Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91806C2/1624D1D8C49F11EC831CAF0EC4F9AE02/1CD62088C4A211EC8FD6D313C4F9AE02.roa
File:                     1CD62088C4A211EC8FD6D313C4F9AE02.roa (raw, json)
Hash identifier:          KamW1zC+t0AxsWxUwBVMnEzMkI75A/xxojQk/vMnrhE=
Subject key identifier:   EB:00:8B:72:57:63:ED:69:51:88:2D:71:C7:FA:AB:18:C5:6B:45:84
Certificate issuer:       /CN=A91806C2/serialNumber=5B0BBC84B5CBD15C30D90142706528CF19010568
Certificate serial:       0318
Authority key identifier: 5B:0B:BC:84:B5:CB:D1:5C:30:D9:01:42:70:65:28:CF:19:01:05:68
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Wwu8hLXL0Vww2QFCcGUozxkBBWg.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91806C2/1624D1D8C49F11EC831CAF0EC4F9AE02/1CD62088C4A211EC8FD6D313C4F9AE02.roa
Signing time:             Sat 29 Mar 2025 01:27:01 +0000
ROA not before:           Sat 29 Mar 2025 01:27:01 +0000
ROA not after:            Thu 28 May 2026 00:00:00 +0000
asID:                     16509
IP address blocks:        203.27.115.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91806C2/1624D1D8C49F11EC831CAF0EC4F9AE02/Wwu8hLXL0Vww2QFCcGUozxkBBWg.crl
                          rsync://rpki.apnic.net/member_repository/A91806C2/1624D1D8C49F11EC831CAF0EC4F9AE02/Wwu8hLXL0Vww2QFCcGUozxkBBWg.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Wwu8hLXL0Vww2QFCcGUozxkBBWg.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 30 Apr 2025 01:00:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 792 (0x318)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91806C2, serialNumber=5B0BBC84B5CBD15C30D90142706528CF19010568
        Validity
            Not Before: Mar 29 01:27:01 2025 GMT
            Not After : May 28 00:00:00 2026 GMT
        Subject: CN=67e74c65-0b05
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:d1:ef:ea:7c:a3:0d:7a:95:e0:a6:c2:d7:3c:
                    ca:a4:b8:bf:5b:a1:a6:04:bb:72:7c:ce:73:38:50:
                    c5:ff:a0:e2:b5:21:27:0d:93:52:f1:20:8d:27:f1:
                    d5:d0:3b:e3:f7:9a:ec:b9:35:b1:3a:03:54:cf:87:
                    3b:d3:7f:40:1d:f5:3a:8a:d3:84:36:c0:a4:f3:05:
                    1f:57:19:1a:ec:77:ee:1b:db:f5:c6:e6:eb:44:2b:
                    87:d9:bf:da:7c:c5:b7:fb:6d:38:e4:e6:08:78:ae:
                    80:41:8e:51:36:50:6e:02:93:e5:da:3a:18:01:86:
                    e0:d8:31:75:2f:1f:d1:f6:d4:ad:5b:f7:e4:c6:c8:
                    ba:fa:5b:34:a6:d5:54:c7:eb:6f:4d:1a:4b:6d:49:
                    80:c4:4c:b8:ac:ee:52:3c:ea:dd:83:1c:e5:cd:0d:
                    e8:40:e9:d1:14:05:91:7a:09:1e:52:20:25:af:38:
                    56:cd:86:40:b4:2d:75:aa:f0:d9:0b:80:2b:b1:b2:
                    cd:39:e6:98:9e:45:b0:93:74:12:fe:c9:5c:e7:fb:
                    a5:5f:df:dd:ae:6a:ec:e3:88:d1:18:db:cf:ca:6f:
                    b0:9f:51:c5:94:8d:d1:23:43:be:08:07:b8:09:c0:
                    bd:4e:f9:93:8d:a8:81:96:d7:71:94:3a:f2:13:a7:
                    a9:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EB:00:8B:72:57:63:ED:69:51:88:2D:71:C7:FA:AB:18:C5:6B:45:84
            X509v3 Authority Key Identifier:
                keyid:5B:0B:BC:84:B5:CB:D1:5C:30:D9:01:42:70:65:28:CF:19:01:05:68

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91806C2/1624D1D8C49F11EC831CAF0EC4F9AE02/Wwu8hLXL0Vww2QFCcGUozxkBBWg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Wwu8hLXL0Vww2QFCcGUozxkBBWg.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91806C2/1624D1D8C49F11EC831CAF0EC4F9AE02/1CD62088C4A211EC8FD6D313C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  203.27.115.0/24

    Signature Algorithm: sha256WithRSAEncryption
         80:24:27:f1:d6:33:7c:23:9a:33:ed:a4:8a:a9:23:5c:ae:18:
         2e:d2:5e:fc:05:12:7e:5e:10:c0:4c:d0:8d:4d:5b:e8:73:27:
         d5:1f:f8:4c:01:f7:e6:8e:42:52:da:91:f8:bc:6d:b1:08:68:
         b2:bd:86:39:8c:f5:a1:57:e4:9c:3d:80:72:0f:2d:6f:c7:c1:
         79:bf:0a:d4:03:3e:53:cf:ec:ef:d0:7c:c7:92:a3:63:13:5c:
         98:b5:a3:74:80:b9:9d:c5:7e:58:81:56:e7:4f:d7:0f:ff:3b:
         de:05:73:90:03:fd:7e:b3:c8:ec:bb:99:ab:3c:a2:b0:b7:87:
         dc:88:84:32:03:d0:7c:ee:fe:2c:52:29:4c:e0:73:cd:f4:e7:
         05:85:b2:2c:27:65:f6:1b:52:94:cd:b2:92:69:65:79:f9:a0:
         2b:9d:05:dd:22:8b:84:e0:dd:78:6a:33:e3:b8:f5:d5:e5:91:
         be:d2:21:d4:07:ae:12:bb:96:63:24:8d:85:b2:db:49:2e:c6:
         b5:8d:8c:6a:bf:1e:41:91:7c:ba:f3:af:dd:2e:b1:0c:86:46:
         c9:c9:7b:24:54:a1:3b:ed:c3:01:e2:d0:eb:bb:47:b6:e6:49:
         a8:ae:a8:1d:d0:5a:2f:fd:a9:03:d2:f5:3d:de:b6:5a:2f:cd:
         13:d8:8c:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 23 04:14:59 2025 by rpki-client on console.sobornost.net