Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91AB193/93D4E490F63111EE9ACBE221C4F9AE02/AC82414A392511EF88F70D39C4F9AE02.roa
File:                     AC82414A392511EF88F70D39C4F9AE02.roa (raw, json)
Hash identifier:          wtDTYViLvQ71y8LfCWrpB6kCmz/GyFN75jh6EmmBpDw=
Subject key identifier:   1F:1B:EE:16:B9:7B:BE:CD:14:D2:80:CD:EC:56:93:5C:E1:0D:5A:CB
Certificate issuer:       /CN=A91AB193/serialNumber=7B1AE27D3CF51499C5056E7DA873665E4E415179
Certificate serial:       CC
Authority key identifier: 7B:1A:E2:7D:3C:F5:14:99:C5:05:6E:7D:A8:73:66:5E:4E:41:51:79
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/exrifTz1FJnFBW59qHNmXk5BUXk.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91AB193/93D4E490F63111EE9ACBE221C4F9AE02/AC82414A392511EF88F70D39C4F9AE02.roa
Signing time:             Fri 11 Apr 2025 05:11:35 +0000
ROA not before:           Fri 11 Apr 2025 05:11:35 +0000
ROA not after:            Wed 01 Jul 2026 00:00:00 +0000
asID:                     140991
IP address blocks:        203.223.88.0/24 maxlen: 25
                          2001:df3:a3c0::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91AB193/93D4E490F63111EE9ACBE221C4F9AE02/exrifTz1FJnFBW59qHNmXk5BUXk.crl
                          rsync://rpki.apnic.net/member_repository/A91AB193/93D4E490F63111EE9ACBE221C4F9AE02/exrifTz1FJnFBW59qHNmXk5BUXk.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/exrifTz1FJnFBW59qHNmXk5BUXk.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 02 May 2025 04:50:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 204 (0xcc)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91AB193, serialNumber=7B1AE27D3CF51499C5056E7DA873665E4E415179
        Validity
            Not Before: Apr 11 05:11:35 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=67f8a486-ac32
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:eb:a9:c6:3a:bd:1d:4e:3f:e8:c5:71:ba:13:b6:
                    9c:0e:d2:98:63:75:b6:60:25:bb:8d:6f:fc:ec:ec:
                    77:79:e9:9a:fb:b7:85:5e:45:79:a8:98:1d:39:3d:
                    34:ac:36:4a:84:97:f1:d2:1c:ed:34:bc:68:6a:76:
                    eb:f8:ab:8a:a8:2a:b4:4c:b5:45:cc:59:98:05:d3:
                    c8:2d:34:b5:ab:38:a2:d9:a0:06:cf:6a:64:67:d9:
                    ef:93:a2:30:e0:a2:51:ed:83:fe:3c:88:da:7f:79:
                    7e:e3:37:87:c4:e2:91:f1:63:a9:17:b4:83:19:ca:
                    35:a4:71:ce:ea:68:71:5b:00:1b:b7:5a:ab:d6:88:
                    df:51:5a:f3:35:80:22:d4:32:29:e6:37:89:bc:e4:
                    cd:34:1b:73:57:9c:67:1b:13:df:f0:47:93:ed:e2:
                    14:ab:ad:53:1a:e0:f5:58:9e:67:ff:94:b7:44:16:
                    6b:0e:e0:3c:69:7b:83:bb:54:3c:28:4a:e0:ae:24:
                    5c:54:23:73:ed:7e:08:f0:5b:03:bf:1f:6c:1d:6a:
                    a7:0e:0a:a9:7a:46:fe:cb:63:47:e8:0f:80:e9:e1:
                    d4:e1:4b:96:f2:e3:d6:b8:5f:42:0e:bd:73:ab:f3:
                    cf:02:d9:7c:b6:fc:76:26:e1:34:2d:3e:29:c4:08:
                    de:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1F:1B:EE:16:B9:7B:BE:CD:14:D2:80:CD:EC:56:93:5C:E1:0D:5A:CB
            X509v3 Authority Key Identifier:
                keyid:7B:1A:E2:7D:3C:F5:14:99:C5:05:6E:7D:A8:73:66:5E:4E:41:51:79

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91AB193/93D4E490F63111EE9ACBE221C4F9AE02/exrifTz1FJnFBW59qHNmXk5BUXk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/exrifTz1FJnFBW59qHNmXk5BUXk.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AB193/93D4E490F63111EE9ACBE221C4F9AE02/AC82414A392511EF88F70D39C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  203.223.88.0/24
                IPv6:
                  2001:df3:a3c0::/48

    Signature Algorithm: sha256WithRSAEncryption
         0b:f8:18:69:80:61:bf:5f:78:96:a4:82:53:77:94:24:32:8a:
         2c:4b:13:ab:06:88:36:f6:c2:16:46:d7:2d:45:d2:08:e9:a6:
         65:ef:d6:52:6a:8b:4b:9f:45:e7:df:16:33:b5:fd:c9:56:ba:
         38:67:8b:df:4f:93:5e:dd:4f:e2:ec:7d:9a:43:5b:72:ba:f4:
         86:e1:e0:28:e4:42:6c:43:33:1c:5b:df:49:59:42:f9:48:98:
         da:02:3d:71:d0:b3:57:c1:98:7a:47:23:3f:00:e3:c5:c5:3d:
         ce:b9:bf:d5:9a:7b:ad:29:ee:54:93:3a:dc:49:4a:d4:dd:5a:
         9a:f8:d6:e0:66:a4:0c:11:d3:b9:8a:d6:20:68:8d:43:c4:4e:
         3e:3b:a6:97:e1:38:cb:ae:96:6d:77:dd:6e:3e:8c:d7:42:0e:
         2c:e0:f1:68:ed:0f:3d:0e:95:4b:02:18:67:81:65:32:c0:34:
         03:d2:f3:98:86:7a:9b:29:5a:25:3e:35:16:48:a2:8f:65:77:
         0b:2f:ef:6e:9a:6d:42:e3:5c:d1:00:ed:63:e9:d2:9c:90:0e:
         7b:1d:81:a7:19:49:95:11:34:0d:e2:e4:b5:e9:95:3b:a4:e3:
         7e:89:a9:d3:96:6b:76:10:7a:8a:39:7d:a0:f9:e8:50:15:ad:
         8c:a9:26:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 08:05:46 2025 by rpki-client