Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91A0832/9DAF780E1D9411E29901F3F808B02CD2/F33CEFA6FF0C11EFAFAF7D3AC4F9AE02.roa
File:                     F33CEFA6FF0C11EFAFAF7D3AC4F9AE02.roa (raw, json)
Hash identifier:          hCAJoif7R0PdtafhhCqVg3AWh/fUgT/PZ22s2qQ33mA=
Subject key identifier:   72:84:08:92:4F:3E:CA:6F:A5:25:EA:BE:13:BB:32:E9:F6:BD:FC:0A
Certificate issuer:       /CN=A91A0832/serialNumber=9ED9055107C70F85BB91A8DA0270B5CA760AEB54
Certificate serial:       36B8
Authority key identifier: 9E:D9:05:51:07:C7:0F:85:BB:91:A8:DA:02:70:B5:CA:76:0A:EB:54
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ntkFUQfHD4W7kajaAnC1ynYK61Q.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91A0832/9DAF780E1D9411E29901F3F808B02CD2/F33CEFA6FF0C11EFAFAF7D3AC4F9AE02.roa
Signing time:             Sat 22 Mar 2025 15:00:59 +0000
ROA not before:           Sat 22 Mar 2025 15:00:58 +0000
ROA not after:            Wed 01 Jul 2026 00:00:00 +0000
asID:                     136969
IP address blocks:        39.62.0.0/19 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91A0832/9DAF780E1D9411E29901F3F808B02CD2/ntkFUQfHD4W7kajaAnC1ynYK61Q.crl
                          rsync://rpki.apnic.net/member_repository/A91A0832/9DAF780E1D9411E29901F3F808B02CD2/ntkFUQfHD4W7kajaAnC1ynYK61Q.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ntkFUQfHD4W7kajaAnC1ynYK61Q.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 01 May 2025 14:46:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 14008 (0x36b8)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A0832, serialNumber=9ED9055107C70F85BB91A8DA0270B5CA760AEB54
        Validity
            Not Before: Mar 22 15:00:58 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=67ded0aa-ec45
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e4:d4:38:94:9c:45:56:4d:5d:04:60:69:be:1d:
                    1d:34:23:87:f9:60:3b:9b:56:6e:f5:6a:ac:77:9d:
                    b0:15:51:fd:29:bf:85:a6:5d:31:aa:2a:fb:30:18:
                    5c:d7:91:48:49:72:ac:8f:45:04:5a:3a:6c:90:4f:
                    6a:4f:b4:34:b8:66:38:24:bb:12:04:0e:6f:a6:00:
                    50:da:37:9b:51:18:e9:9b:10:71:8c:2f:48:56:91:
                    59:dd:4d:ba:ff:c5:6a:59:8d:36:4d:6b:f0:aa:bb:
                    ee:74:8f:65:05:0b:0c:5c:53:1d:0b:dc:12:cf:27:
                    ac:f2:bc:bc:c4:61:f1:ec:92:b0:3b:40:a0:f3:3d:
                    3d:e4:a6:94:1a:85:b9:d7:dd:30:4e:99:6a:f5:c4:
                    02:bf:6a:9e:aa:24:63:5c:96:ca:6c:7d:62:6f:c3:
                    a8:f2:7f:e0:9a:92:06:5f:90:cf:01:37:fa:45:67:
                    0f:6e:73:11:36:f9:02:5b:d2:19:c3:8a:ff:d1:be:
                    5f:96:8e:90:0f:a4:8d:78:66:8e:bf:e1:db:77:5d:
                    46:41:0a:4d:43:8a:5b:37:04:b5:52:89:d9:6f:18:
                    4f:9c:61:43:5d:5d:71:a4:60:a3:2e:cb:03:e0:e8:
                    b9:dc:45:54:f3:25:c5:56:7e:04:cb:e6:ce:e8:94:
                    b2:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                72:84:08:92:4F:3E:CA:6F:A5:25:EA:BE:13:BB:32:E9:F6:BD:FC:0A
            X509v3 Authority Key Identifier:
                keyid:9E:D9:05:51:07:C7:0F:85:BB:91:A8:DA:02:70:B5:CA:76:0A:EB:54

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91A0832/9DAF780E1D9411E29901F3F808B02CD2/ntkFUQfHD4W7kajaAnC1ynYK61Q.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ntkFUQfHD4W7kajaAnC1ynYK61Q.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A0832/9DAF780E1D9411E29901F3F808B02CD2/F33CEFA6FF0C11EFAFAF7D3AC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  39.62.0.0/19

    Signature Algorithm: sha256WithRSAEncryption
         09:67:fa:b0:0b:26:83:30:3d:01:91:0a:88:3d:c9:d4:cc:34:
         a8:d0:6f:36:e9:1a:3d:20:f2:e3:12:36:17:63:52:37:fb:9b:
         ac:ae:97:88:02:7a:47:93:0f:e4:d3:9a:1a:c7:b6:d4:e6:d8:
         53:f2:9e:8c:13:20:27:0c:88:d7:bb:47:d5:4d:58:5a:c1:71:
         d0:e8:2d:71:58:26:e3:49:c5:48:71:43:90:7c:8c:6b:af:7f:
         dd:56:61:72:e6:92:e9:dc:c4:73:a2:33:c4:83:3a:b5:32:0d:
         80:80:19:f2:a2:c4:7e:98:50:c7:a7:db:c0:b0:d2:a3:9c:af:
         37:d7:68:96:04:fb:3c:f1:eb:af:a6:47:8d:aa:79:da:78:9a:
         6b:60:6e:13:a5:56:39:c0:d0:10:61:e5:7c:03:5c:32:68:c2:
         27:17:f6:b9:d8:82:8e:01:6d:aa:af:f2:22:4c:90:cc:45:59:
         e5:f5:57:9f:ce:1a:19:43:de:9d:bc:66:d6:c5:7a:85:9f:12:
         11:a2:25:4a:e0:2b:07:61:71:50:e0:08:0f:61:8f:c3:cd:18:
         71:f6:71:c7:23:c3:48:70:70:0a:17:a2:c4:ed:ad:ec:4e:12:
         72:e3:2d:a2:df:87:11:e6:73:77:4d:f0:58:58:d7:4b:81:01:
         16:13:2a:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 08:06:47 2025 by rpki-client