Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91DFB70/2983647C838F11E586FC5812C4F9AE02/E0CC1C58235911ECAB7C7661C4F9AE02.roa
File:                     E0CC1C58235911ECAB7C7661C4F9AE02.roa (raw, json)
Hash identifier:          EnqXxHxizowT8zb+SHcbhbA09vXgZZGAE/YRBfr59Gc=
Subject key identifier:   9A:0A:76:3B:E4:BC:42:7A:49:7F:39:85:2E:78:72:F7:A6:9C:8E:88
Certificate issuer:       /CN=A91DFB70/serialNumber=5D2DD154B5DCE21FB786C526DBDEF1B045928AB8
Certificate serial:       278A
Authority key identifier: 5D:2D:D1:54:B5:DC:E2:1F:B7:86:C5:26:DB:DE:F1:B0:45:92:8A:B8
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XS3RVLXc4h-3hsUm297xsEWSirg.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91DFB70/2983647C838F11E586FC5812C4F9AE02/E0CC1C58235911ECAB7C7661C4F9AE02.roa
Signing time:             Tue 08 Apr 2025 15:53:37 +0000
ROA not before:           Tue 08 Apr 2025 15:53:37 +0000
ROA not after:            Thu 28 May 2026 00:00:00 +0000
asID:                     147044
IP address blocks:        203.213.196.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91DFB70/2983647C838F11E586FC5812C4F9AE02/XS3RVLXc4h-3hsUm297xsEWSirg.crl
                          rsync://rpki.apnic.net/member_repository/A91DFB70/2983647C838F11E586FC5812C4F9AE02/XS3RVLXc4h-3hsUm297xsEWSirg.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XS3RVLXc4h-3hsUm297xsEWSirg.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 01 May 2025 15:51:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 10122 (0x278a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91DFB70, serialNumber=5D2DD154B5DCE21FB786C526DBDEF1B045928AB8
        Validity
            Not Before: Apr  8 15:53:37 2025 GMT
            Not After : May 28 00:00:00 2026 GMT
        Subject: CN=67f54681-8a26
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:02:a3:60:7b:a3:0c:f1:b1:8f:3a:5d:8b:dd:
                    48:7d:07:24:b0:b7:2e:5e:87:d6:a9:2e:70:73:50:
                    7d:5f:41:53:4e:e2:10:96:ef:22:9f:67:7d:c9:de:
                    a9:85:56:b3:0d:79:ed:b3:a1:b7:6e:e9:49:2b:27:
                    b2:5b:d1:93:08:6b:8d:7b:34:0c:a9:f3:b3:94:fd:
                    a2:c1:bc:0d:6d:43:20:7e:8b:1e:23:fc:99:d0:74:
                    59:77:23:f3:63:08:54:b2:09:f8:fb:32:2f:99:69:
                    b6:8e:9c:60:fd:49:a8:4e:11:4a:0e:49:a2:2a:bb:
                    eb:69:8c:82:f8:46:fe:81:d5:89:15:0a:cd:0b:fa:
                    3a:12:e3:6d:cd:6b:93:e8:50:11:e1:98:43:67:c9:
                    22:b7:8c:1b:18:70:8e:5b:3c:98:d1:18:a6:5a:f8:
                    00:de:90:f0:1b:9f:7e:2c:2b:98:ad:d1:ca:1b:4e:
                    d3:56:de:f2:6a:14:45:37:de:71:fb:77:a9:a9:64:
                    0a:69:18:15:f0:32:64:ef:e3:1e:44:a9:e3:19:c1:
                    ef:08:85:4f:dd:4f:94:76:e6:5e:08:62:15:c9:e1:
                    bf:45:32:cf:f1:70:01:68:3e:0f:47:d9:bd:15:72:
                    ef:1e:c4:d4:ed:e8:d7:6e:53:64:60:1a:c0:46:b2:
                    d9:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9A:0A:76:3B:E4:BC:42:7A:49:7F:39:85:2E:78:72:F7:A6:9C:8E:88
            X509v3 Authority Key Identifier:
                keyid:5D:2D:D1:54:B5:DC:E2:1F:B7:86:C5:26:DB:DE:F1:B0:45:92:8A:B8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91DFB70/2983647C838F11E586FC5812C4F9AE02/XS3RVLXc4h-3hsUm297xsEWSirg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XS3RVLXc4h-3hsUm297xsEWSirg.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DFB70/2983647C838F11E586FC5812C4F9AE02/E0CC1C58235911ECAB7C7661C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  203.213.196.0/24

    Signature Algorithm: sha256WithRSAEncryption
         8f:6f:e4:8d:b5:27:26:c7:4c:06:c6:d9:2e:01:19:db:78:cd:
         49:1f:b3:b0:7f:a7:66:93:ca:ca:f5:60:99:2d:ad:64:a4:53:
         c3:aa:a8:24:9a:99:6d:8d:24:83:fb:57:55:ee:bc:a6:70:1b:
         d8:7d:86:d1:e1:30:ad:12:df:d3:62:51:e4:45:c6:26:76:b9:
         49:b7:9f:4f:15:4d:d8:02:7d:58:76:ba:f7:53:6e:c5:98:75:
         3b:b7:03:75:c0:49:54:1b:39:b7:b5:2c:2d:c6:da:e1:d2:cf:
         95:09:25:15:b6:86:47:df:6e:0b:3b:2e:f1:0f:19:05:88:da:
         f2:64:d6:37:bc:c9:ef:c8:8e:d4:b2:2c:04:b6:f2:9f:83:9e:
         ab:fc:fa:c8:90:89:dd:29:1b:61:c8:e1:00:e7:9b:b9:cc:6a:
         c4:09:19:b8:5c:18:39:09:6c:3e:54:6e:30:e8:be:46:aa:a3:
         6e:a5:25:9e:04:6b:95:1c:29:1a:4c:ca:e9:62:d2:b5:ba:7f:
         67:95:63:57:60:ca:08:5c:4c:95:4d:61:db:06:2c:c2:cf:82:
         68:87:43:84:23:8c:04:ba:7d:60:ae:84:a9:ae:74:8d:04:2b:
         66:d0:a8:93:1a:56:a1:45:3e:1b:6b:ac:a4:fa:33:67:51:53:
         ed:c2:93:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 14:18:23 2025 by rpki-client