Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A914EAE4/6753B8AE257511E7AC0D172AC4F9AE02/F59F290A459B11F0AE80E433C4F9AE02.roa
File:                     F59F290A459B11F0AE80E433C4F9AE02.roa (raw, json)
Hash identifier:          YfVp2DTnB3W58PvhyracwGMI2JXeKp6Gv6kkyZpiKQw=
Subject key identifier:   CB:45:94:77:0F:32:B1:C3:BA:32:08:92:F7:0D:B9:E7:2A:B2:42:5F
Certificate issuer:       /CN=A914EAE4/serialNumber=AD56B67187A98BA314084405797BD9656E8AC8BA
Certificate serial:       1F01
Authority key identifier: AD:56:B6:71:87:A9:8B:A3:14:08:44:05:79:7B:D9:65:6E:8A:C8:BA
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rVa2cYepi6MUCEQFeXvZZW6KyLo.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A914EAE4/6753B8AE257511E7AC0D172AC4F9AE02/F59F290A459B11F0AE80E433C4F9AE02.roa
Signing time:             Tue 10 Jun 2025 01:41:37 +0000
ROA not before:           Tue 10 Jun 2025 01:41:37 +0000
ROA not after:            Mon 01 Dec 2025 00:00:00 +0000
asID:                     141006
IP address blocks:        1.183.208.0/20 maxlen: 24
                          240e:918:a000::/40 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A914EAE4/6753B8AE257511E7AC0D172AC4F9AE02/rVa2cYepi6MUCEQFeXvZZW6KyLo.crl
                          rsync://rpki.apnic.net/member_repository/A914EAE4/6753B8AE257511E7AC0D172AC4F9AE02/rVa2cYepi6MUCEQFeXvZZW6KyLo.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rVa2cYepi6MUCEQFeXvZZW6KyLo.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 25 Jun 2025 16:19:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 7937 (0x1f01)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A914EAE4, serialNumber=AD56B67187A98BA314084405797BD9656E8AC8BA
        Validity
            Not Before: Jun 10 01:41:37 2025 GMT
            Not After : Dec  1 00:00:00 2025 GMT
        Subject: CN=68478d51-1d5c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:e3:de:34:1a:4c:12:1f:bb:d0:51:38:2b:5b:
                    35:54:6c:d0:cc:92:c0:45:9d:ab:8a:57:84:b8:d9:
                    c1:37:c2:3d:11:d4:77:bd:cf:fa:db:66:9f:d0:f6:
                    78:0b:2b:ff:01:9d:99:c4:e0:e7:1e:13:ff:a7:4d:
                    0a:2c:ef:d5:c7:62:b3:48:f2:3e:22:66:0c:5c:0c:
                    69:bf:1a:08:47:61:49:c1:a9:83:de:b5:51:08:01:
                    da:dd:e9:ea:a0:b1:b4:97:6d:20:7a:a3:74:34:63:
                    29:41:86:ea:35:11:c6:cb:d4:cb:09:0f:6b:84:90:
                    4f:8f:d8:c6:4b:9c:ad:e4:79:ba:ad:6b:19:23:90:
                    58:c7:5e:72:2b:ab:3b:a4:90:e3:81:8b:09:06:01:
                    be:ad:96:c0:ac:d8:79:41:28:9b:82:36:0b:5e:e2:
                    58:41:74:65:15:49:89:a8:10:9b:8f:6a:f2:3e:67:
                    18:24:f7:59:d2:74:48:c3:fa:8d:e9:01:1f:38:b0:
                    4f:68:15:fa:0e:d4:53:b7:bf:2a:fa:01:e4:40:33:
                    bd:52:6a:f0:f7:d5:3f:40:59:23:19:4c:be:75:98:
                    4d:de:b1:65:4d:fd:19:9b:61:16:f1:9f:9a:48:87:
                    0b:b0:71:21:af:08:37:f5:7f:06:be:a8:39:aa:f4:
                    9d:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CB:45:94:77:0F:32:B1:C3:BA:32:08:92:F7:0D:B9:E7:2A:B2:42:5F
            X509v3 Authority Key Identifier:
                keyid:AD:56:B6:71:87:A9:8B:A3:14:08:44:05:79:7B:D9:65:6E:8A:C8:BA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A914EAE4/6753B8AE257511E7AC0D172AC4F9AE02/rVa2cYepi6MUCEQFeXvZZW6KyLo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rVa2cYepi6MUCEQFeXvZZW6KyLo.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914EAE4/6753B8AE257511E7AC0D172AC4F9AE02/F59F290A459B11F0AE80E433C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  1.183.208.0/20
                IPv6:
                  240e:918:a000::/40

    Signature Algorithm: sha256WithRSAEncryption
         42:3c:72:fa:2b:86:e7:8b:52:66:8e:fa:07:e5:84:cc:26:d8:
         de:ec:d8:60:4d:f8:e9:47:41:ea:86:17:5c:08:ce:8f:a4:2c:
         1d:b3:8e:0a:34:95:14:a6:25:51:3c:42:c0:37:08:34:8e:de:
         ff:8d:83:aa:cf:22:32:8b:bc:89:62:00:33:c4:9f:53:b1:00:
         f2:fb:91:63:38:12:04:5e:45:c2:a2:0f:f9:2b:ac:68:09:eb:
         fd:7c:a1:5f:4c:44:fe:30:1d:3f:c7:62:86:da:a9:a4:36:07:
         df:ce:62:c9:96:d1:08:2e:88:d9:f3:e3:84:71:d6:3c:dc:4f:
         6a:13:fe:70:0e:c0:03:d4:03:26:a5:4b:cd:91:4a:20:fd:03:
         7d:96:68:8d:88:ae:5b:12:6d:0c:5b:70:a3:fa:da:9d:b2:f0:
         0f:0d:a2:00:64:4a:0e:a4:31:f0:b9:cc:53:90:51:c8:8f:f0:
         a9:27:9a:9e:b1:74:8d:1a:43:cd:80:4f:98:e9:23:22:79:f0:
         1d:45:69:b3:b3:b0:28:b4:54:05:98:0e:45:c1:ca:45:f0:94:
         35:d0:23:7e:06:6d:63:4c:fa:2d:62:2e:df:fd:9b:1d:62:2a:
         c3:b8:dd:63:f4:71:47:94:b2:8d:23:ad:56:dc:7f:22:12:9e:
         c7:bc:b0:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 20 08:29:06 2025 by rpki-client