Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9127726/F9FFF6AC1DA711E2963AFAA108B02CD2/264A19E27A3D11E99D212E62C4F9AE02.roa
File:                     264A19E27A3D11E99D212E62C4F9AE02.roa (raw, json)
Hash identifier:          kaUlqr3b8A7no1oe3E82H4SD9C+VUB4JZZk+4clJWRg=
Subject key identifier:   19:FA:94:5C:4E:46:CE:87:2F:76:1D:9B:37:5D:2E:46:B4:80:DB:65
Certificate issuer:       /CN=A9127726/serialNumber=BD87855CB681E23359BFEC1A34F1992B671E5EEE
Certificate serial:       34E3
Authority key identifier: BD:87:85:5C:B6:81:E2:33:59:BF:EC:1A:34:F1:99:2B:67:1E:5E:EE
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vYeFXLaB4jNZv-waNPGZK2ceXu4.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9127726/F9FFF6AC1DA711E2963AFAA108B02CD2/264A19E27A3D11E99D212E62C4F9AE02.roa
Signing time:             Thu 08 May 2025 15:21:11 +0000
ROA not before:           Thu 08 May 2025 15:21:11 +0000
ROA not after:            Thu 30 Jul 2026 00:00:00 +0000
asID:                     132313
IP address blocks:        43.245.118.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9127726/F9FFF6AC1DA711E2963AFAA108B02CD2/vYeFXLaB4jNZv-waNPGZK2ceXu4.crl
                          rsync://rpki.apnic.net/member_repository/A9127726/F9FFF6AC1DA711E2963AFAA108B02CD2/vYeFXLaB4jNZv-waNPGZK2ceXu4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vYeFXLaB4jNZv-waNPGZK2ceXu4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 21 May 2025 15:15:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 13539 (0x34e3)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9127726, serialNumber=BD87855CB681E23359BFEC1A34F1992B671E5EEE
        Validity
            Not Before: May  8 15:21:11 2025 GMT
            Not After : Jul 30 00:00:00 2026 GMT
        Subject: CN=681ccbe7-c328
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:10:70:4b:8c:31:75:70:78:f4:61:b5:b8:55:
                    af:ec:4b:e3:09:0b:04:db:a2:71:5d:97:66:87:b8:
                    74:da:dd:fc:78:41:c1:21:5f:25:75:33:ae:18:e2:
                    1f:df:1e:ae:66:fc:58:91:16:fe:56:46:a5:45:d4:
                    62:fe:44:b6:14:e0:7e:88:b6:6b:2c:ce:54:17:d4:
                    37:71:77:f4:e8:30:9d:fa:ce:f3:f6:60:c1:db:2e:
                    4b:02:49:24:2d:af:be:08:39:32:da:10:20:9b:2e:
                    6f:19:13:10:31:09:08:b7:31:06:02:e7:16:75:8f:
                    f3:f7:38:90:68:2d:4e:51:54:75:7a:a0:be:9e:8d:
                    a4:a5:05:26:61:89:62:5b:c7:84:c5:63:da:78:0b:
                    f0:08:13:8e:67:3e:7f:af:c4:36:07:13:3a:d5:67:
                    a0:f8:68:c7:4e:01:85:27:b3:1b:ba:77:e9:17:ff:
                    26:6b:a5:6e:d2:22:e5:55:31:ec:c0:ed:b9:f9:90:
                    33:55:61:7e:8f:ae:f9:04:fc:3e:a7:f1:b1:d4:91:
                    cf:18:b2:f9:10:19:44:6a:be:62:5c:a1:07:07:83:
                    11:3f:0b:64:db:20:95:b0:26:78:4d:28:95:4c:d9:
                    ff:f4:0a:d9:2f:b8:52:05:aa:bf:0a:92:8d:97:1b:
                    18:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                19:FA:94:5C:4E:46:CE:87:2F:76:1D:9B:37:5D:2E:46:B4:80:DB:65
            X509v3 Authority Key Identifier:
                keyid:BD:87:85:5C:B6:81:E2:33:59:BF:EC:1A:34:F1:99:2B:67:1E:5E:EE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9127726/F9FFF6AC1DA711E2963AFAA108B02CD2/vYeFXLaB4jNZv-waNPGZK2ceXu4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vYeFXLaB4jNZv-waNPGZK2ceXu4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9127726/F9FFF6AC1DA711E2963AFAA108B02CD2/264A19E27A3D11E99D212E62C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  43.245.118.0/24

    Signature Algorithm: sha256WithRSAEncryption
         2e:48:5f:3d:2c:38:6b:3f:10:c5:d1:8b:f2:de:fe:cd:68:8b:
         b3:45:62:9e:26:d0:bf:2e:df:33:7a:2a:67:c9:ff:eb:57:09:
         52:11:ee:b5:a5:42:6b:a1:13:5a:78:ed:ae:c4:a2:aa:a2:db:
         74:c8:db:4d:4d:ac:e3:66:35:b8:a9:5c:93:c2:16:8d:fa:39:
         f1:16:f0:25:00:30:3f:35:bf:50:0a:3c:5e:cd:12:5d:4d:c6:
         ed:47:c7:53:08:c8:29:78:fb:52:27:9e:84:e6:09:5a:39:d4:
         1b:06:88:c1:7a:74:13:9b:a9:dc:da:3a:7f:bb:0b:fb:d5:dc:
         89:74:22:c5:62:d8:26:b0:6c:72:29:34:25:e8:d0:0d:20:24:
         02:95:81:6e:51:78:74:d9:e2:3f:49:cc:df:89:bd:c2:80:a9:
         ec:c4:b1:6f:80:de:0d:b7:91:e6:b7:c2:65:3a:50:7a:4b:42:
         25:2b:4a:d4:72:44:4c:63:2f:b3:2f:b5:f1:35:63:ce:00:73:
         ec:71:f8:ce:2f:7e:ae:15:8a:c2:4e:77:95:fd:05:53:0d:1b:
         52:5f:bd:7d:ce:47:26:07:3c:9c:7e:79:d4:9a:1e:cc:f2:11:
         cd:d2:50:95:9f:ce:f1:91:eb:95:ba:37:3f:fc:c8:b9:08:64:
         d8:e9:f2:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 15 10:12:06 2025 by rpki-client