Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A916A4BF/01BB601610A211F0996E9D65C4F9AE02/DEB9B2E01FAE11F0BD4A6886C4F9AE02.roa
File:                     DEB9B2E01FAE11F0BD4A6886C4F9AE02.roa (raw, json)
Hash identifier:          YKV/U+PooarTthEs+eyt4mbIMbu1go/l4voLZ2DzYhw=
Subject key identifier:   D0:6A:0D:76:BD:F0:35:22:49:0B:2B:19:0C:70:48:49:32:50:A0:5A
Certificate issuer:       /CN=A916A4BF/serialNumber=EDBC19FEA1FCB66B4FAA0A22976EE1350B37DBEB
Certificate serial:       0C
Authority key identifier: ED:BC:19:FE:A1:FC:B6:6B:4F:AA:0A:22:97:6E:E1:35:0B:37:DB:EB
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7bwZ_qH8tmtPqgoil27hNQs32-s.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A916A4BF/01BB601610A211F0996E9D65C4F9AE02/DEB9B2E01FAE11F0BD4A6886C4F9AE02.roa
Signing time:             Tue 22 Apr 2025 19:20:37 +0000
ROA not before:           Tue 22 Apr 2025 19:20:37 +0000
ROA not after:            Tue 31 Mar 2026 00:00:00 +0000
asID:                     14618
IP address blocks:        210.81.69.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A916A4BF/01BB601610A211F0996E9D65C4F9AE02/7bwZ_qH8tmtPqgoil27hNQs32-s.crl
                          rsync://rpki.apnic.net/member_repository/A916A4BF/01BB601610A211F0996E9D65C4F9AE02/7bwZ_qH8tmtPqgoil27hNQs32-s.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7bwZ_qH8tmtPqgoil27hNQs32-s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 30 Apr 2025 06:50:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 12 (0xc)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A916A4BF, serialNumber=EDBC19FEA1FCB66B4FAA0A22976EE1350B37DBEB
        Validity
            Not Before: Apr 22 19:20:37 2025 GMT
            Not After : Mar 31 00:00:00 2026 GMT
        Subject: CN=6807ec05-02b0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:bb:57:ca:3e:b1:99:b1:36:39:9f:8e:b3:33:
                    96:6b:c0:bb:13:aa:66:6e:a4:c7:17:17:66:d3:a8:
                    a6:97:3a:21:01:ee:a9:04:7d:10:12:67:1a:51:73:
                    b2:13:00:0a:f0:e7:04:2c:75:62:c7:f9:f8:a8:93:
                    dc:48:a6:a8:c5:af:17:fb:d0:85:7d:53:85:34:bf:
                    cf:f8:ef:69:3a:86:d5:55:1e:e4:5e:63:61:af:3c:
                    95:1b:63:1f:2e:a7:4a:e5:24:9f:ec:ff:22:52:b3:
                    81:74:2b:8f:4a:69:fa:18:21:e6:dc:75:f4:90:07:
                    22:f9:3f:7d:68:49:c0:5d:86:47:e2:6b:42:84:1b:
                    6c:a8:12:44:5d:b0:f0:01:75:3f:94:bc:ee:0d:36:
                    54:08:98:92:25:c7:c8:82:24:39:3d:f7:97:3e:3f:
                    74:0e:6b:bc:94:40:19:e7:63:7f:e1:04:01:be:2f:
                    8a:84:72:b6:0b:17:84:f1:fb:d1:bc:9d:4e:50:d8:
                    69:82:2d:f2:e9:65:a8:97:c3:72:c6:78:05:62:a1:
                    f7:88:72:a5:82:58:16:41:04:80:0a:ee:5e:63:4e:
                    fc:da:f1:b6:b0:f3:25:32:8c:48:bc:6d:c3:ec:b2:
                    fe:7a:7c:62:ef:56:39:f8:ca:90:79:2d:7f:1f:ad:
                    1e:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D0:6A:0D:76:BD:F0:35:22:49:0B:2B:19:0C:70:48:49:32:50:A0:5A
            X509v3 Authority Key Identifier:
                keyid:ED:BC:19:FE:A1:FC:B6:6B:4F:AA:0A:22:97:6E:E1:35:0B:37:DB:EB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A916A4BF/01BB601610A211F0996E9D65C4F9AE02/7bwZ_qH8tmtPqgoil27hNQs32-s.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7bwZ_qH8tmtPqgoil27hNQs32-s.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916A4BF/01BB601610A211F0996E9D65C4F9AE02/DEB9B2E01FAE11F0BD4A6886C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  210.81.69.0/24

    Signature Algorithm: sha256WithRSAEncryption
         35:ae:a3:5f:6b:b3:5f:3d:2b:9c:b6:10:26:8f:ec:21:74:b0:
         0c:02:bd:55:cf:f1:2e:9a:a6:d0:8b:15:7c:61:7b:32:d5:c3:
         e2:bb:78:dc:7d:00:9f:49:e7:c5:5c:30:8b:aa:f2:88:c9:e5:
         2a:64:ab:bb:78:3f:dd:a8:da:12:ed:5e:0f:20:bd:07:ba:58:
         f8:37:eb:fb:59:b0:b4:d8:c1:3a:be:cd:3d:07:25:66:60:c8:
         80:1f:bb:02:c0:56:b3:2e:2a:89:ae:3c:1c:de:ff:8c:7c:da:
         1b:f4:8a:4e:32:06:67:b5:a0:09:f7:ad:86:ba:ca:23:7a:4a:
         03:16:96:38:80:d5:f6:56:c5:7e:c3:3a:13:1f:60:76:9f:12:
         06:dd:01:36:c4:7b:a4:7c:2f:ba:20:ef:26:5d:36:23:ad:f0:
         e3:4f:2e:59:c0:47:34:1d:91:42:a0:f8:a2:e8:20:cb:ad:73:
         48:09:af:79:9c:c5:28:eb:93:56:77:f6:6c:14:11:bd:ed:3e:
         6f:a8:6a:92:7a:3b:e2:aa:2d:33:83:cc:7e:9a:11:14:a9:f4:
         02:7d:4a:0d:d1:37:5f:bf:ae:f2:c2:75:f5:d1:95:7c:06:b5:
         b3:0e:1c:56:02:80:94:d8:51:f2:80:f7:30:56:ff:5c:c6:2d:
         c9:2e:32:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 23 09:02:26 2025 by rpki-client on console.sobornost.net