Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91B7BDC/79EE0BC4E27211EEB83D606BC4F9AE02/D66D72562EAB11EF9B369566C4F9AE02.roa
File:                     D66D72562EAB11EF9B369566C4F9AE02.roa (raw, json)
Hash identifier:          G6byu9YcoWVJNO3fjM+TiUCJIHcdub/O4ZJnFwh5XBs=
Subject key identifier:   2E:A2:EF:C5:F6:EA:73:9C:34:90:98:A0:F1:01:D5:65:1F:B1:C7:D3
Certificate issuer:       /CN=A91B7BDC/serialNumber=EF25A925BFBD4CBAEF52456AB3B309B747040DFE
Certificate serial:       EC
Authority key identifier: EF:25:A9:25:BF:BD:4C:BA:EF:52:45:6A:B3:B3:09:B7:47:04:0D:FE
Authority info access:    rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/7yWpJb-9TLrvUkVqs7MJt0cEDf4.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91B7BDC/79EE0BC4E27211EEB83D606BC4F9AE02/D66D72562EAB11EF9B369566C4F9AE02.roa
Signing time:             Fri 25 Apr 2025 00:25:41 +0000
ROA not before:           Fri 25 Apr 2025 00:25:41 +0000
ROA not after:            Wed 01 Jul 2026 00:00:00 +0000
asID:                     132139
IP address blocks:        185.81.70.0/24 maxlen: 24
                          185.81.70.208/29 maxlen: 29
                          185.81.70.216/29 maxlen: 29
                          185.81.70.236/31 maxlen: 31
                          185.81.70.238/31 maxlen: 31
                          185.81.70.240/29 maxlen: 29
                          185.81.70.248/29 maxlen: 29

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91B7BDC/79EE0BC4E27211EEB83D606BC4F9AE02/7yWpJb-9TLrvUkVqs7MJt0cEDf4.crl
                          rsync://rpki.apnic.net/member_repository/A91B7BDC/79EE0BC4E27211EEB83D606BC4F9AE02/7yWpJb-9TLrvUkVqs7MJt0cEDf4.mft
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/7yWpJb-9TLrvUkVqs7MJt0cEDf4.cer
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 03 May 2025 23:57:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 236 (0xec)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91B7BDC, serialNumber=EF25A925BFBD4CBAEF52456AB3B309B747040DFE
        Validity
            Not Before: Apr 25 00:25:41 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=680ad685-9987
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:f4:59:0e:3c:98:d9:91:64:12:a4:81:32:38:
                    ec:fe:ac:08:c7:60:45:ca:40:16:78:96:84:1b:03:
                    3d:98:4d:3b:34:58:48:6e:93:ed:7c:51:a2:c8:60:
                    a8:0c:7f:1a:cc:cb:09:ed:b4:74:be:2c:b9:ce:b5:
                    93:f6:d6:49:29:4a:66:99:1a:e2:ab:0b:14:71:d4:
                    96:68:a5:84:09:53:42:99:08:7c:c2:fa:38:39:f2:
                    46:b2:70:14:ba:dc:e5:2e:36:ab:fe:90:6d:3e:dc:
                    da:10:99:7e:e1:89:b3:65:d2:53:3b:77:b1:c6:50:
                    1c:a3:d5:17:ce:23:d7:2b:16:53:a6:13:fe:15:9d:
                    9d:ae:65:f6:de:2f:c7:81:a3:24:b1:49:8d:87:d4:
                    69:09:53:f8:54:23:99:b8:44:6a:f7:0b:1f:0e:59:
                    e5:d8:fe:d5:7a:53:26:b3:32:c2:00:c0:39:35:42:
                    c5:22:65:18:be:80:7a:d4:70:d2:16:2b:e6:94:5a:
                    61:95:e8:ec:c7:29:81:db:b9:8a:a8:99:5c:99:74:
                    a3:72:cc:49:1c:5a:47:c6:64:db:85:9e:e0:ab:f3:
                    12:d4:2a:8e:ca:dd:10:98:d7:b9:bb:b0:06:ea:6d:
                    a5:e3:f3:d5:cb:c4:2c:56:0a:d8:d0:ba:cf:20:58:
                    2c:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2E:A2:EF:C5:F6:EA:73:9C:34:90:98:A0:F1:01:D5:65:1F:B1:C7:D3
            X509v3 Authority Key Identifier:
                keyid:EF:25:A9:25:BF:BD:4C:BA:EF:52:45:6A:B3:B3:09:B7:47:04:0D:FE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91B7BDC/79EE0BC4E27211EEB83D606BC4F9AE02/7yWpJb-9TLrvUkVqs7MJt0cEDf4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/7yWpJb-9TLrvUkVqs7MJt0cEDf4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B7BDC/79EE0BC4E27211EEB83D606BC4F9AE02/D66D72562EAB11EF9B369566C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.81.70.0/24

    Signature Algorithm: sha256WithRSAEncryption
         7d:6b:4f:1b:69:7a:c1:26:1e:b0:ce:7b:21:63:11:53:ae:10:
         82:57:5d:ed:ad:b5:99:9e:4d:85:9d:82:af:f3:ec:5f:9d:a1:
         ec:12:06:5b:87:2c:0f:c4:61:47:e9:3a:03:e7:74:1e:d6:2d:
         c7:44:cb:a4:a3:ce:b9:0d:38:01:bb:06:bb:48:50:4e:5a:3e:
         2f:f7:dd:76:3f:5a:24:7d:37:5e:6d:c7:8b:7b:cf:bb:80:24:
         25:04:41:7d:d6:f6:fb:12:23:54:40:7a:d5:45:fe:d7:52:41:
         35:a0:01:09:2c:7e:af:3f:04:7d:8b:b2:47:9d:bf:f0:38:0d:
         6c:a8:54:cd:1d:a9:b9:05:4c:76:96:8e:4d:3b:b9:fe:fe:4d:
         16:77:6b:fb:97:2e:e2:51:0f:76:bb:07:9d:c7:8a:38:82:5e:
         ad:eb:0c:9d:e8:b2:dd:97:10:9e:78:a5:0d:10:ae:64:7c:f8:
         23:09:af:ad:d7:59:f4:57:32:3f:aa:49:06:cd:e8:7c:6d:e4:
         bf:b8:e9:4e:15:9b:73:a3:bb:00:51:d4:5c:a7:fe:d9:75:69:
         42:7a:39:41:36:77:43:37:a0:2b:e1:1f:11:51:4c:5b:71:4c:
         ef:d8:2a:d6:75:a1:4c:45:02:91:8f:9c:a7:b9:d2:c2:66:3a:
         02:7a:ee:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 05:43:08 2025 by rpki-client on console.sobornost.net