Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91AB74D/D359568CA8DC11EB979DA50EC4F9AE02/1B16F1A0ADB511EBB5CFE734C4F9AE02.roa
File:                     1B16F1A0ADB511EBB5CFE734C4F9AE02.roa (raw, json)
Hash identifier:          EoEXlCI1GOehyvV1dOn2OebjZ7e0VJ5M5h2oFDhhyXQ=
Subject key identifier:   88:C6:29:DC:11:29:EB:89:A4:52:52:6A:BB:A4:95:77:9B:08:64:FC
Certificate issuer:       /CN=A91AB74D/serialNumber=3AF09D28CA487A9326631A6BE9BD9BDBAA18DA75
Certificate serial:       060C
Authority key identifier: 3A:F0:9D:28:CA:48:7A:93:26:63:1A:6B:E9:BD:9B:DB:AA:18:DA:75
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/OvCdKMpIepMmYxpr6b2b26oY2nU.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91AB74D/D359568CA8DC11EB979DA50EC4F9AE02/1B16F1A0ADB511EBB5CFE734C4F9AE02.roa
Signing time:             Fri 16 May 2025 23:32:47 +0000
ROA not before:           Fri 16 May 2025 23:32:47 +0000
ROA not after:            Thu 30 Jul 2026 00:00:00 +0000
asID:                     142110
IP address blocks:        143.92.104.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91AB74D/D359568CA8DC11EB979DA50EC4F9AE02/OvCdKMpIepMmYxpr6b2b26oY2nU.crl
                          rsync://rpki.apnic.net/member_repository/A91AB74D/D359568CA8DC11EB979DA50EC4F9AE02/OvCdKMpIepMmYxpr6b2b26oY2nU.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/OvCdKMpIepMmYxpr6b2b26oY2nU.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 23 Jun 2025 22:29:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1548 (0x60c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91AB74D, serialNumber=3AF09D28CA487A9326631A6BE9BD9BDBAA18DA75
        Validity
            Not Before: May 16 23:32:47 2025 GMT
            Not After : Jul 30 00:00:00 2026 GMT
        Subject: CN=6827cb1f-f50e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:91:b2:4e:26:58:90:98:88:43:09:aa:b8:e4:
                    14:b3:09:53:d5:21:95:46:1c:ba:e4:5e:c0:b4:5a:
                    a6:80:af:68:b3:74:30:d8:53:03:72:2d:ba:1c:5e:
                    c8:25:a9:10:5b:fe:13:4b:69:ea:4c:dc:4a:17:60:
                    bc:3d:3b:59:fe:48:34:67:aa:42:22:70:59:81:57:
                    34:b8:2c:87:77:1d:8c:2c:0c:3c:57:fd:49:79:c4:
                    2c:d6:ab:79:18:f4:0a:ba:a6:c5:1c:d0:19:1c:02:
                    78:18:2c:e6:a7:48:5e:39:27:02:c3:cd:2f:09:c5:
                    6e:7a:6b:06:14:d0:a7:ef:14:26:ab:3e:0d:90:51:
                    e1:f7:b7:bb:03:b2:69:fc:85:32:68:5d:09:28:ea:
                    0a:09:aa:f9:ca:57:cd:5a:8a:e2:d5:24:c0:5a:c4:
                    2d:e7:8f:f5:34:ab:4f:c8:8a:28:8b:bd:bf:a5:62:
                    7a:fb:f8:40:e5:c3:39:fb:00:59:ce:98:05:b0:a6:
                    10:53:10:b4:ae:5d:df:c9:9f:f7:12:1e:b9:7a:c6:
                    e3:64:27:31:85:06:bb:38:30:66:a8:ac:5f:93:85:
                    c9:7b:a2:b7:98:6f:41:98:d0:80:e7:66:9d:18:48:
                    63:5e:62:1f:fa:66:c6:f9:4f:1c:5b:8c:f4:e0:2e:
                    45:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                88:C6:29:DC:11:29:EB:89:A4:52:52:6A:BB:A4:95:77:9B:08:64:FC
            X509v3 Authority Key Identifier:
                keyid:3A:F0:9D:28:CA:48:7A:93:26:63:1A:6B:E9:BD:9B:DB:AA:18:DA:75

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91AB74D/D359568CA8DC11EB979DA50EC4F9AE02/OvCdKMpIepMmYxpr6b2b26oY2nU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/OvCdKMpIepMmYxpr6b2b26oY2nU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AB74D/D359568CA8DC11EB979DA50EC4F9AE02/1B16F1A0ADB511EBB5CFE734C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  143.92.104.0/22

    Signature Algorithm: sha256WithRSAEncryption
         38:a9:ad:b6:a3:71:3f:8c:96:eb:af:6a:4b:2b:31:69:44:38:
         e9:5d:fc:8e:1a:58:3c:b1:62:58:7e:c6:ac:27:b2:54:75:10:
         e5:43:e4:11:b9:ca:37:21:57:d1:5b:ac:c1:95:aa:e4:63:27:
         57:d1:ef:ae:3e:53:2f:d9:50:68:c3:a8:c6:a6:06:60:f0:4d:
         67:65:ee:08:ba:ac:07:33:fa:d9:65:67:b5:2f:9d:13:b3:57:
         4a:97:02:e6:db:7e:2e:1f:2b:bf:4f:ac:54:2d:7e:aa:c3:55:
         ff:ac:47:1c:97:e4:fa:c2:7c:5a:ff:21:f1:28:25:49:d5:5b:
         a4:19:3d:a6:47:64:ca:30:fc:56:43:9a:84:39:d8:09:2c:7d:
         fa:fb:2c:ba:c6:be:ee:1c:37:f3:bb:2f:27:0e:b0:c6:b3:ca:
         27:75:66:b3:91:f9:2a:4b:8d:b0:71:4e:f0:c0:c1:cd:1c:03:
         e9:fb:ac:0e:15:a7:3f:63:66:0c:59:b6:26:ab:44:b2:0f:e8:
         f5:eb:0a:61:4f:bc:4d:c1:81:1e:fd:2c:73:71:c9:15:25:4d:
         33:13:90:2b:f4:ac:94:94:38:eb:b7:f7:63:f1:5d:61:ae:ea:
         13:20:3a:64:27:0b:bb:8e:56:3c:9b:37:96:1e:57:61:c4:be:
         a9:e1:e1:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 17 14:26:40 2025 by rpki-client