Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91348C9/CFC10E0ACE9711EE923F0470C4F9AE02/F278C026892911EFB08D7746C4F9AE02.roa
File:                     F278C026892911EFB08D7746C4F9AE02.roa (raw, json)
Hash identifier:          Vz6AnYUqxQMrtm1fqPuY9YKct5u+kfmwLL8MJ80Qjc4=
Subject key identifier:   FE:A6:69:D8:7E:E8:9C:5C:F3:DD:B1:1C:16:D1:6A:D3:E3:81:88:44
Certificate issuer:       /CN=A91348C9/serialNumber=0C762B2C9024B34C988482F1D71D749AE7DC4AEB
Certificate serial:       F6
Authority key identifier: 0C:76:2B:2C:90:24:B3:4C:98:84:82:F1:D7:1D:74:9A:E7:DC:4A:EB
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DHYrLJAks0yYhILx1x10mufcSus.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91348C9/CFC10E0ACE9711EE923F0470C4F9AE02/F278C026892911EFB08D7746C4F9AE02.roa
Signing time:             Thu 01 May 2025 04:41:28 +0000
ROA not before:           Thu 01 May 2025 04:41:28 +0000
ROA not after:            Thu 30 Jul 2026 00:00:00 +0000
asID:                     146859
IP address blocks:        43.239.92.0/24 maxlen: 24
                          43.239.93.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91348C9/CFC10E0ACE9711EE923F0470C4F9AE02/DHYrLJAks0yYhILx1x10mufcSus.crl
                          rsync://rpki.apnic.net/member_repository/A91348C9/CFC10E0ACE9711EE923F0470C4F9AE02/DHYrLJAks0yYhILx1x10mufcSus.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DHYrLJAks0yYhILx1x10mufcSus.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 20 May 2025 04:35:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 246 (0xf6)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91348C9, serialNumber=0C762B2C9024B34C988482F1D71D749AE7DC4AEB
        Validity
            Not Before: May  1 04:41:28 2025 GMT
            Not After : Jul 30 00:00:00 2026 GMT
        Subject: CN=6812fb77-37fb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:85:ce:8c:b8:52:ae:0d:d3:0b:e3:ce:4e:ec:
                    ef:db:17:1b:1b:bc:b9:12:23:87:f4:c4:32:3a:24:
                    a5:44:82:c8:7d:59:e9:a8:74:13:ed:91:a4:ea:92:
                    ae:d1:c2:f8:f7:e5:e8:77:3f:9f:9d:ea:6d:12:7c:
                    e9:dc:4a:6d:84:4a:6a:d5:59:94:90:47:4b:1d:dd:
                    12:66:c0:8f:cd:7d:cd:42:29:13:fa:d4:a9:2b:50:
                    6f:bc:b0:0e:7c:b5:64:6d:8a:d5:cc:65:4f:05:ed:
                    fd:79:f3:cc:d9:61:d0:6b:e3:a2:0e:5e:b1:fb:c5:
                    71:e2:fc:43:02:d5:d2:d6:33:de:bf:f8:72:db:15:
                    ae:18:4d:e1:8f:15:a1:e3:62:6a:e2:5a:04:ca:f5:
                    ad:04:bf:81:d8:0b:2c:47:f0:37:12:ec:53:a4:0c:
                    8c:4e:36:57:d7:1a:42:7b:0d:8f:15:20:fb:e2:e7:
                    15:68:8d:fe:4a:28:7d:59:4f:50:b3:85:52:4f:c7:
                    6d:ef:50:6e:ce:a5:c8:a9:4c:07:eb:02:42:48:ca:
                    63:be:85:e9:f8:b6:34:0b:2d:c6:58:23:5b:77:28:
                    7a:7b:82:dd:9a:fb:7b:7b:f5:7e:f6:40:03:8c:a8:
                    cd:5a:80:f6:20:34:b9:26:4f:96:37:6c:b8:38:ab:
                    fe:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FE:A6:69:D8:7E:E8:9C:5C:F3:DD:B1:1C:16:D1:6A:D3:E3:81:88:44
            X509v3 Authority Key Identifier:
                keyid:0C:76:2B:2C:90:24:B3:4C:98:84:82:F1:D7:1D:74:9A:E7:DC:4A:EB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91348C9/CFC10E0ACE9711EE923F0470C4F9AE02/DHYrLJAks0yYhILx1x10mufcSus.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DHYrLJAks0yYhILx1x10mufcSus.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91348C9/CFC10E0ACE9711EE923F0470C4F9AE02/F278C026892911EFB08D7746C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  43.239.92.0/23

    Signature Algorithm: sha256WithRSAEncryption
         7f:6b:89:0a:98:b1:b6:e7:4a:b0:b6:2f:62:30:ab:99:1d:79:
         58:6f:b9:a9:e6:ed:1d:0a:fd:d8:df:d6:a9:54:84:f6:6e:f0:
         cc:69:87:8b:cc:50:55:38:c3:90:02:fa:b7:ab:a3:d0:26:42:
         25:f8:f2:ac:e4:fa:58:bd:bc:60:0d:e4:08:32:4e:96:2f:4e:
         01:54:31:3f:a1:41:b5:91:2d:ee:8c:60:ae:4a:8f:b0:9e:db:
         20:c7:51:91:0b:2f:a9:ed:c7:8f:4e:b0:06:7d:8e:f0:de:51:
         00:1e:2b:fe:23:8b:c9:08:07:29:ce:d3:1e:e3:ab:3e:72:97:
         12:91:1a:7f:11:1e:9e:93:37:b6:24:f9:a0:fb:a0:f7:29:70:
         c4:3c:98:86:68:18:e1:8e:64:3a:84:01:56:d8:62:21:2f:e4:
         20:bb:94:ca:1c:43:d0:3e:8c:c3:63:81:4e:15:39:00:00:a9:
         0b:07:d7:cf:05:75:d7:89:5a:58:76:43:83:39:cc:af:81:d2:
         68:b6:a8:17:15:62:4b:bf:2d:0e:c2:1a:6b:ff:99:b4:30:cf:
         5c:38:12:ef:29:2a:7d:84:c4:90:a5:6b:77:9c:b7:cb:84:01:
         16:e5:3f:a0:77:ca:dc:b5:b5:a6:98:5a:d8:f3:88:7a:09:45:
         49:47:10:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 13 22:59:24 2025 by rpki-client