Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91DA10A/E340204CF18711EAB9734B1CC4F9AE02/13279E2C124011ED9E430A4CC4F9AE02.roa
File:                     13279E2C124011ED9E430A4CC4F9AE02.roa (raw, json)
Hash identifier:          6ixsZ+U2NSefvVb36mPlfQcQ8GQSyjxzHzBxsc46ols=
Subject key identifier:   88:CD:F9:66:DA:5D:E1:FD:A7:97:39:F3:31:C9:AD:81:05:D5:52:FB
Certificate issuer:       /CN=A91DA10A/serialNumber=49B5A46463E3A2B70A33446014EBF40E5C9EFE74
Certificate serial:       0816
Authority key identifier: 49:B5:A4:64:63:E3:A2:B7:0A:33:44:60:14:EB:F4:0E:5C:9E:FE:74
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SbWkZGPjorcKM0RgFOv0Dlye_nQ.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91DA10A/E340204CF18711EAB9734B1CC4F9AE02/13279E2C124011ED9E430A4CC4F9AE02.roa
Signing time:             Mon 26 May 2025 21:19:14 +0000
ROA not before:           Mon 26 May 2025 21:19:14 +0000
ROA not after:            Thu 30 Jul 2026 00:00:00 +0000
asID:                     18013
IP address blocks:        144.48.6.0/24 maxlen: 24
                          144.48.7.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91DA10A/E340204CF18711EAB9734B1CC4F9AE02/SbWkZGPjorcKM0RgFOv0Dlye_nQ.crl
                          rsync://rpki.apnic.net/member_repository/A91DA10A/E340204CF18711EAB9734B1CC4F9AE02/SbWkZGPjorcKM0RgFOv0Dlye_nQ.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SbWkZGPjorcKM0RgFOv0Dlye_nQ.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 25 Jun 2025 20:51:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2070 (0x816)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91DA10A, serialNumber=49B5A46463E3A2B70A33446014EBF40E5C9EFE74
        Validity
            Not Before: May 26 21:19:14 2025 GMT
            Not After : Jul 30 00:00:00 2026 GMT
        Subject: CN=6834dad2-1ffb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:75:c8:1f:a7:8a:8c:eb:2f:d8:76:f5:be:49:
                    5a:81:c7:38:53:d9:4e:a4:a7:8c:52:68:2b:8d:ad:
                    19:aa:ca:bf:ba:b8:f6:fe:dd:6a:0a:0a:a9:85:89:
                    25:6c:68:83:df:3d:57:91:0d:02:f4:bc:8b:6d:ba:
                    6c:7d:68:1c:74:b8:f9:02:1b:88:0e:ea:ed:dd:60:
                    fd:c6:9d:69:48:dc:00:86:87:72:85:e6:0b:22:e1:
                    62:0c:d5:fe:ba:f9:e5:fc:29:51:70:be:50:a1:e8:
                    97:9f:f1:1a:0c:d6:e3:18:83:08:f2:b2:b6:0f:63:
                    20:89:2a:2d:1b:ce:0e:90:00:3f:8e:d6:1f:5a:93:
                    bc:b2:d5:3d:94:03:a1:66:6e:24:43:26:9e:25:23:
                    18:80:05:40:bd:c6:14:a0:88:68:bf:0e:86:08:23:
                    a9:b2:40:3c:e6:17:8e:1f:07:af:ab:f7:db:92:95:
                    e7:7e:ad:5b:a0:cf:b8:7e:cb:d2:86:dc:18:60:94:
                    1b:46:80:9f:5a:64:f8:b7:f6:6e:cb:c1:80:95:df:
                    33:8a:eb:08:01:4a:e0:e4:b9:e2:38:2b:8b:01:14:
                    5d:67:ed:85:da:85:50:be:3f:be:a7:84:c4:df:4e:
                    3b:47:16:26:c6:69:04:f8:da:3f:7a:de:d5:7f:63:
                    49:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                88:CD:F9:66:DA:5D:E1:FD:A7:97:39:F3:31:C9:AD:81:05:D5:52:FB
            X509v3 Authority Key Identifier:
                keyid:49:B5:A4:64:63:E3:A2:B7:0A:33:44:60:14:EB:F4:0E:5C:9E:FE:74

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91DA10A/E340204CF18711EAB9734B1CC4F9AE02/SbWkZGPjorcKM0RgFOv0Dlye_nQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SbWkZGPjorcKM0RgFOv0Dlye_nQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DA10A/E340204CF18711EAB9734B1CC4F9AE02/13279E2C124011ED9E430A4CC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  144.48.6.0/23

    Signature Algorithm: sha256WithRSAEncryption
         69:76:38:cc:e0:a7:3f:8e:02:1d:5e:dd:7a:64:42:06:75:66:
         da:e1:4a:b7:15:70:7f:55:a0:63:98:d4:4b:6b:25:10:c4:62:
         c3:f4:dd:6f:36:90:3e:5d:5c:d0:d2:3f:bb:13:fa:9b:5e:83:
         f4:c5:8d:97:e2:4e:df:7d:f6:e1:7a:56:be:fe:be:6e:d6:67:
         c6:27:c4:7a:06:8a:8e:a2:e2:d0:80:5e:0a:9a:47:4b:8d:1d:
         7e:94:fc:08:65:54:f0:54:9d:f0:67:e9:1f:9b:19:9b:6b:d3:
         21:0e:46:49:c2:7b:a6:28:7d:34:ba:5a:f0:8c:50:28:64:66:
         ee:17:59:dc:e7:29:8c:86:7a:3b:dc:ff:8c:50:fb:7c:ce:52:
         1d:8f:2a:b6:a5:ce:d6:d4:c5:38:8d:47:a5:2e:f6:7a:20:b0:
         8d:67:8b:06:44:35:27:8f:84:e1:25:a0:c9:8b:37:57:58:3c:
         a6:5f:b9:c1:bb:e1:ed:ba:13:88:fb:a9:37:8f:a2:3c:43:3d:
         fe:78:63:b7:8e:b3:5d:ba:88:30:78:9d:1f:e1:9f:51:57:1e:
         9d:36:eb:b3:64:e5:2f:ca:5d:43:42:00:ad:1b:f8:de:a6:de:
         e0:14:29:55:74:6d:44:a0:d4:25:55:aa:d7:cd:99:17:e7:3e:
         87:71:8b:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 20 19:45:00 2025 by rpki-client