Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A916C83B/E4E10B4A1D8811E2A012CBE108B02CD2/099E1584054F11F0B404403AC4F9AE02.roa
File:                     099E1584054F11F0B404403AC4F9AE02.roa (raw, json)
Hash identifier:          uJHfY2Mo/VAmZFumvbWbfh7qy6GiNOiT6D2JsQtQntw=
Subject key identifier:   2E:73:6F:05:66:E7:2D:95:55:D0:38:4F:83:47:BE:CF:11:FB:EE:18
Certificate issuer:       /CN=A916C83B/serialNumber=E76EB256C0FCB07E2907978343E9AD9DD21FE206
Certificate serial:       37B2
Authority key identifier: E7:6E:B2:56:C0:FC:B0:7E:29:07:97:83:43:E9:AD:9D:D2:1F:E2:06
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/526yVsD8sH4pB5eDQ-mtndIf4gY.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A916C83B/E4E10B4A1D8811E2A012CBE108B02CD2/099E1584054F11F0B404403AC4F9AE02.roa
Signing time:             Fri 18 Apr 2025 14:50:42 +0000
ROA not before:           Fri 18 Apr 2025 14:50:42 +0000
ROA not after:            Wed 01 Jul 2026 00:00:00 +0000
asID:                     141711
IP address blocks:        203.81.216.0/24 maxlen: 24
                          203.81.217.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A916C83B/E4E10B4A1D8811E2A012CBE108B02CD2/526yVsD8sH4pB5eDQ-mtndIf4gY.crl
                          rsync://rpki.apnic.net/member_repository/A916C83B/E4E10B4A1D8811E2A012CBE108B02CD2/526yVsD8sH4pB5eDQ-mtndIf4gY.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/526yVsD8sH4pB5eDQ-mtndIf4gY.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 05 May 2025 14:32:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 14258 (0x37b2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A916C83B, serialNumber=E76EB256C0FCB07E2907978343E9AD9DD21FE206
        Validity
            Not Before: Apr 18 14:50:42 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=680266c1-5af5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:af:3b:28:3f:20:2f:8c:1a:e0:4a:de:ad:35:
                    9b:e5:bf:23:0f:c1:9a:ca:22:ad:39:3c:03:62:4a:
                    b1:f5:c3:91:ca:f5:95:6f:b8:6f:50:bf:8b:d9:93:
                    80:06:5b:db:dd:63:30:5e:fd:1d:40:57:c9:d3:ce:
                    41:ac:a9:c8:15:a6:44:79:41:0a:ee:c0:b5:44:f5:
                    6a:49:c7:2d:89:36:2d:a4:41:e8:58:ad:94:ce:de:
                    41:3b:5f:fc:7e:dc:d7:2f:00:8a:39:39:54:42:ed:
                    77:21:03:63:a4:11:3d:be:e0:2e:a5:f7:f5:ea:f4:
                    dd:57:f2:ae:88:53:25:75:48:ac:5c:8e:01:1e:c4:
                    22:3d:54:12:26:ee:c6:a5:11:93:d7:e3:ed:08:68:
                    83:e3:e2:71:10:43:ad:f2:78:a5:48:86:5d:7e:fe:
                    b9:43:a9:3c:b3:dd:0e:ae:49:58:d1:d3:b4:ad:e7:
                    51:f4:e2:8b:69:92:01:67:6c:cb:72:4a:ea:39:3c:
                    c0:71:11:52:28:0c:82:9e:92:c0:e3:35:f8:45:b9:
                    70:dc:cd:c7:07:7e:90:14:2e:89:cf:90:8d:c8:6d:
                    3f:d5:09:3d:0a:10:3b:33:60:5a:d4:d2:ad:cd:78:
                    b3:41:e6:fa:ac:00:15:18:e3:21:27:fb:93:49:81:
                    fe:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2E:73:6F:05:66:E7:2D:95:55:D0:38:4F:83:47:BE:CF:11:FB:EE:18
            X509v3 Authority Key Identifier:
                keyid:E7:6E:B2:56:C0:FC:B0:7E:29:07:97:83:43:E9:AD:9D:D2:1F:E2:06

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A916C83B/E4E10B4A1D8811E2A012CBE108B02CD2/526yVsD8sH4pB5eDQ-mtndIf4gY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/526yVsD8sH4pB5eDQ-mtndIf4gY.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916C83B/E4E10B4A1D8811E2A012CBE108B02CD2/099E1584054F11F0B404403AC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  203.81.216.0/23

    Signature Algorithm: sha256WithRSAEncryption
         3e:57:5a:6f:07:ca:4a:5d:8d:6f:4a:ce:f7:1e:5c:85:02:30:
         76:d2:50:3d:59:d8:70:99:b5:5e:87:80:e1:2d:cc:4f:a8:93:
         eb:7e:aa:d0:62:4c:76:d4:70:ea:e4:36:58:96:17:2e:4d:59:
         8d:68:68:7c:1b:b8:db:a4:13:f7:d2:05:6b:3a:a6:41:1f:13:
         3c:5a:4f:8d:71:fe:f9:c9:f5:de:bb:d8:b0:b9:b0:25:98:b1:
         3e:f1:ca:6b:b7:12:ea:b2:bf:2f:92:39:49:ed:1c:db:2b:64:
         23:e4:f3:9d:27:0c:1f:9f:a9:fe:c5:d9:7a:99:08:41:03:2a:
         86:01:0c:6f:13:f3:2c:51:35:b3:a9:7c:8f:55:b3:49:46:8c:
         6f:4e:1c:67:f9:24:f7:38:3d:ef:75:1f:96:7e:d4:df:49:2b:
         15:c4:dc:08:6c:83:c8:4c:88:94:23:d5:98:5f:ff:5f:39:a1:
         0f:af:76:cf:88:90:26:4a:ad:5c:f9:c9:ea:06:3b:12:63:e9:
         f1:76:57:3e:ad:da:16:48:48:b0:d2:84:52:28:71:90:e0:0b:
         33:d0:ae:80:60:90:f0:7a:d3:2d:55:c2:fd:a2:3e:69:bf:79:
         79:fc:ee:7d:c3:6d:ec:7d:45:a8:ef:8a:17:18:67:36:fc:85:
         65:ab:2f:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 17:45:09 2025 by rpki-client on console.sobornost.net