Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91B89AA/85D0F346BC6211EF9A783751C4F9AE02/A719B1F01B0811F08F3C3B09C4F9AE02.roa
File:                     A719B1F01B0811F08F3C3B09C4F9AE02.roa (raw, json)
Hash identifier:          +0VuYuGfUe694y8p1nRfDg+dRfTnSFCQz77nwwmEWEw=
Subject key identifier:   F0:6D:B9:CC:F3:10:A9:D3:64:36:C7:09:FC:A5:6C:85:4A:A7:55:BE
Certificate issuer:       /CN=A91B89AA/serialNumber=277F12244A50BC654EE563FE739FE4EB719966B6
Certificate serial:       4D
Authority key identifier: 27:7F:12:24:4A:50:BC:65:4E:E5:63:FE:73:9F:E4:EB:71:99:66:B6
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/J38SJEpQvGVO5WP-c5_k63GZZrY.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91B89AA/85D0F346BC6211EF9A783751C4F9AE02/A719B1F01B0811F08F3C3B09C4F9AE02.roa
Signing time:             Wed 16 Apr 2025 21:20:42 +0000
ROA not before:           Wed 16 Apr 2025 21:20:42 +0000
ROA not after:            Tue 31 Mar 2026 00:00:00 +0000
asID:                     10143
IP address blocks:        36.50.144.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91B89AA/85D0F346BC6211EF9A783751C4F9AE02/J38SJEpQvGVO5WP-c5_k63GZZrY.crl
                          rsync://rpki.apnic.net/member_repository/A91B89AA/85D0F346BC6211EF9A783751C4F9AE02/J38SJEpQvGVO5WP-c5_k63GZZrY.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/J38SJEpQvGVO5WP-c5_k63GZZrY.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 02 May 2025 06:25:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 77 (0x4d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91B89AA, serialNumber=277F12244A50BC654EE563FE739FE4EB719966B6
        Validity
            Not Before: Apr 16 21:20:42 2025 GMT
            Not After : Mar 31 00:00:00 2026 GMT
        Subject: CN=68001f2a-0af0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:46:ba:55:bd:77:55:bf:27:5d:0a:02:d5:64:
                    cd:f5:98:34:ad:ee:95:25:7c:05:a6:b2:92:4f:de:
                    7f:ec:05:4e:93:6f:ff:d7:4e:b6:4b:0c:a9:98:de:
                    08:a1:6f:62:7b:e8:de:27:88:06:1f:87:60:9c:cb:
                    61:ad:48:d2:c5:25:9a:1a:1d:c9:fb:b0:c5:58:a3:
                    b6:f4:21:6e:8c:35:22:03:7f:94:4b:9c:35:e3:c1:
                    33:76:d2:a0:e7:fb:61:7b:71:42:f0:f3:76:3f:e4:
                    93:70:2f:7c:0f:c5:fd:9d:5f:8b:dd:07:17:04:11:
                    70:24:ef:dd:ee:7d:0b:6f:86:cb:1e:30:19:c0:1c:
                    0e:35:32:f5:df:ab:fe:b8:74:2a:59:cb:40:66:7f:
                    f1:3e:1c:2d:3d:02:2f:01:7d:90:e9:d0:54:de:95:
                    60:48:31:f3:c7:69:8b:05:6c:4e:f9:8f:e6:26:8c:
                    73:9a:bc:fb:0e:55:9f:96:b7:7f:b7:7f:2d:e1:c7:
                    ae:63:66:f8:a7:91:78:e6:79:07:4e:d6:e7:52:66:
                    16:01:7e:6c:91:42:9c:93:76:7c:40:8b:21:25:da:
                    c1:38:45:b5:f7:61:1c:5d:ce:f5:fa:f6:01:44:eb:
                    62:30:30:a6:af:7f:78:e1:20:70:b3:bc:c2:e8:97:
                    92:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F0:6D:B9:CC:F3:10:A9:D3:64:36:C7:09:FC:A5:6C:85:4A:A7:55:BE
            X509v3 Authority Key Identifier:
                keyid:27:7F:12:24:4A:50:BC:65:4E:E5:63:FE:73:9F:E4:EB:71:99:66:B6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91B89AA/85D0F346BC6211EF9A783751C4F9AE02/J38SJEpQvGVO5WP-c5_k63GZZrY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/J38SJEpQvGVO5WP-c5_k63GZZrY.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B89AA/85D0F346BC6211EF9A783751C4F9AE02/A719B1F01B0811F08F3C3B09C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  36.50.144.0/23

    Signature Algorithm: sha256WithRSAEncryption
         22:36:33:e7:bb:5c:66:03:f0:0c:9f:ad:df:88:a9:6c:d5:86:
         60:22:f9:f6:27:b6:df:91:7f:c6:d8:15:e3:9d:26:f3:20:32:
         58:73:9f:d6:3c:9c:6d:eb:35:c9:98:e3:bf:4e:a9:47:63:49:
         64:f7:85:30:24:fb:84:a4:2d:ef:b9:7f:aa:fd:8f:61:d8:0a:
         b5:24:f7:eb:55:2f:6a:d4:e9:35:d9:af:04:0c:ef:52:cd:82:
         d8:4a:1e:e9:e4:dd:90:72:cb:a0:da:14:f6:c6:d9:d7:58:b5:
         e1:72:15:a0:31:c0:b5:1c:4e:a8:a4:ca:f6:fc:d6:f7:b2:f9:
         04:1c:4b:52:63:73:8d:f9:0f:3b:72:8b:50:5c:6c:ed:f3:0d:
         08:48:19:f9:a4:45:42:8e:ed:fd:a5:38:9f:3a:60:ed:ca:45:
         a5:a1:f6:ba:89:1e:6e:0c:1f:c6:6a:cd:18:fd:c9:78:c6:9b:
         9e:20:29:4f:23:15:05:b1:08:61:1f:93:dc:93:a0:8e:a8:f3:
         5a:2f:01:25:01:44:d9:1c:4f:7b:04:2c:e9:cd:6f:c3:b6:c7:
         4e:90:dc:b5:5d:8b:48:2d:56:d5:21:e4:88:03:25:c7:87:51:
         b2:dd:84:ae:12:69:e1:b6:22:53:61:5f:32:c3:71:6b:fe:18:
         5a:96:07:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 13:06:39 2025 by rpki-client