Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9179672/E5F45AD05F5411EF8D18BE23C4F9AE02/AC7759D2135511F092D0090CC4F9AE02.roa
File:                     AC7759D2135511F092D0090CC4F9AE02.roa (raw, json)
Hash identifier:          onYsR/Z0zfQbFj+mcD8abagulwJaECFH59WKOVFKUeE=
Subject key identifier:   F2:52:80:2E:7A:34:F8:90:7D:69:2E:AF:4D:B3:4C:7E:4C:8F:15:42
Certificate issuer:       /CN=A9179672/serialNumber=91AA7783FB027819838C4A91C91C60D41FB3EEAB
Certificate serial:       94
Authority key identifier: 91:AA:77:83:FB:02:78:19:83:8C:4A:91:C9:1C:60:D4:1F:B3:EE:AB
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/kap3g_sCeBmDjEqRyRxg1B-z7qs.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9179672/E5F45AD05F5411EF8D18BE23C4F9AE02/AC7759D2135511F092D0090CC4F9AE02.roa
Signing time:             Mon 07 Apr 2025 02:15:24 +0000
ROA not before:           Mon 07 Apr 2025 02:15:24 +0000
ROA not after:            Tue 30 Dec 2025 00:00:00 +0000
asID:                     152657
IP address blocks:        192.206.152.0/24 maxlen: 24
                          192.206.153.0/24 maxlen: 24
                          192.206.154.0/24 maxlen: 24
                          192.206.155.0/24 maxlen: 24
                          192.206.156.0/24 maxlen: 24
                          192.206.157.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9179672/E5F45AD05F5411EF8D18BE23C4F9AE02/kap3g_sCeBmDjEqRyRxg1B-z7qs.crl
                          rsync://rpki.apnic.net/member_repository/A9179672/E5F45AD05F5411EF8D18BE23C4F9AE02/kap3g_sCeBmDjEqRyRxg1B-z7qs.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/kap3g_sCeBmDjEqRyRxg1B-z7qs.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 04 May 2025 02:50:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 148 (0x94)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9179672, serialNumber=91AA7783FB027819838C4A91C91C60D41FB3EEAB
        Validity
            Not Before: Apr  7 02:15:24 2025 GMT
            Not After : Dec 30 00:00:00 2025 GMT
        Subject: CN=67f3353b-e8fe
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f1:dc:5e:8b:bf:be:1c:0f:fe:6f:4b:87:90:15:
                    26:ea:64:9b:ff:72:fe:2f:1f:52:8a:85:8a:fa:d3:
                    9b:d0:f4:a9:b3:02:da:33:d4:bd:ae:4f:4a:df:5b:
                    b5:f1:63:00:16:2d:e9:b6:ea:e2:22:c9:02:ab:0f:
                    ab:b7:1d:3d:bc:20:df:64:b8:b5:66:07:ba:cc:92:
                    56:93:68:32:fd:90:46:b5:53:6d:b3:f7:c3:81:19:
                    06:80:6c:e9:53:76:e0:1a:1c:da:17:38:8b:c6:a2:
                    3f:6f:12:36:ce:67:c8:9e:54:2a:34:3b:69:5e:bc:
                    82:12:f4:03:db:79:2e:18:a1:d8:56:c4:e6:10:0a:
                    c9:f5:67:c9:71:e7:66:60:ff:f5:4d:70:6c:1f:8e:
                    b4:ce:b4:09:e7:e3:07:5e:98:68:1f:be:d6:ae:9b:
                    ef:80:6a:8a:76:88:c3:4d:50:7f:7b:5f:2f:48:6e:
                    61:4c:74:7d:60:6b:a8:6d:e7:83:d2:c9:a8:5e:1b:
                    37:34:dc:4c:68:1e:5c:29:b9:ea:d1:fa:2b:04:f8:
                    72:96:a2:e6:f0:cb:93:35:22:17:2e:8f:29:4b:89:
                    16:85:49:b1:b2:8a:58:85:14:fa:da:0b:57:6a:8a:
                    57:e4:97:8c:cb:01:29:88:0d:e5:63:52:df:f3:8a:
                    e9:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F2:52:80:2E:7A:34:F8:90:7D:69:2E:AF:4D:B3:4C:7E:4C:8F:15:42
            X509v3 Authority Key Identifier:
                keyid:91:AA:77:83:FB:02:78:19:83:8C:4A:91:C9:1C:60:D4:1F:B3:EE:AB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9179672/E5F45AD05F5411EF8D18BE23C4F9AE02/kap3g_sCeBmDjEqRyRxg1B-z7qs.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/kap3g_sCeBmDjEqRyRxg1B-z7qs.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9179672/E5F45AD05F5411EF8D18BE23C4F9AE02/AC7759D2135511F092D0090CC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.206.152.0-192.206.157.255

    Signature Algorithm: sha256WithRSAEncryption
         8d:32:fb:94:a0:8e:31:4f:53:df:c2:1c:97:5b:eb:5a:b8:7e:
         4d:ab:b8:ba:c9:1a:fb:84:50:8a:61:25:0c:13:4a:cf:0a:06:
         6f:20:f7:c4:14:25:f2:71:bc:26:0c:48:b9:af:63:13:bc:05:
         c2:48:80:6e:12:42:d5:3d:d9:95:de:96:e2:72:a6:af:d1:51:
         9e:cd:e3:2e:6f:b2:3a:a1:95:9d:97:10:ae:4d:22:9c:6d:7f:
         10:15:19:b8:a0:9f:45:d3:07:47:07:4c:82:ed:23:7a:bb:1e:
         b5:8e:5b:91:57:63:16:8f:ab:ca:7d:d6:89:34:6d:72:cf:e6:
         60:40:b7:ef:14:c7:92:24:3f:68:af:20:2f:30:35:93:26:e9:
         20:77:fb:4d:26:51:ea:4b:98:99:e1:54:64:78:93:c0:a8:ba:
         ec:ec:3c:65:39:c1:c0:31:3d:90:e6:17:87:d7:50:62:f9:9c:
         25:4e:eb:8f:f2:53:1f:f5:8f:2d:0d:fd:63:a5:fe:17:82:71:
         95:73:9d:1d:a3:cd:bb:a3:70:11:0c:fe:a0:75:8b:15:bc:91:
         2a:c1:b2:5e:7f:84:24:7d:ba:7d:57:a5:63:8c:3f:8d:ba:0e:
         44:1e:41:a1:3e:a3:42:7e:e7:29:5d:d4:3c:69:15:9b:ff:e5:
         60:8d:f1:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 08:07:49 2025 by rpki-client on console.sobornost.net