Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9146514/B773A164EBC011EE9BB3F43FC4F9AE02/8C73DD2414F711F088D0424FC4F9AE02.roa
File:                     8C73DD2414F711F088D0424FC4F9AE02.roa (raw, json)
Hash identifier:          ioOqYPYgjl0hBINpNmdRJRFRhysvj1VoKagrJNHAM6c=
Subject key identifier:   F4:EE:43:37:BF:9B:B2:DF:A9:84:D9:16:D0:F8:D0:C6:8A:30:00:0A
Certificate issuer:       /CN=A9146514/serialNumber=4A4D7F58EFBD48B8636DB6A0BF7C2DE50F043621
Certificate serial:       D7
Authority key identifier: 4A:4D:7F:58:EF:BD:48:B8:63:6D:B6:A0:BF:7C:2D:E5:0F:04:36:21
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Sk1_WO-9SLhjbbagv3wt5Q8ENiE.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9146514/B773A164EBC011EE9BB3F43FC4F9AE02/8C73DD2414F711F088D0424FC4F9AE02.roa
Signing time:             Sat 03 May 2025 05:12:00 +0000
ROA not before:           Sat 03 May 2025 05:12:00 +0000
ROA not after:            Thu 30 Jul 2026 00:00:00 +0000
asID:                     23838
IP address blocks:        115.126.128.0/24 maxlen: 24
                          202.162.177.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9146514/B773A164EBC011EE9BB3F43FC4F9AE02/Sk1_WO-9SLhjbbagv3wt5Q8ENiE.crl
                          rsync://rpki.apnic.net/member_repository/A9146514/B773A164EBC011EE9BB3F43FC4F9AE02/Sk1_WO-9SLhjbbagv3wt5Q8ENiE.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Sk1_WO-9SLhjbbagv3wt5Q8ENiE.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 18 May 2025 04:27:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 215 (0xd7)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9146514, serialNumber=4A4D7F58EFBD48B8636DB6A0BF7C2DE50F043621
        Validity
            Not Before: May  3 05:12:00 2025 GMT
            Not After : Jul 30 00:00:00 2026 GMT
        Subject: CN=6815a59f-cc49
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:e3:4f:f0:21:1c:36:38:b1:73:cd:c6:97:9a:
                    ec:5d:56:09:f1:3a:2d:2b:f2:99:0f:47:2a:9e:fb:
                    94:be:c4:21:b0:90:5a:e9:8c:11:a5:2c:38:71:a5:
                    4c:a2:d1:12:ae:95:72:dd:ab:28:b7:60:ec:17:db:
                    19:32:b7:72:b6:da:da:cd:1b:5a:19:16:2c:24:45:
                    cb:df:e8:61:57:f3:d1:1d:38:03:b7:d2:bc:ba:39:
                    85:34:23:9a:74:89:f5:e8:a4:39:68:10:07:cc:ec:
                    d0:bd:cd:f5:e2:90:4c:b0:97:bb:b6:76:d2:33:5d:
                    5b:8d:6e:b5:ff:b1:f2:21:86:94:c3:1c:a6:8d:97:
                    49:ab:e8:1f:a0:fe:57:16:1d:6c:d3:98:77:92:1e:
                    ca:5c:a3:c8:62:ec:25:9e:e8:36:e3:41:ab:2a:0c:
                    74:71:f2:98:d2:2c:1a:18:e8:a1:a2:d7:db:70:27:
                    b5:9b:f3:93:af:af:6c:bf:bd:6a:38:f3:fa:0d:12:
                    3e:d0:61:91:d3:2d:dd:08:ab:36:bb:04:80:e1:70:
                    58:6d:51:1d:b0:7d:50:0b:25:7c:12:dc:81:b2:c6:
                    f6:7e:30:1e:6d:4a:59:f4:d2:c2:81:66:cd:42:66:
                    fc:48:41:a0:59:0e:61:61:3b:17:d5:02:b6:c7:62:
                    bd:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F4:EE:43:37:BF:9B:B2:DF:A9:84:D9:16:D0:F8:D0:C6:8A:30:00:0A
            X509v3 Authority Key Identifier:
                keyid:4A:4D:7F:58:EF:BD:48:B8:63:6D:B6:A0:BF:7C:2D:E5:0F:04:36:21

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9146514/B773A164EBC011EE9BB3F43FC4F9AE02/Sk1_WO-9SLhjbbagv3wt5Q8ENiE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Sk1_WO-9SLhjbbagv3wt5Q8ENiE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9146514/B773A164EBC011EE9BB3F43FC4F9AE02/8C73DD2414F711F088D0424FC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  115.126.128.0/24
                  202.162.177.0/24

    Signature Algorithm: sha256WithRSAEncryption
         9a:29:77:d6:2e:6a:93:c9:62:6a:e9:11:13:0d:a4:0e:80:88:
         44:e1:34:cf:39:31:b1:fb:70:1c:82:36:0d:be:6a:33:38:f4:
         8a:d9:65:6d:bb:1e:0d:ed:bc:6f:e3:c0:80:aa:62:20:c7:43:
         39:10:c8:48:05:b8:dc:82:e7:2e:f0:43:af:69:94:36:1e:62:
         6e:f7:18:ca:d3:58:f9:c1:0a:d4:65:3e:b9:ba:e2:34:d4:9f:
         ca:1d:de:9c:83:e1:45:e8:76:b3:eb:c1:be:4c:6d:fb:bc:58:
         65:1a:6a:66:6d:8f:a0:c9:fe:0a:9e:fd:2c:77:96:eb:e0:7a:
         45:37:7b:3e:2b:4f:de:9b:e3:eb:04:b4:60:aa:af:09:6e:f1:
         04:91:20:ef:ac:e3:c7:02:49:59:21:db:fc:83:0c:0f:00:fb:
         00:95:b8:63:0d:94:0f:de:b3:3d:ab:8f:2b:ca:f1:73:fc:d5:
         ae:6a:47:13:fe:7c:e7:b6:93:70:b0:35:0d:ed:eb:ec:e0:d6:
         a1:ff:79:95:31:68:22:a9:38:61:88:5a:6d:4f:54:fe:55:3a:
         11:c7:6e:c7:df:6c:58:bc:fe:51:b2:da:c2:5e:7d:ae:32:9a:
         55:3f:5a:2c:12:10:a1:75:14:95:ed:dc:a1:22:ae:9c:76:2f:
         73:4c:ee:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 12 16:10:05 2025 by rpki-client