Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91C1323/084D88D495B711EABB824F1BC4F9AE02/A6C119B4221011F09599EB53C4F9AE02.roa
File:                     A6C119B4221011F09599EB53C4F9AE02.roa (raw, json)
Hash identifier:          FCrwZtck1g/cb/g7bMby9UDvnwqBpTkuQ28aO07l19w=
Subject key identifier:   39:73:61:22:BA:82:AC:B2:07:F2:E6:4D:F9:62:5D:1D:71:86:D7:70
Certificate issuer:       /CN=A91C1323/serialNumber=412A6511CFEDCFECB5590C96C8C361E2FED44857
Certificate serial:       600A
Authority key identifier: 41:2A:65:11:CF:ED:CF:EC:B5:59:0C:96:C8:C3:61:E2:FE:D4:48:57
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QSplEc_tz-y1WQyWyMNh4v7USFc.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91C1323/084D88D495B711EABB824F1BC4F9AE02/A6C119B4221011F09599EB53C4F9AE02.roa
Signing time:             Fri 25 Apr 2025 20:05:36 +0000
ROA not before:           Fri 25 Apr 2025 20:05:36 +0000
ROA not after:            Wed 30 Jul 2025 00:00:00 +0000
asID:                     17487
IP address blocks:        218.188.87.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91C1323/084D88D495B711EABB824F1BC4F9AE02/QSplEc_tz-y1WQyWyMNh4v7USFc.crl
                          rsync://rpki.apnic.net/member_repository/A91C1323/084D88D495B711EABB824F1BC4F9AE02/QSplEc_tz-y1WQyWyMNh4v7USFc.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QSplEc_tz-y1WQyWyMNh4v7USFc.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 02 May 2025 21:30:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 24586 (0x600a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91C1323, serialNumber=412A6511CFEDCFECB5590C96C8C361E2FED44857
        Validity
            Not Before: Apr 25 20:05:36 2025 GMT
            Not After : Jul 30 00:00:00 2025 GMT
        Subject: CN=680beb10-3bf7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:db:80:bd:47:76:de:e7:77:d8:9b:9d:dd:8b:
                    48:cb:31:58:6b:e0:32:62:c5:66:49:b5:4b:41:dd:
                    83:cc:8b:72:45:6b:fe:9e:f8:e8:27:93:31:76:36:
                    3f:b6:32:ed:ea:e2:84:77:7d:45:5c:83:43:8f:30:
                    16:fc:1f:6e:29:5a:d1:51:a1:40:02:97:da:df:6d:
                    b1:9a:bb:8f:c5:7a:a7:cc:41:7b:5d:ba:7e:7a:ce:
                    1b:8f:b4:89:f0:59:49:39:de:22:eb:4d:01:3d:4e:
                    52:1f:3c:2e:a6:d2:e2:f3:c9:47:65:52:22:41:8f:
                    22:44:c0:c4:c2:45:a4:4f:da:ea:c9:c6:8f:8d:54:
                    83:b2:23:a3:9e:f0:7d:7e:d4:ae:f2:32:2d:20:aa:
                    87:74:c7:2a:dc:87:24:83:92:40:e2:78:04:ac:19:
                    87:3b:12:0d:79:a7:92:94:40:49:0e:da:2a:b6:8e:
                    40:89:07:18:5d:fa:50:fd:d0:ff:6e:83:7e:94:f1:
                    88:c7:eb:29:23:68:bb:1d:ef:f4:d5:b2:63:2b:63:
                    17:5e:92:18:9a:f0:d5:76:14:6e:c2:53:6d:dc:cb:
                    3c:2d:e4:f5:82:c1:bb:0c:8f:d1:2c:b3:4d:5f:49:
                    de:d5:1b:f0:16:1f:fa:b4:d9:bb:34:be:77:ad:b4:
                    7d:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                39:73:61:22:BA:82:AC:B2:07:F2:E6:4D:F9:62:5D:1D:71:86:D7:70
            X509v3 Authority Key Identifier:
                keyid:41:2A:65:11:CF:ED:CF:EC:B5:59:0C:96:C8:C3:61:E2:FE:D4:48:57

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91C1323/084D88D495B711EABB824F1BC4F9AE02/QSplEc_tz-y1WQyWyMNh4v7USFc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QSplEc_tz-y1WQyWyMNh4v7USFc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C1323/084D88D495B711EABB824F1BC4F9AE02/A6C119B4221011F09599EB53C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  218.188.87.0/24

    Signature Algorithm: sha256WithRSAEncryption
         9a:5c:b1:7a:6f:2e:ff:a1:0b:30:dc:61:56:9d:14:a1:b6:0f:
         10:b3:35:22:92:ca:d6:e9:da:9a:18:c1:17:e0:59:0a:00:33:
         0f:03:17:30:c5:20:40:3c:1c:6d:5c:4e:bf:bd:fc:5a:52:ab:
         91:8f:2e:47:df:9a:af:7c:4b:03:de:f9:a8:b9:94:92:48:bc:
         a8:03:0e:ce:fe:ae:ce:77:54:c3:9d:de:91:73:0c:6e:8c:13:
         34:83:6c:35:01:71:c3:ed:14:12:d9:5b:8d:dd:fc:39:e9:34:
         93:a5:01:b1:8c:bf:ae:ee:7b:5a:f4:df:5a:9e:e6:e7:1b:25:
         9c:37:f8:42:d7:d6:6b:30:c0:44:00:9e:1d:18:e0:2f:85:6b:
         c8:f3:45:c5:46:eb:9f:e9:da:04:07:87:08:42:1f:8f:cf:3f:
         d1:d3:a2:35:d3:45:64:7c:a2:e0:e0:81:71:85:65:b9:89:a2:
         fa:0f:83:66:ca:03:32:21:0b:fe:3a:46:ee:65:b0:4c:dd:dc:
         72:6e:50:97:2a:60:c6:58:46:2e:22:19:63:fc:22:a2:ca:f2:
         88:8e:45:c0:3d:f1:00:df:37:11:08:86:8c:f4:9a:8b:d5:22:
         7b:26:2f:7c:d9:36:75:52:e2:b2:14:b4:fc:b9:da:ff:55:96:
         0d:d5:cc:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 12:56:30 2025 by rpki-client