Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9152D08/F9C333921D8711EAA9C5B170C4F9AE02/30C3D4F81D8A11EA8ECDAA75C4F9AE02.roa
File:                     30C3D4F81D8A11EA8ECDAA75C4F9AE02.roa (raw, json)
Hash identifier:          mpanMW6E++IIJhwRfBokQkjYWR4BXeWQNkL+zlkPQk0=
Subject key identifier:   E6:DA:E0:C9:4E:5D:5B:42:3F:66:85:32:10:E1:96:34:08:5C:C8:89
Certificate issuer:       /CN=A9152D08/serialNumber=34DC20129EAD6F41A7CA2D99C9BD3E7E6033CB88
Certificate serial:       0C4F
Authority key identifier: 34:DC:20:12:9E:AD:6F:41:A7:CA:2D:99:C9:BD:3E:7E:60:33:CB:88
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NNwgEp6tb0Gnyi2Zyb0-fmAzy4g.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9152D08/F9C333921D8711EAA9C5B170C4F9AE02/30C3D4F81D8A11EA8ECDAA75C4F9AE02.roa
Signing time:             Fri 14 Mar 2025 19:19:07 +0000
ROA not before:           Fri 14 Mar 2025 19:19:07 +0000
ROA not after:            Thu 28 May 2026 00:00:00 +0000
asID:                     206776
IP address blocks:        111.90.156.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9152D08/F9C333921D8711EAA9C5B170C4F9AE02/NNwgEp6tb0Gnyi2Zyb0-fmAzy4g.crl
                          rsync://rpki.apnic.net/member_repository/A9152D08/F9C333921D8711EAA9C5B170C4F9AE02/NNwgEp6tb0Gnyi2Zyb0-fmAzy4g.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NNwgEp6tb0Gnyi2Zyb0-fmAzy4g.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 01 May 2025 18:50:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3151 (0xc4f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9152D08, serialNumber=34DC20129EAD6F41A7CA2D99C9BD3E7E6033CB88
        Validity
            Not Before: Mar 14 19:19:07 2025 GMT
            Not After : May 28 00:00:00 2026 GMT
        Subject: CN=67d4812a-bf82
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:01:d0:91:30:95:a9:bc:92:8c:f7:be:7d:34:
                    fe:f5:c2:08:18:4b:c8:37:02:7d:3a:63:4d:6f:fe:
                    e4:6b:99:e4:f4:16:f8:f9:83:df:5a:c4:a8:65:5a:
                    b4:47:67:89:80:31:ed:2c:be:37:eb:df:c7:23:b5:
                    f1:f5:e2:58:d6:0c:c6:d7:45:a1:ed:5e:45:99:ba:
                    b8:a7:b7:a0:c2:f0:90:6a:36:90:31:8b:75:2e:03:
                    c4:d5:ca:0d:34:bd:92:54:bc:cb:45:93:f5:d2:f6:
                    79:a4:e7:8d:50:6f:12:60:26:44:cb:d5:4b:f6:7c:
                    39:b8:cb:9b:86:17:4d:1f:30:2e:b6:ed:e8:dc:28:
                    b6:35:de:98:9f:f4:5d:48:9b:c5:f2:3e:4e:ff:e7:
                    5d:eb:ae:b8:6b:6e:3c:22:85:ce:c8:d4:bd:11:06:
                    61:e9:e8:6d:fa:32:b7:0b:cc:83:a6:d0:e3:89:b6:
                    7c:1a:30:09:a0:0a:a3:75:49:dc:63:41:82:88:64:
                    f3:65:f2:5c:72:9d:cf:72:75:35:13:7d:8d:97:c7:
                    5c:ae:21:10:52:67:b8:45:cc:d5:e8:cf:d8:4f:22:
                    b9:b8:3f:1a:51:76:7b:82:03:dd:27:ea:01:c3:6f:
                    36:7d:76:de:6f:57:ad:ad:15:d6:c8:bc:cb:c2:fd:
                    79:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E6:DA:E0:C9:4E:5D:5B:42:3F:66:85:32:10:E1:96:34:08:5C:C8:89
            X509v3 Authority Key Identifier:
                keyid:34:DC:20:12:9E:AD:6F:41:A7:CA:2D:99:C9:BD:3E:7E:60:33:CB:88

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9152D08/F9C333921D8711EAA9C5B170C4F9AE02/NNwgEp6tb0Gnyi2Zyb0-fmAzy4g.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NNwgEp6tb0Gnyi2Zyb0-fmAzy4g.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9152D08/F9C333921D8711EAA9C5B170C4F9AE02/30C3D4F81D8A11EA8ECDAA75C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  111.90.156.0/24

    Signature Algorithm: sha256WithRSAEncryption
         38:bb:78:30:24:de:44:16:e0:b8:43:27:a0:19:2a:35:8d:97:
         2a:dd:4b:26:99:b2:04:47:94:93:af:76:e7:67:17:0d:a9:7d:
         fb:5a:cb:61:c6:22:ac:46:6e:c5:d4:bd:a4:61:90:d3:ed:2e:
         e6:96:6a:62:7e:a7:6e:dd:a0:54:8c:ec:51:4c:a8:43:52:33:
         2b:9b:c2:8f:7b:93:25:c3:db:12:30:f5:3a:58:4f:76:f7:d9:
         d5:05:d9:0f:c8:13:ba:85:3a:db:f4:4e:28:92:d4:39:d9:28:
         4e:92:05:05:cd:b9:5d:43:99:8d:c4:27:7b:04:f7:bf:bf:e5:
         ec:c9:b6:30:1c:bd:07:a6:3b:aa:7b:71:2e:f5:19:f9:39:bc:
         9f:11:1c:28:21:6c:56:8c:bb:3b:a4:f4:8e:58:1e:8a:91:23:
         3b:c8:6f:a3:eb:d0:a6:ea:e3:3f:16:f3:fe:d0:97:f6:07:1e:
         3b:df:02:8e:a4:5d:3c:db:a8:bd:5a:99:b0:db:90:57:9f:09:
         98:30:7d:3a:0f:84:a4:ba:75:1b:85:77:43:46:95:29:91:61:
         d5:12:1b:76:10:3b:8b:00:54:02:1e:17:c3:4d:de:4c:41:e6:
         15:6e:5b:63:36:71:55:83:84:a4:80:d4:f7:83:30:27:83:29:
         8f:3b:19:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 09:26:42 2025 by rpki-client