Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9192C18/9A5EEA8C3DF411ED8041F930C4F9AE02/47A8E8C61FD111F0B1550D83C4F9AE02.roa
File:                     47A8E8C61FD111F0B1550D83C4F9AE02.roa (raw, json)
Hash identifier:          9XgGh0ajuivoZAuKDOsOnBPkN1Ws+C3V6eEttk4XMus=
Subject key identifier:   D3:90:39:7C:DF:83:8D:EF:CA:AD:03:59:27:E4:24:B2:9E:0B:88:2A
Certificate issuer:       /CN=A9192C18/serialNumber=F1FE0C327E79E5AF43E15B0E6F8CD66C0329D138
Certificate serial:       031B
Authority key identifier: F1:FE:0C:32:7E:79:E5:AF:43:E1:5B:0E:6F:8C:D6:6C:03:29:D1:38
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8f4MMn555a9D4VsOb4zWbAMp0Tg.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9192C18/9A5EEA8C3DF411ED8041F930C4F9AE02/47A8E8C61FD111F0B1550D83C4F9AE02.roa
Signing time:             Tue 22 Apr 2025 23:26:56 +0000
ROA not before:           Tue 22 Apr 2025 23:26:56 +0000
ROA not after:            Mon 01 Dec 2025 00:00:00 +0000
asID:                     13335
IP address blocks:        202.155.141.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9192C18/9A5EEA8C3DF411ED8041F930C4F9AE02/8f4MMn555a9D4VsOb4zWbAMp0Tg.crl
                          rsync://rpki.apnic.net/member_repository/A9192C18/9A5EEA8C3DF411ED8041F930C4F9AE02/8f4MMn555a9D4VsOb4zWbAMp0Tg.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8f4MMn555a9D4VsOb4zWbAMp0Tg.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 01 May 2025 02:50:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 795 (0x31b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9192C18, serialNumber=F1FE0C327E79E5AF43E15B0E6F8CD66C0329D138
        Validity
            Not Before: Apr 22 23:26:56 2025 GMT
            Not After : Dec  1 00:00:00 2025 GMT
        Subject: CN=680825c0-1dff
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:01:99:9a:af:61:ba:89:78:cc:e9:51:bd:c6:
                    76:53:3a:04:ae:fe:77:17:ba:0d:67:7d:6d:06:d9:
                    64:10:20:11:61:9d:1c:0a:f7:71:06:49:9e:3c:d4:
                    20:3d:16:30:52:c2:a0:3b:5d:cf:e5:60:f1:7d:b3:
                    c0:35:d2:7d:c0:73:cd:70:1e:a5:78:81:6f:e5:61:
                    be:96:46:b5:56:63:45:aa:69:3e:e7:00:8a:c6:68:
                    d2:cd:00:c6:e7:98:e6:f8:40:12:7d:71:a6:c6:0c:
                    65:5b:4f:98:c5:72:40:40:ef:6d:53:92:a6:13:66:
                    99:fb:e7:a3:59:37:41:2f:3e:1a:7a:7a:93:47:7d:
                    41:9c:94:30:d7:34:a2:52:8b:db:46:10:60:a3:bf:
                    cc:9e:bc:f2:cc:8f:68:8a:25:26:8b:33:0b:34:1d:
                    27:57:7e:f1:38:6a:c0:08:4f:26:0a:ed:f2:d8:85:
                    9b:54:2b:ca:f9:4e:e9:4e:77:40:ea:02:89:3c:c0:
                    7e:be:f7:30:a4:8a:c8:fb:f2:43:ae:36:dd:34:24:
                    99:42:d2:d0:92:42:e6:07:2d:13:4a:8b:44:9c:c2:
                    2e:7e:c5:04:36:e7:d8:47:fb:1b:00:68:61:f3:48:
                    5d:6d:35:4e:25:57:e0:b6:97:82:a6:85:84:dd:50:
                    11:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D3:90:39:7C:DF:83:8D:EF:CA:AD:03:59:27:E4:24:B2:9E:0B:88:2A
            X509v3 Authority Key Identifier:
                keyid:F1:FE:0C:32:7E:79:E5:AF:43:E1:5B:0E:6F:8C:D6:6C:03:29:D1:38

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9192C18/9A5EEA8C3DF411ED8041F930C4F9AE02/8f4MMn555a9D4VsOb4zWbAMp0Tg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8f4MMn555a9D4VsOb4zWbAMp0Tg.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9192C18/9A5EEA8C3DF411ED8041F930C4F9AE02/47A8E8C61FD111F0B1550D83C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  202.155.141.0/24

    Signature Algorithm: sha256WithRSAEncryption
         52:f9:af:63:cb:11:cd:b4:04:47:66:cd:60:f5:d1:9a:2e:1f:
         51:17:d2:fa:67:bc:c7:07:26:06:15:8a:2a:f1:b2:fa:de:83:
         6b:94:a2:20:5a:f3:86:38:bb:d4:57:3e:04:b7:76:22:14:93:
         5d:17:1b:c0:92:79:bc:bd:d7:07:eb:d5:3a:ec:ef:7c:db:fa:
         59:2d:8b:e1:37:96:f3:5c:36:52:b9:1c:44:3f:95:36:4c:91:
         cc:dd:96:e5:94:cf:b1:14:79:90:f6:fb:14:1a:91:b4:5a:90:
         ff:51:36:a6:57:e2:4c:37:06:d1:d0:e8:12:08:1d:21:1d:50:
         a1:e0:9e:56:c6:b1:ab:4d:43:8b:e3:08:12:92:e3:0b:27:80:
         3f:6d:ff:2d:c7:67:65:dc:d0:cd:56:19:57:1f:a9:06:be:4b:
         74:6c:97:6b:c3:12:84:7c:e3:0a:f3:9a:5d:55:8b:5a:3a:bc:
         b7:bd:91:e4:aa:fd:fe:35:c9:55:6c:12:00:5d:92:4c:2c:ce:
         fe:59:76:b7:0c:cd:be:78:1d:54:a7:25:91:70:6c:c8:65:7e:
         33:8b:e7:8d:57:34:14:89:bf:76:7d:38:2f:05:0c:1f:af:56:
         ec:06:f2:9c:be:2b:7a:c6:37:26:c5:21:7b:e3:7d:5e:21:58:
         3c:f4:0c:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 06:54:45 2025 by rpki-client on console.sobornost.net