Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91E6134/57B3E0BCC2A811EAA7918A2EC4F9AE02/5E33E734160411F0B1C61658C4F9AE02.roa
File:                     5E33E734160411F0B1C61658C4F9AE02.roa (raw, json)
Hash identifier:          0ZILpjfOmEfimXouRxfrnSfFxh02X1W7uYp1g4rvnjk=
Subject key identifier:   A7:14:C4:BB:CF:31:EA:9F:16:5F:91:EA:E5:93:A7:29:15:85:E8:7A
Certificate issuer:       /CN=A91E6134/serialNumber=9A73F1A919FBF46C872E38805B1650B5F88276D3
Certificate serial:       1004
Authority key identifier: 9A:73:F1:A9:19:FB:F4:6C:87:2E:38:80:5B:16:50:B5:F8:82:76:D3
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/mnPxqRn79GyHLjiAWxZQtfiCdtM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91E6134/57B3E0BCC2A811EAA7918A2EC4F9AE02/5E33E734160411F0B1C61658C4F9AE02.roa
Signing time:             Thu 10 Apr 2025 12:07:26 +0000
ROA not before:           Thu 10 Apr 2025 12:07:26 +0000
ROA not after:            Wed 30 Jul 2025 00:00:00 +0000
asID:                     9009
IP address blocks:        139.190.35.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91E6134/57B3E0BCC2A811EAA7918A2EC4F9AE02/mnPxqRn79GyHLjiAWxZQtfiCdtM.crl
                          rsync://rpki.apnic.net/member_repository/A91E6134/57B3E0BCC2A811EAA7918A2EC4F9AE02/mnPxqRn79GyHLjiAWxZQtfiCdtM.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/mnPxqRn79GyHLjiAWxZQtfiCdtM.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 01 May 2025 02:50:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4100 (0x1004)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91E6134, serialNumber=9A73F1A919FBF46C872E38805B1650B5F88276D3
        Validity
            Not Before: Apr 10 12:07:26 2025 GMT
            Not After : Jul 30 00:00:00 2025 GMT
        Subject: CN=67f7b47e-5587
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:dc:3e:26:0b:f8:37:6e:2c:4f:2a:d3:5e:b5:
                    01:dc:c7:d8:ea:6f:ea:fa:fc:32:0a:3e:b8:c8:0b:
                    31:c7:0a:fa:99:2e:cd:31:57:88:eb:2e:ad:f2:15:
                    04:24:21:03:3c:55:21:84:87:87:5b:53:a3:2a:0a:
                    53:bd:83:a1:5a:92:0f:69:c6:79:ee:5f:bb:d5:3d:
                    c8:cc:90:fd:89:c2:25:f7:a1:ef:b6:e6:31:01:27:
                    1f:5b:bd:8b:16:73:52:62:5c:ee:c8:10:ec:b0:db:
                    36:94:78:b1:91:5c:b6:b7:4d:49:cc:67:e7:77:89:
                    f0:23:d5:f4:9b:62:3f:13:5a:72:16:4e:95:43:5a:
                    95:4c:09:d4:6c:50:dc:91:8c:4c:fb:a4:d6:32:e4:
                    e7:f2:72:30:e0:33:50:8f:5e:9c:f7:6c:ae:b4:b0:
                    01:c6:ab:fb:96:37:6b:04:2b:c9:e1:9f:2d:f2:f7:
                    0b:4f:9e:1d:a5:aa:cb:70:42:97:5b:7c:17:30:8b:
                    a2:23:db:0e:b8:b1:9f:d8:c0:a1:c3:81:5f:97:14:
                    97:f6:1d:b4:ec:70:95:ec:c5:72:83:39:4c:93:83:
                    b9:d9:86:b5:f2:28:db:65:4f:cc:57:fc:ce:35:97:
                    7d:31:42:65:d3:89:74:00:2f:55:de:f8:39:e9:18:
                    18:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A7:14:C4:BB:CF:31:EA:9F:16:5F:91:EA:E5:93:A7:29:15:85:E8:7A
            X509v3 Authority Key Identifier:
                keyid:9A:73:F1:A9:19:FB:F4:6C:87:2E:38:80:5B:16:50:B5:F8:82:76:D3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91E6134/57B3E0BCC2A811EAA7918A2EC4F9AE02/mnPxqRn79GyHLjiAWxZQtfiCdtM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/mnPxqRn79GyHLjiAWxZQtfiCdtM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E6134/57B3E0BCC2A811EAA7918A2EC4F9AE02/5E33E734160411F0B1C61658C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  139.190.35.0/24

    Signature Algorithm: sha256WithRSAEncryption
         7e:92:69:15:fc:ed:f5:f7:8b:7d:14:20:59:eb:f5:82:76:d9:
         4a:73:a7:28:f8:7d:bf:f4:dc:09:d3:10:d7:0b:e6:25:ef:71:
         f1:59:95:aa:43:a1:6b:3f:1c:a3:42:e5:8c:bd:0c:b4:36:00:
         2d:d8:2b:5c:80:7b:b8:50:ec:0b:68:8c:a6:23:46:99:c8:35:
         96:fd:11:67:cd:6d:8f:ba:34:f6:33:94:c1:eb:7d:b1:38:24:
         97:52:f9:e1:8d:4a:f8:5f:05:78:07:af:52:db:0e:10:3b:4a:
         78:d7:af:aa:9d:0e:71:d5:6d:05:6e:9b:88:21:58:1e:66:91:
         55:a9:34:43:c6:0f:65:09:7a:ff:55:9d:63:ee:25:4d:23:90:
         76:69:62:3e:1f:55:95:f3:bb:59:e6:ee:8c:d8:b9:1f:d6:34:
         8a:db:82:47:14:d0:70:95:af:69:5b:6e:44:86:f9:b9:09:f1:
         39:27:3b:6f:f0:20:35:65:09:a0:38:cf:1c:9a:b1:21:2e:dc:
         67:85:bc:e6:e8:9e:03:e9:cd:d3:09:f5:67:85:dc:d9:ef:23:
         89:ca:d5:01:3f:0f:4a:a6:fc:ee:04:60:c1:b3:4b:88:7a:6e:
         2d:22:30:d0:da:9f:b0:7c:ae:37:bd:c5:81:a6:b9:57:c7:de:
         73:e2:a7:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 09:05:16 2025 by rpki-client on console.sobornost.net