Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A916A4BF/01BB601610A211F0996E9D65C4F9AE02/27AB5E0E1FAF11F0AB8F0B87C4F9AE02.roa
File:                     27AB5E0E1FAF11F0AB8F0B87C4F9AE02.roa (raw, json)
Hash identifier:          oaE4p5hJkp4+nLCmgu91heGRJg3fBe+drWuPnIXpClQ=
Subject key identifier:   59:F0:94:30:A0:73:5F:96:15:DE:A6:B3:9D:32:E0:8F:0F:58:79:5D
Certificate issuer:       /CN=A916A4BF/serialNumber=EDBC19FEA1FCB66B4FAA0A22976EE1350B37DBEB
Certificate serial:       0E
Authority key identifier: ED:BC:19:FE:A1:FC:B6:6B:4F:AA:0A:22:97:6E:E1:35:0B:37:DB:EB
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7bwZ_qH8tmtPqgoil27hNQs32-s.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A916A4BF/01BB601610A211F0996E9D65C4F9AE02/27AB5E0E1FAF11F0AB8F0B87C4F9AE02.roa
Signing time:             Tue 22 Apr 2025 19:22:39 +0000
ROA not before:           Tue 22 Apr 2025 19:22:39 +0000
ROA not after:            Tue 31 Mar 2026 00:00:00 +0000
asID:                     16509
IP address blocks:        210.81.69.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A916A4BF/01BB601610A211F0996E9D65C4F9AE02/7bwZ_qH8tmtPqgoil27hNQs32-s.crl
                          rsync://rpki.apnic.net/member_repository/A916A4BF/01BB601610A211F0996E9D65C4F9AE02/7bwZ_qH8tmtPqgoil27hNQs32-s.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7bwZ_qH8tmtPqgoil27hNQs32-s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 30 Apr 2025 06:50:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 14 (0xe)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A916A4BF, serialNumber=EDBC19FEA1FCB66B4FAA0A22976EE1350B37DBEB
        Validity
            Not Before: Apr 22 19:22:39 2025 GMT
            Not After : Mar 31 00:00:00 2026 GMT
        Subject: CN=6807ec7f-fb97
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e6:0d:19:01:36:0b:c8:87:6d:e5:ed:bc:f1:09:
                    77:03:cb:79:1f:2a:8c:20:08:44:75:2b:e5:ed:49:
                    32:0a:c4:a0:1c:ca:7d:1b:41:a0:c4:61:8e:31:1a:
                    c6:49:46:7f:ef:6e:b2:79:77:d9:72:a1:3f:65:62:
                    29:32:67:21:60:d5:4e:d3:b3:51:69:3c:c3:04:30:
                    29:6c:0b:64:84:36:8a:ae:56:e2:41:fa:90:ba:3a:
                    12:4d:be:59:71:b8:bd:5e:f9:42:a6:0b:97:a5:e1:
                    1a:31:36:42:5d:cd:ec:34:6d:1c:06:19:e8:dc:6c:
                    f6:4f:98:b3:43:56:23:b3:87:d8:46:24:c2:a5:4a:
                    ed:0f:39:3b:4d:14:12:27:9f:a6:f9:57:36:3e:11:
                    03:df:27:76:99:64:3e:67:a6:d3:c7:fe:75:a4:37:
                    bf:6e:eb:53:3b:3f:25:b9:c3:bd:b3:f6:26:49:8f:
                    3b:40:55:d3:aa:64:24:9e:a0:30:e8:94:0b:3c:d4:
                    4e:f0:d6:7a:04:50:b2:1a:86:11:4e:48:95:23:59:
                    18:47:62:a3:4c:e9:71:80:67:57:43:2d:0c:f2:d0:
                    72:77:33:08:78:3f:bf:93:ba:55:70:75:18:77:36:
                    aa:9f:17:59:e5:de:0c:eb:42:8d:04:ea:7e:f6:57:
                    aa:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                59:F0:94:30:A0:73:5F:96:15:DE:A6:B3:9D:32:E0:8F:0F:58:79:5D
            X509v3 Authority Key Identifier:
                keyid:ED:BC:19:FE:A1:FC:B6:6B:4F:AA:0A:22:97:6E:E1:35:0B:37:DB:EB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A916A4BF/01BB601610A211F0996E9D65C4F9AE02/7bwZ_qH8tmtPqgoil27hNQs32-s.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7bwZ_qH8tmtPqgoil27hNQs32-s.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916A4BF/01BB601610A211F0996E9D65C4F9AE02/27AB5E0E1FAF11F0AB8F0B87C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  210.81.69.0/24

    Signature Algorithm: sha256WithRSAEncryption
         38:58:ac:46:ff:db:13:18:c4:8a:f6:f8:96:8a:68:ef:10:de:
         98:45:a2:2f:72:38:3d:81:c7:e0:a5:72:7e:68:29:b5:12:91:
         ac:ad:4f:02:80:2d:4b:ca:9f:ef:23:22:d1:3f:3c:57:63:73:
         57:c9:3f:74:f2:60:6e:f8:eb:26:c2:01:06:b7:10:99:3e:66:
         c9:b9:ed:4b:ab:0b:68:93:45:cd:e8:67:9a:53:7b:f3:11:4a:
         4a:48:3a:b7:4b:a3:e7:02:02:ec:21:7a:45:90:49:04:2d:db:
         ed:c0:a4:50:aa:ed:2c:aa:05:49:a3:62:85:c2:c6:a4:03:e4:
         38:66:3f:04:c5:cf:54:5c:78:e6:36:8e:0a:fa:2e:ab:2a:9e:
         fd:19:82:b0:3a:6e:81:15:23:30:1b:6d:2a:95:bb:e9:20:07:
         99:d7:04:99:89:38:4f:d8:92:4e:7b:77:51:2b:55:ef:f2:bc:
         6c:59:7e:3a:d9:60:6c:41:0d:4c:13:07:94:5f:a0:4e:e7:19:
         bb:85:3e:58:34:97:eb:aa:d7:b4:5d:48:b3:8c:98:26:4d:f5:
         27:17:8e:46:40:65:fe:24:bd:99:91:23:a8:09:21:ca:c0:f6:
         63:d4:1c:39:ee:69:37:51:e0:34:fe:07:0f:bc:72:c0:2a:32:
         24:56:6b:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 23 09:02:26 2025 by rpki-client on console.sobornost.net