Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91CFF62/11F4D8D0626211EE80BC855DC4F9AE02/9AD1EA98626311EE8EE2D260C4F9AE02.roa
File:                     9AD1EA98626311EE8EE2D260C4F9AE02.roa (raw, json)
Hash identifier:          L40Slg3ZYSgLHLHaJtzo7K3P+FdCTKJ/Kn2CGC4kby0=
Subject key identifier:   3D:17:9A:92:FC:AE:90:A5:B9:D4:AF:A6:80:05:6E:B6:3C:C3:3C:84
Certificate issuer:       /CN=A91CFF62/serialNumber=583CBC7BC966145790C9F6F223688ADAFE5AD3B8
Certificate serial:       0127
Authority key identifier: 58:3C:BC:7B:C9:66:14:57:90:C9:F6:F2:23:68:8A:DA:FE:5A:D3:B8
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/WDy8e8lmFFeQyfbyI2iK2v5a07g.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91CFF62/11F4D8D0626211EE80BC855DC4F9AE02/9AD1EA98626311EE8EE2D260C4F9AE02.roa
Signing time:             Fri 21 Mar 2025 04:09:51 +0000
ROA not before:           Fri 21 Mar 2025 04:09:51 +0000
ROA not after:            Thu 28 May 2026 00:00:00 +0000
asID:                     16509
IP address blocks:        192.245.106.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91CFF62/11F4D8D0626211EE80BC855DC4F9AE02/WDy8e8lmFFeQyfbyI2iK2v5a07g.crl
                          rsync://rpki.apnic.net/member_repository/A91CFF62/11F4D8D0626211EE80BC855DC4F9AE02/WDy8e8lmFFeQyfbyI2iK2v5a07g.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/WDy8e8lmFFeQyfbyI2iK2v5a07g.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 30 Apr 2025 02:50:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 295 (0x127)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91CFF62, serialNumber=583CBC7BC966145790C9F6F223688ADAFE5AD3B8
        Validity
            Not Before: Mar 21 04:09:51 2025 GMT
            Not After : May 28 00:00:00 2026 GMT
        Subject: CN=67dce68f-d5d5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:08:8c:b9:92:cd:e9:96:0c:13:3f:13:d3:87:
                    d0:4a:10:59:31:84:f5:e2:6c:ac:6a:e9:f5:97:ae:
                    1e:5f:61:ba:e8:37:3a:cf:be:ee:9b:bc:13:ca:35:
                    ab:c7:72:52:7c:33:ef:0a:22:8e:0b:bb:a1:dc:87:
                    e1:6a:3e:6d:29:ee:5e:5c:cb:65:58:44:c5:6f:42:
                    19:ae:7e:ae:a6:3e:49:a3:08:ca:95:7a:04:59:a7:
                    eb:5b:4b:62:9a:4c:bc:0b:87:59:09:5f:c1:0e:6b:
                    94:3a:70:95:28:e9:91:04:77:fc:cf:b5:ff:7e:fc:
                    f1:09:f9:a2:5b:85:22:73:48:e6:fe:4f:c7:9c:74:
                    ae:28:01:81:de:62:49:43:ac:36:66:7a:ac:ac:6a:
                    ae:49:04:1c:d4:64:51:72:29:5d:f0:88:8a:a6:a5:
                    d1:d8:db:d3:bb:fb:2e:86:d1:d4:3e:bf:4d:aa:50:
                    d2:a9:ad:cb:30:05:1c:67:90:91:29:b4:43:8e:43:
                    20:14:a4:32:78:63:88:bc:2b:ff:9c:a4:92:67:ab:
                    f2:40:e3:6c:c5:f9:36:90:e8:6e:de:48:90:5c:de:
                    a1:b1:34:ca:61:2d:4e:42:50:f4:e2:b7:50:14:76:
                    af:8d:68:a1:f4:10:49:66:61:f8:ef:3b:95:16:87:
                    c7:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3D:17:9A:92:FC:AE:90:A5:B9:D4:AF:A6:80:05:6E:B6:3C:C3:3C:84
            X509v3 Authority Key Identifier:
                keyid:58:3C:BC:7B:C9:66:14:57:90:C9:F6:F2:23:68:8A:DA:FE:5A:D3:B8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91CFF62/11F4D8D0626211EE80BC855DC4F9AE02/WDy8e8lmFFeQyfbyI2iK2v5a07g.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/WDy8e8lmFFeQyfbyI2iK2v5a07g.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CFF62/11F4D8D0626211EE80BC855DC4F9AE02/9AD1EA98626311EE8EE2D260C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.245.106.0/24

    Signature Algorithm: sha256WithRSAEncryption
         26:99:7b:29:72:b3:d2:c0:58:f1:e5:76:44:59:fa:3e:56:66:
         e0:44:52:df:9b:95:06:e9:f9:2d:9b:b5:6b:26:a0:70:6d:1f:
         12:00:f5:84:4a:62:38:bd:c1:38:bf:3f:8c:16:49:3b:7c:ea:
         ae:e3:cf:82:64:31:8c:82:6d:e8:a9:81:b5:17:95:82:a3:19:
         87:a3:0d:78:c0:6c:8f:0e:78:11:77:89:2f:5c:a3:ec:f2:ee:
         20:b3:3b:c0:31:41:d5:ac:b7:f6:60:ca:18:84:08:72:8a:2d:
         57:ff:b0:31:6b:a7:e9:9f:ab:3f:c7:1f:f5:59:ba:af:cf:a0:
         25:e8:9a:39:bc:39:53:e6:5e:a0:d3:2a:16:61:a0:06:cb:a1:
         a7:0c:bf:aa:af:5c:87:97:38:c8:1f:3f:8b:04:3f:50:fe:73:
         12:db:b9:a2:88:a8:ae:c0:42:0a:74:19:0d:22:be:cf:a6:22:
         b8:33:6b:1a:c5:e4:74:b2:ae:a5:bc:6d:5a:2c:91:6a:4c:db:
         49:9f:9f:1a:88:c0:45:75:19:c6:3d:06:7f:be:bb:63:fd:02:
         6c:3f:d6:d2:4d:97:e5:a4:bf:47:e4:ed:9b:05:c9:e3:7c:f5:
         69:01:80:02:ab:be:28:a8:0b:e0:35:ce:f5:1f:54:a4:06:2f:
         42:31:75:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 23 06:36:01 2025 by rpki-client on console.sobornost.net