Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9192C18/9A5EEA8C3DF411ED8041F930C4F9AE02/1B740C443DF811ED8EA29234C4F9AE02.roa
File:                     1B740C443DF811ED8EA29234C4F9AE02.roa (raw, json)
Hash identifier:          d46c6mP8yQKtCL1j50wpNIYdrEG7vH8Gk0XwB/6np30=
Subject key identifier:   CB:19:20:0C:99:D5:E7:DE:65:9D:6D:55:6D:84:09:2F:51:B7:C5:EA
Certificate issuer:       /CN=A9192C18/serialNumber=F1FE0C327E79E5AF43E15B0E6F8CD66C0329D138
Certificate serial:       02DA
Authority key identifier: F1:FE:0C:32:7E:79:E5:AF:43:E1:5B:0E:6F:8C:D6:6C:03:29:D1:38
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8f4MMn555a9D4VsOb4zWbAMp0Tg.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9192C18/9A5EEA8C3DF411ED8041F930C4F9AE02/1B740C443DF811ED8EA29234C4F9AE02.roa
Signing time:             Thu 20 Mar 2025 07:29:32 +0000
ROA not before:           Thu 20 Mar 2025 07:29:32 +0000
ROA not after:            Mon 01 Dec 2025 00:00:00 +0000
asID:                     16509
IP address blocks:        218.33.0.0/18 maxlen: 24
                          218.33.104.0/22 maxlen: 22

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9192C18/9A5EEA8C3DF411ED8041F930C4F9AE02/8f4MMn555a9D4VsOb4zWbAMp0Tg.crl
                          rsync://rpki.apnic.net/member_repository/A9192C18/9A5EEA8C3DF411ED8041F930C4F9AE02/8f4MMn555a9D4VsOb4zWbAMp0Tg.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8f4MMn555a9D4VsOb4zWbAMp0Tg.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 01 May 2025 02:50:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 730 (0x2da)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9192C18, serialNumber=F1FE0C327E79E5AF43E15B0E6F8CD66C0329D138
        Validity
            Not Before: Mar 20 07:29:32 2025 GMT
            Not After : Dec  1 00:00:00 2025 GMT
        Subject: CN=67dbc3dc-d362
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e8:ce:a1:af:80:74:14:b5:08:60:74:23:4d:89:
                    78:ce:fe:bc:8f:5b:62:72:db:15:96:69:6e:07:ce:
                    27:ea:a9:3f:93:ce:9b:b3:07:48:51:d2:19:49:b5:
                    54:60:63:ad:cf:f0:38:c2:a3:38:26:f2:02:f5:57:
                    f3:c2:0c:57:12:c9:88:d5:8f:5c:ee:4a:fd:37:e7:
                    2d:12:8a:f4:0e:0d:0d:d0:f0:b8:54:ce:9d:8d:fa:
                    0f:cd:52:31:8c:9b:18:b3:6d:42:cb:3a:c9:54:9f:
                    1d:78:91:16:5f:35:fa:65:72:e9:39:22:e1:f9:b0:
                    df:4d:98:ad:f7:67:68:28:70:5d:c9:7d:bd:3e:5a:
                    c2:03:49:a5:ae:55:e3:58:6f:db:b8:f9:64:fa:15:
                    aa:0c:f8:5d:a4:e0:3c:7a:bc:b3:81:ad:78:54:ac:
                    22:3a:99:a1:cc:b3:72:04:0f:88:0b:97:f5:15:5c:
                    9d:1b:ec:c8:8e:4e:13:1d:cb:1f:9b:91:88:21:ce:
                    30:9b:ef:db:42:49:4e:93:e1:13:00:07:01:c4:73:
                    5e:92:54:60:08:ba:b1:a6:dc:19:84:0b:64:2b:53:
                    74:ab:5d:9d:25:e9:e5:be:e5:a1:3d:ca:ad:33:98:
                    d2:51:93:23:96:9d:b4:44:82:c3:f4:d9:e5:ed:63:
                    49:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CB:19:20:0C:99:D5:E7:DE:65:9D:6D:55:6D:84:09:2F:51:B7:C5:EA
            X509v3 Authority Key Identifier:
                keyid:F1:FE:0C:32:7E:79:E5:AF:43:E1:5B:0E:6F:8C:D6:6C:03:29:D1:38

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9192C18/9A5EEA8C3DF411ED8041F930C4F9AE02/8f4MMn555a9D4VsOb4zWbAMp0Tg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8f4MMn555a9D4VsOb4zWbAMp0Tg.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9192C18/9A5EEA8C3DF411ED8041F930C4F9AE02/1B740C443DF811ED8EA29234C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  218.33.0.0/18
                  218.33.104.0/22

    Signature Algorithm: sha256WithRSAEncryption
         5b:2f:c8:46:0d:13:3d:ae:aa:73:54:6c:0f:92:ee:56:07:10:
         21:81:fa:34:44:e0:c2:b4:a7:06:ba:df:38:c2:c6:e4:df:90:
         0b:50:89:c7:ff:16:61:cf:91:13:f8:d1:9f:e1:e6:36:6f:c3:
         4e:bf:a5:d7:c1:bc:6e:15:c5:68:07:94:95:fb:e0:2a:2c:be:
         bf:b0:ff:9f:9d:71:22:58:3d:59:ab:cf:aa:2f:80:e0:3a:bd:
         70:bf:b3:61:67:21:ab:f4:c4:a4:65:a0:ef:33:45:c3:ba:8e:
         0c:d5:65:48:ca:12:01:93:6b:a6:43:b0:f1:0b:c7:cc:3d:35:
         d5:21:6d:3b:bd:07:bc:da:0b:07:62:12:58:16:78:b1:f9:b1:
         93:cc:0f:c3:a4:6c:d0:28:25:8c:63:e3:55:01:ef:d9:e5:64:
         05:4a:87:bb:c4:00:c0:56:66:10:7e:a5:e2:5b:4f:84:44:0b:
         50:5f:5a:4f:30:0d:7d:2a:56:40:b6:2c:20:6c:bd:bb:80:15:
         78:7a:9a:49:94:55:06:43:ce:ae:bf:8f:11:88:72:15:2d:21:
         32:c3:e1:d4:22:23:42:1a:84:3d:f3:bb:23:ad:5e:4a:1c:0f:
         e5:3c:fb:63:9a:f0:5e:5d:e7:95:21:56:f2:5a:cd:69:21:65:
         ee:aa:37:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 06:54:45 2025 by rpki-client on console.sobornost.net