Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91EE03B/AF9671660B6E11EEB29BB170C4F9AE02/139300E4BA6911EFA78E2F66C4F9AE02.roa
File:                     139300E4BA6911EFA78E2F66C4F9AE02.roa (raw, json)
Hash identifier:          ewdRPxERVjw1+imIbuRKiOzFgdfb8FXbS7BLrbgntiM=
Subject key identifier:   56:49:BD:74:2E:C2:BA:BB:1F:4E:E4:AA:8F:E4:71:44:A3:E9:10:B7
Certificate issuer:       /CN=A91EE03B/serialNumber=B9E60CF179F4EACBDB9492BA5F7CACF45239CCF4
Certificate serial:       01B2
Authority key identifier: B9:E6:0C:F1:79:F4:EA:CB:DB:94:92:BA:5F:7C:AC:F4:52:39:CC:F4
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ueYM8Xn06svblJK6X3ys9FI5zPQ.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91EE03B/AF9671660B6E11EEB29BB170C4F9AE02/139300E4BA6911EFA78E2F66C4F9AE02.roa
Signing time:             Wed 26 Feb 2025 18:11:51 +0000
ROA not before:           Wed 26 Feb 2025 18:11:51 +0000
ROA not after:            Tue 30 Sep 2025 00:00:00 +0000
asID:                     32167
IP address blocks:        2401:b60:2d::/48 maxlen: 48
                          2401:b60:1000::/36 maxlen: 44
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91EE03B/AF9671660B6E11EEB29BB170C4F9AE02/ueYM8Xn06svblJK6X3ys9FI5zPQ.crl
                          rsync://rpki.apnic.net/member_repository/A91EE03B/AF9671660B6E11EEB29BB170C4F9AE02/ueYM8Xn06svblJK6X3ys9FI5zPQ.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ueYM8Xn06svblJK6X3ys9FI5zPQ.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 02 May 2025 03:09:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 434 (0x1b2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91EE03B, serialNumber=B9E60CF179F4EACBDB9492BA5F7CACF45239CCF4
        Validity
            Not Before: Feb 26 18:11:51 2025 GMT
            Not After : Sep 30 00:00:00 2025 GMT
        Subject: CN=67bf5967-63b6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:79:f5:7a:9d:c4:b2:67:bf:b9:5f:21:2d:d3:
                    a5:2e:29:ab:25:fc:c1:55:d8:98:1d:fa:ae:24:9d:
                    35:8b:4d:39:5a:c0:b2:5d:e2:ce:ed:c2:b2:d9:47:
                    a5:35:d9:bf:9e:31:94:aa:39:48:a6:7c:8f:61:de:
                    6c:39:c4:a7:01:c0:ba:44:43:0c:3f:e3:f9:00:ba:
                    61:5e:e4:f1:83:fa:91:96:1e:6c:32:3d:6c:8d:74:
                    d4:bf:1d:9d:d3:56:e8:33:e9:71:d8:fd:a1:ed:03:
                    fc:a7:a6:1a:b5:f2:e6:32:ff:3e:ff:98:9e:b7:91:
                    f1:a2:4e:02:aa:d0:1a:54:6e:7f:09:ad:38:c5:77:
                    b3:cd:88:6c:6e:08:26:e1:42:ca:5a:56:ce:3f:da:
                    98:f3:ca:f1:45:f6:ca:ea:2e:c6:af:e7:8e:5e:b6:
                    fa:00:7a:d2:43:f2:58:58:e7:4a:6f:64:b2:bd:62:
                    a4:8f:10:c4:6d:89:5c:7b:d8:18:64:af:3a:3e:51:
                    5b:3a:1f:ac:7e:cb:b3:0c:5a:30:3c:79:c2:05:87:
                    31:c3:fc:cc:64:36:60:d7:cc:63:14:b6:a5:e4:fa:
                    20:ac:42:ea:10:ad:f0:62:65:62:ab:bb:97:0f:0a:
                    14:33:00:ce:32:cd:55:45:56:e3:c7:33:c2:6c:df:
                    41:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                56:49:BD:74:2E:C2:BA:BB:1F:4E:E4:AA:8F:E4:71:44:A3:E9:10:B7
            X509v3 Authority Key Identifier:
                keyid:B9:E6:0C:F1:79:F4:EA:CB:DB:94:92:BA:5F:7C:AC:F4:52:39:CC:F4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91EE03B/AF9671660B6E11EEB29BB170C4F9AE02/ueYM8Xn06svblJK6X3ys9FI5zPQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ueYM8Xn06svblJK6X3ys9FI5zPQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EE03B/AF9671660B6E11EEB29BB170C4F9AE02/139300E4BA6911EFA78E2F66C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  2401:b60:2d::/48
                  2401:b60:1000::/36

    Signature Algorithm: sha256WithRSAEncryption
         0c:e8:20:17:f8:13:17:3b:ad:ef:f7:36:d0:1b:28:13:08:68:
         01:60:42:54:64:3a:c9:85:93:b8:a0:ac:25:16:65:b2:ba:4f:
         31:08:3e:89:16:83:c4:d8:31:92:9a:19:ab:b0:7b:a2:6b:72:
         a9:e4:2c:f5:cd:73:0a:82:ba:5c:2a:d5:57:3d:54:b6:a1:f9:
         0d:57:df:cc:34:14:78:76:02:5c:a2:01:ee:af:3e:ec:fb:d3:
         9f:40:d5:95:34:1c:18:4f:08:05:cb:b0:66:82:79:43:61:21:
         ad:2e:53:60:9c:33:55:32:8d:d1:ec:5d:eb:6b:ca:58:a8:2d:
         c2:4d:bb:ab:13:40:08:77:42:59:bb:53:7c:21:8e:fe:d1:0e:
         85:6d:e2:49:ce:71:4b:4c:f4:d6:31:f9:2a:ac:ab:aa:23:d9:
         b7:7b:4e:18:ac:f1:12:f6:aa:ee:d5:a3:13:47:f9:d1:70:f7:
         30:24:87:60:28:52:07:a1:73:fd:95:45:2c:a7:0f:ef:3c:92:
         70:62:4b:bb:fa:9d:31:6b:16:9d:29:c3:61:f8:28:5a:5f:da:
         80:18:b1:df:c0:17:8b:69:a7:c7:46:df:82:f7:53:9c:f9:e9:
         d5:83:fc:09:88:f4:84:c1:48:80:0c:3c:a7:6b:53:bc:a0:84:
         2c:83:1f:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 07:44:29 2025 by rpki-client