4:20:F5:F8:96:B8:FC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A914E93F/2ED775DAA36C11E891405926C4F9AE02/svirANV0ZN1dBaRaR8Qg9fiWuPw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/svirANV0ZN1dBaRaR8Qg9fiWuPw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914E93F/2ED775DAA36C11E891405926C4F9AE02/ECC070D01A0A11F0AEC42962C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  14.192.49.0/24

    Signature Algorithm: sha256WithRSAEncryption
         81:7c:a4:6c:cf:09:87:5e:e0:cc:08:fa:d3:c5:30:ac:79:18:
         9f:08:c8:a7:6d:e6:ee:a4:0a:a3:42:92:38:ca:ba:20:a3:10:
         ce:e1:b3:d4:20:4b:3f:3a:ac:58:ed:b7:49:07:58:b4:08:d3:
         f0:10:33:89:d5:99:7d:1b:1c:5d:ac:8f:36:b0:d3:09:1e:9b:
         5c:fd:93:af:42:31:f2:7b:e8:97:9c:03:43:7f:13:19:fd:4e:
         1a:85:4f:f7:8b:c5:d4:0c:fa:d8:2a:b4:ad:b2:83:a6:11:08:
         59:ac:40:ec:14:6e:51:cb:92:2b:d2:a2:bd:3c:d2:a4:6b:54:
         c4:51:d1:b5:30:2c:0c:5c:95:21:0f:ca:33:7a:86:7f:c1:54:
         8a:55:8a:77:cd:63:8c:c4:17:e5:7d:93:69:15:5d:f2:a7:4a:
         1c:00:7f:00:fb:ce:86:48:17:cb:fc:e3:3c:0a:3c:47:22:a1:
         6f:f5:69:42:b2:de:c2:99:3d:9a:40:5b:6d:21:8a:52:d0:55:
         95:1e:4e:cc:d3:9f:de:65:cc:45:d3:9f:5c:75:05:e2:76:4e:
         26:c9:76:cd:c6:80:20:13:e4:96:94:62:f0:a3:55:59:c8:8c:
         02:e1:ad:6d:12:6a:21:29:21:cf:13:4d:d2:04:2f:e2:7f:27:
         fd:e6:ba:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 08:11:36 2025 by rpki-client