Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9115C2E/9527E6B4268E11EC8ED0BA6EC4F9AE02/F490AE2431D811ECA3C4CE3EC4F9AE02.roa
File:                     F490AE2431D811ECA3C4CE3EC4F9AE02.roa (raw, json)
Hash identifier:          /oifx1YqYxKOVaxnhM6Z6BMW1b5AcpZK0vDtcYNO6Zg=
Subject key identifier:   AA:FB:BB:5D:58:5D:5E:02:57:3C:70:7D:AE:FC:70:7A:5A:E2:E8:A6
Certificate issuer:       /CN=A9115C2E/serialNumber=D299BCA39C993DB80D1137B999B221846ACF556B
Certificate serial:       04A7
Authority key identifier: D2:99:BC:A3:9C:99:3D:B8:0D:11:37:B9:99:B2:21:84:6A:CF:55:6B
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/0pm8o5yZPbgNETe5mbIhhGrPVWs.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9115C2E/9527E6B4268E11EC8ED0BA6EC4F9AE02/F490AE2431D811ECA3C4CE3EC4F9AE02.roa
Signing time:             Thu 06 Mar 2025 20:10:32 +0000
ROA not before:           Thu 06 Mar 2025 20:10:32 +0000
ROA not after:            Fri 01 May 2026 00:00:00 +0000
asID:                     45267
IP address blocks:        64.246.80.0/20 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9115C2E/9527E6B4268E11EC8ED0BA6EC4F9AE02/0pm8o5yZPbgNETe5mbIhhGrPVWs.crl
                          rsync://rpki.apnic.net/member_repository/A9115C2E/9527E6B4268E11EC8ED0BA6EC4F9AE02/0pm8o5yZPbgNETe5mbIhhGrPVWs.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/0pm8o5yZPbgNETe5mbIhhGrPVWs.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 01 May 2025 17:06:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1191 (0x4a7)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9115C2E, serialNumber=D299BCA39C993DB80D1137B999B221846ACF556B
        Validity
            Not Before: Mar  6 20:10:32 2025 GMT
            Not After : May  1 00:00:00 2026 GMT
        Subject: CN=67ca0138-71c9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:d9:98:77:9e:b8:4d:7b:4e:b3:b4:63:43:c9:
                    34:32:6d:2b:54:bc:89:fb:fd:7e:79:9e:03:48:1b:
                    96:21:65:04:8a:c5:d6:ef:4a:36:d9:92:b1:1e:ff:
                    a3:b2:7c:9d:86:13:17:0d:fd:5e:ec:51:b7:0c:9d:
                    c2:90:3e:7e:73:c6:1b:75:1a:eb:8e:8c:e0:9c:db:
                    e9:c0:9d:06:32:e1:f8:d2:a3:81:3f:07:e7:48:de:
                    f9:31:37:ec:81:80:58:47:3f:51:12:80:33:76:14:
                    4e:b5:51:31:d2:30:fa:02:64:0d:47:b5:f2:3b:85:
                    d9:b7:4c:21:77:74:bf:a7:e4:40:6b:1b:67:dd:f7:
                    44:12:a4:b5:fc:e5:86:e3:6c:bb:a5:9e:a8:93:db:
                    2f:b1:0c:16:34:2c:0a:4a:0a:1e:61:f4:e3:86:52:
                    b1:11:63:4b:fc:a8:2e:7f:bb:a0:87:ca:d0:c4:06:
                    aa:64:fd:23:7b:f0:27:68:af:a8:78:de:d9:f0:9d:
                    db:f1:43:73:ae:97:0b:ce:4e:e5:26:cc:d1:83:4c:
                    d0:99:67:9e:b0:1b:14:c5:b3:ef:5f:da:d0:cb:0c:
                    74:d9:b0:bf:ca:7d:0b:84:10:3b:de:7a:1d:5d:a2:
                    c5:21:bf:38:d0:b3:ba:5d:3e:63:83:d2:e2:73:8b:
                    fe:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AA:FB:BB:5D:58:5D:5E:02:57:3C:70:7D:AE:FC:70:7A:5A:E2:E8:A6
            X509v3 Authority Key Identifier:
                keyid:D2:99:BC:A3:9C:99:3D:B8:0D:11:37:B9:99:B2:21:84:6A:CF:55:6B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9115C2E/9527E6B4268E11EC8ED0BA6EC4F9AE02/0pm8o5yZPbgNETe5mbIhhGrPVWs.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/0pm8o5yZPbgNETe5mbIhhGrPVWs.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9115C2E/9527E6B4268E11EC8ED0BA6EC4F9AE02/F490AE2431D811ECA3C4CE3EC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.246.80.0/20

    Signature Algorithm: sha256WithRSAEncryption
         10:39:af:d0:34:c2:bd:7b:b5:c2:0f:0a:0e:e7:f9:d7:a3:4f:
         ac:3a:4e:98:9f:12:a5:98:f0:7f:1d:c1:0b:46:c9:93:f0:ef:
         87:ed:6d:a3:9f:a8:3f:1c:8c:a2:74:85:46:74:e9:68:e0:7c:
         8e:24:36:be:95:3d:95:8b:84:18:c5:37:ac:67:7f:bc:72:8e:
         b5:23:32:70:e0:28:1f:b3:e4:07:ba:c8:fb:9c:70:1a:42:49:
         53:37:d1:30:88:75:07:42:94:77:70:a4:8b:47:1c:8e:98:0e:
         5a:8c:96:6b:ae:fb:f7:d2:fa:4f:c8:a0:ac:a7:b4:57:10:aa:
         25:1a:1c:30:d1:40:dc:20:5f:66:81:21:f0:12:72:0a:88:9a:
         7d:9c:5e:d9:e9:c2:14:d9:1a:64:ac:6f:0b:f3:0a:24:ea:bd:
         6e:70:36:43:e1:32:45:2d:da:1e:bc:96:4b:4f:ac:36:bb:45:
         8d:12:0b:f2:74:fd:fc:40:8c:fc:d5:da:a6:d8:c0:0d:7e:a6:
         5c:37:a6:4a:7e:eb:46:e1:2b:b7:35:b5:eb:f6:a1:c6:45:ed:
         eb:9a:3c:a4:44:91:bd:85:33:87:f4:f9:2f:93:6f:fc:6b:bb:
         9f:14:dc:b0:9c:cc:15:29:c2:cc:08:37:fc:a3:9d:ba:3c:30:
         9c:f5:25:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 00:08:18 2025 by rpki-client on console.sobornost.net