Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91991D3/629E8B203B2311EEA43B0219C4F9AE02/926A40AC205E11F0A7552513C4F9AE02.roa
File:                     926A40AC205E11F0A7552513C4F9AE02.roa (raw, json)
Hash identifier:          4KMF0OCYbNDwaW3aLIgUQJgQPdi1cw9YHAWu6imOU70=
Subject key identifier:   96:0E:BB:43:A7:56:35:AA:DB:69:E0:D4:F4:E2:16:42:FC:62:45:08
Certificate issuer:       /CN=A91991D3/serialNumber=19581338A9D63D95A96D1711623E2F660EB0FB17
Certificate serial:       016B
Authority key identifier: 19:58:13:38:A9:D6:3D:95:A9:6D:17:11:62:3E:2F:66:0E:B0:FB:17
Authority info access:    rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/GVgTOKnWPZWpbRcRYj4vZg6w-xc.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91991D3/629E8B203B2311EEA43B0219C4F9AE02/926A40AC205E11F0A7552513C4F9AE02.roa
Signing time:             Wed 23 Apr 2025 16:22:17 +0000
ROA not before:           Wed 23 Apr 2025 16:22:17 +0000
ROA not after:            Tue 30 Dec 2025 00:00:00 +0000
asID:                     202736
IP address blocks:        185.254.242.0/24 maxlen: 24
                          213.139.232.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91991D3/629E8B203B2311EEA43B0219C4F9AE02/GVgTOKnWPZWpbRcRYj4vZg6w-xc.crl
                          rsync://rpki.apnic.net/member_repository/A91991D3/629E8B203B2311EEA43B0219C4F9AE02/GVgTOKnWPZWpbRcRYj4vZg6w-xc.mft
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/GVgTOKnWPZWpbRcRYj4vZg6w-xc.cer
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 04 May 2025 02:10:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 363 (0x16b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91991D3, serialNumber=19581338A9D63D95A96D1711623E2F660EB0FB17
        Validity
            Not Before: Apr 23 16:22:17 2025 GMT
            Not After : Dec 30 00:00:00 2025 GMT
        Subject: CN=680913b9-0cd9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:fd:33:23:70:5a:f9:88:8f:77:cd:54:71:ef:5b:
                    23:62:eb:1c:0a:8b:34:e1:c6:22:d7:f0:ba:79:c1:
                    fe:1a:bf:00:ec:6d:df:61:b8:aa:a1:2f:e9:70:b5:
                    7e:18:1a:a1:0e:45:93:07:38:20:c8:76:60:16:14:
                    17:25:9d:75:13:05:69:e7:93:28:d8:f6:4b:7e:de:
                    84:28:1d:dd:f1:83:c0:b3:09:81:fd:b3:df:d1:d3:
                    41:47:b3:4d:b7:bf:c6:6d:49:dc:36:61:f3:de:6f:
                    99:bb:3d:fb:ca:2c:e7:60:3e:df:4b:9d:6d:5d:9a:
                    09:07:12:e0:8b:57:f7:8d:cf:a4:14:6a:02:c0:42:
                    05:80:42:f6:0a:e3:4d:2c:9a:3f:5c:45:35:2d:6d:
                    99:da:f3:0a:2b:09:c1:ad:89:fe:56:3c:1a:ac:f1:
                    bb:81:0c:5e:8d:5f:da:38:72:b8:4b:57:50:f9:73:
                    87:cc:ea:63:fe:a0:56:94:53:77:b7:19:b7:9b:2b:
                    69:20:b9:84:d2:b9:9d:85:3c:b9:cc:a2:73:5d:6d:
                    6d:bb:80:08:90:70:de:ce:70:5b:6c:cd:2a:b1:94:
                    32:95:48:b3:39:39:db:fd:45:91:75:82:71:4a:1c:
                    f7:38:7b:70:6b:25:ea:d4:e3:a4:14:de:17:54:4d:
                    db:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                96:0E:BB:43:A7:56:35:AA:DB:69:E0:D4:F4:E2:16:42:FC:62:45:08
            X509v3 Authority Key Identifier:
                keyid:19:58:13:38:A9:D6:3D:95:A9:6D:17:11:62:3E:2F:66:0E:B0:FB:17

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91991D3/629E8B203B2311EEA43B0219C4F9AE02/GVgTOKnWPZWpbRcRYj4vZg6w-xc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/GVgTOKnWPZWpbRcRYj4vZg6w-xc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91991D3/629E8B203B2311EEA43B0219C4F9AE02/926A40AC205E11F0A7552513C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.254.242.0/24
                  213.139.232.0/24

    Signature Algorithm: sha256WithRSAEncryption
         a9:13:77:eb:a4:b1:a5:33:52:2c:26:f6:06:bd:82:d3:09:7d:
         e3:ed:2a:91:d3:1b:9f:bd:b6:e0:e5:74:8f:bd:14:e8:36:a4:
         90:08:f5:30:ef:99:88:f2:d0:99:2d:35:8b:91:07:10:e5:8a:
         6a:eb:9d:1d:86:73:28:6f:7c:04:15:a0:cc:d9:ff:4e:7e:54:
         4e:74:a5:a8:1c:5c:3e:d8:42:b7:d8:05:6d:a1:bf:c2:8e:8f:
         5e:b1:54:ed:02:19:4c:68:e9:96:b0:d4:8d:c0:d2:db:22:c0:
         c4:38:ac:2c:9a:43:57:f7:61:81:31:eb:e5:d9:45:26:84:4b:
         f7:b6:e7:24:ce:8b:9b:b6:d5:b6:3f:18:8b:95:b0:4f:c0:10:
         fc:de:82:99:84:e4:d8:53:f8:77:a9:98:c8:ab:7e:74:f3:b8:
         2b:2e:b0:0d:98:43:1b:74:86:bd:86:9c:19:49:d7:44:28:1d:
         df:ef:dc:3e:05:a2:41:f2:5a:5a:f6:4b:ef:22:07:b2:63:91:
         1a:b0:90:7d:d2:ae:9b:63:cb:87:be:f8:ce:3e:4b:d9:24:33:
         eb:cb:3b:be:5d:81:f2:47:7a:47:3b:9f:3f:2a:72:d4:3a:fb:
         da:59:9e:73:cd:76:dc:1e:7d:2c:a6:f9:c6:70:53:3f:e9:99:
         87:53:cd:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 05:43:00 2025 by rpki-client on console.sobornost.net