Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91510AD/8B5E75FE1D8711E284B383DF08B02CD2/665D263C1F7D11F086021130C4F9AE02.roa
File:                     665D263C1F7D11F086021130C4F9AE02.roa (raw, json)
Hash identifier:          zIDdFiLmB7SZiMfYZmxLBvvbytOrJ+/9451wcDrEKE4=
Subject key identifier:   4D:34:0C:C9:D5:42:10:48:49:7F:23:DA:43:D5:F0:AB:43:96:7E:93
Certificate issuer:       /CN=A91510AD/serialNumber=E1E6908A16EC813DAA0BD64797AE9DBDEB092257
Certificate serial:       3627
Authority key identifier: E1:E6:90:8A:16:EC:81:3D:AA:0B:D6:47:97:AE:9D:BD:EB:09:22:57
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4eaQihbsgT2qC9ZHl66dvesJIlc.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91510AD/8B5E75FE1D8711E284B383DF08B02CD2/665D263C1F7D11F086021130C4F9AE02.roa
Signing time:             Tue 22 Apr 2025 13:26:30 +0000
ROA not before:           Tue 22 Apr 2025 13:26:30 +0000
ROA not after:            Tue 30 Dec 2025 00:00:00 +0000
asID:                     151704
IP address blocks:        175.29.17.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91510AD/8B5E75FE1D8711E284B383DF08B02CD2/4eaQihbsgT2qC9ZHl66dvesJIlc.crl
                          rsync://rpki.apnic.net/member_repository/A91510AD/8B5E75FE1D8711E284B383DF08B02CD2/4eaQihbsgT2qC9ZHl66dvesJIlc.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4eaQihbsgT2qC9ZHl66dvesJIlc.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 01 May 2025 13:59:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 13863 (0x3627)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91510AD, serialNumber=E1E6908A16EC813DAA0BD64797AE9DBDEB092257
        Validity
            Not Before: Apr 22 13:26:30 2025 GMT
            Not After : Dec 30 00:00:00 2025 GMT
        Subject: CN=68079905-562f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:62:04:ff:af:d4:ed:e4:8a:a5:52:21:d4:7d:
                    56:fc:c0:7c:0e:9a:ae:96:1f:c6:4e:fe:86:0d:53:
                    cc:dc:6e:fb:02:2e:1f:eb:20:c4:5c:f5:f4:23:a7:
                    48:24:b1:91:36:45:75:c1:21:70:da:58:10:21:6b:
                    90:98:e5:dc:a1:62:13:ee:70:dd:66:3a:0b:7b:94:
                    fa:7a:61:9a:76:f2:67:e7:12:25:3b:e2:51:ab:4e:
                    7d:89:ab:c8:9e:5b:19:2a:ab:74:f5:57:47:37:95:
                    28:2e:22:28:30:eb:d4:c6:51:95:84:54:64:5e:29:
                    19:b9:49:73:66:53:68:e1:f7:64:05:f8:bf:7f:be:
                    71:b8:5d:3b:7d:dd:fb:a1:6a:e4:2f:bc:00:26:d7:
                    5e:e5:c9:b7:1b:92:86:0c:f5:68:37:32:58:f5:02:
                    11:5a:9f:b3:5c:29:aa:58:f0:9b:06:f8:f6:6a:3f:
                    de:b4:dc:d7:5b:0e:5b:32:47:a9:88:8e:b2:c1:a5:
                    e2:37:ff:a0:e8:86:64:dc:28:ab:c6:32:b2:fa:ec:
                    4e:4a:0f:87:1c:5b:8a:85:27:fa:d5:df:45:db:c3:
                    7f:c5:a2:34:4d:c4:7a:52:5e:a8:ee:5a:8f:de:0b:
                    32:a0:37:4e:05:d8:89:65:3a:b8:02:a1:4a:39:98:
                    af:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4D:34:0C:C9:D5:42:10:48:49:7F:23:DA:43:D5:F0:AB:43:96:7E:93
            X509v3 Authority Key Identifier:
                keyid:E1:E6:90:8A:16:EC:81:3D:AA:0B:D6:47:97:AE:9D:BD:EB:09:22:57

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91510AD/8B5E75FE1D8711E284B383DF08B02CD2/4eaQihbsgT2qC9ZHl66dvesJIlc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4eaQihbsgT2qC9ZHl66dvesJIlc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91510AD/8B5E75FE1D8711E284B383DF08B02CD2/665D263C1F7D11F086021130C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  175.29.17.0/24

    Signature Algorithm: sha256WithRSAEncryption
         6c:9b:ca:df:70:00:75:87:64:fa:93:1f:c7:5a:e1:15:d0:b7:
         a4:02:af:6c:bd:df:01:1e:1e:b9:b5:44:60:c1:68:33:2e:cf:
         3f:4c:0e:be:c7:44:ba:54:ee:18:52:0e:66:ef:22:5d:fc:0b:
         bf:37:1c:74:f0:ab:4f:f0:e9:bb:bd:70:79:45:45:df:cc:f5:
         85:56:3b:1a:75:1b:25:9f:ab:34:18:62:61:3b:2e:fd:1f:da:
         72:0b:43:23:22:fc:52:0a:6a:c8:bf:5d:00:37:24:67:dd:64:
         d9:6c:a6:8a:89:69:58:8f:10:ee:f0:86:3d:61:a0:8c:46:66:
         b5:65:1f:3c:35:a7:b9:2e:76:45:28:22:7d:6b:7e:90:06:ea:
         fa:20:4d:38:48:25:8c:db:72:36:56:75:71:dd:5c:63:10:7c:
         19:fc:ad:5c:33:95:b2:4c:df:8f:8e:2c:ac:4e:5b:dc:92:a9:
         ac:e5:13:1f:6b:41:c1:0f:7a:d8:93:b9:d2:94:04:68:11:fe:
         5f:5f:6d:ac:33:e7:7d:3f:84:98:ac:68:60:8a:40:66:39:64:
         3d:e0:82:26:b0:9d:bc:4b:93:4f:a1:bb:d9:86:e1:83:73:54:
         d8:b2:76:69:a4:b7:96:eb:e0:5b:e1:64:44:32:bc:29:80:1b:
         de:00:23:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 15:52:12 2025 by rpki-client on console.sobornost.net