Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A915A0CD/46723F1E89EC11EA81C04F1EC4F9AE02/7C5CEA3E28CF11F0B4341346C4F9AE02.roa
File:                     7C5CEA3E28CF11F0B4341346C4F9AE02.roa (raw, json)
Hash identifier:          vAcCfJjAn78EuvFILS+tqNoRGxNCcoW5NdFqExkzlhU=
Subject key identifier:   DF:83:8C:EA:EC:36:12:6B:3E:83:2B:29:8F:01:80:65:F0:22:74:33
Certificate issuer:       /CN=A915A0CD/serialNumber=38193720821E07D6918E3A79FBE0823C6732E264
Certificate serial:       0D40
Authority key identifier: 38:19:37:20:82:1E:07:D6:91:8E:3A:79:FB:E0:82:3C:67:32:E2:64
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OBk3IIIeB9aRjjp5--CCPGcy4mQ.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A915A0CD/46723F1E89EC11EA81C04F1EC4F9AE02/7C5CEA3E28CF11F0B4341346C4F9AE02.roa
Signing time:             Sun 04 May 2025 10:06:46 +0000
ROA not before:           Sun 04 May 2025 10:06:46 +0000
ROA not after:            Tue 30 Sep 2025 00:00:00 +0000
asID:                     197450
IP address blocks:        14.192.135.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A915A0CD/46723F1E89EC11EA81C04F1EC4F9AE02/OBk3IIIeB9aRjjp5--CCPGcy4mQ.crl
                          rsync://rpki.apnic.net/member_repository/A915A0CD/46723F1E89EC11EA81C04F1EC4F9AE02/OBk3IIIeB9aRjjp5--CCPGcy4mQ.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OBk3IIIeB9aRjjp5--CCPGcy4mQ.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 19 May 2025 19:55:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3392 (0xd40)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A915A0CD, serialNumber=38193720821E07D6918E3A79FBE0823C6732E264
        Validity
            Not Before: May  4 10:06:46 2025 GMT
            Not After : Sep 30 00:00:00 2025 GMT
        Subject: CN=68173c36-e2cf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:4b:3f:9f:d6:30:72:d9:28:17:88:bb:08:b1:
                    af:27:b4:c0:4e:d9:f6:1d:23:6b:6a:9e:9f:33:96:
                    e7:69:27:4e:e7:be:15:1a:a9:23:84:64:3c:3c:0c:
                    fc:96:f5:81:b6:a0:84:77:44:72:ce:d3:27:dc:9a:
                    50:30:aa:9a:3a:fa:89:e3:29:ae:21:f8:f1:7f:66:
                    5b:eb:90:43:8c:30:27:90:9d:dc:18:66:2e:05:83:
                    6a:3f:3d:0e:3e:c5:e0:4c:06:a7:aa:79:d5:2f:ec:
                    d7:0f:5b:a4:58:ff:c3:02:f0:e4:14:d2:66:1b:50:
                    9b:9e:38:b5:c0:fc:cb:c8:50:74:66:80:ee:13:b5:
                    91:50:98:ba:41:2c:2f:98:60:69:c1:70:c8:5c:07:
                    ce:53:e3:30:98:1e:8b:74:3d:24:ae:c4:c0:59:9b:
                    c7:ff:03:90:c2:5f:21:96:c1:c7:6f:13:9d:28:a2:
                    33:76:8d:93:84:2d:9e:78:fa:ae:05:cc:58:97:95:
                    7e:1b:5c:c7:96:21:99:ea:05:c3:ed:e5:ec:f0:bd:
                    87:92:cb:c2:91:35:ae:b3:1f:bb:d2:98:3d:84:8b:
                    cf:a1:7e:80:85:e9:59:40:6f:33:b0:65:d2:db:68:
                    03:00:a1:b0:b4:d6:1c:bf:64:73:f9:63:3b:07:50:
                    65:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DF:83:8C:EA:EC:36:12:6B:3E:83:2B:29:8F:01:80:65:F0:22:74:33
            X509v3 Authority Key Identifier:
                keyid:38:19:37:20:82:1E:07:D6:91:8E:3A:79:FB:E0:82:3C:67:32:E2:64

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A915A0CD/46723F1E89EC11EA81C04F1EC4F9AE02/OBk3IIIeB9aRjjp5--CCPGcy4mQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OBk3IIIeB9aRjjp5--CCPGcy4mQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915A0CD/46723F1E89EC11EA81C04F1EC4F9AE02/7C5CEA3E28CF11F0B4341346C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  14.192.135.0/24

    Signature Algorithm: sha256WithRSAEncryption
         6e:c9:ff:d3:d8:b5:6f:ad:aa:5e:d6:71:65:08:83:ae:37:38:
         4e:b4:08:a6:24:fd:a7:9c:04:ad:7b:3a:39:b3:a0:ba:db:b5:
         ca:26:cc:52:c7:f3:ae:83:b0:c0:39:59:88:40:3f:ba:c7:40:
         dc:50:a9:54:b2:86:ba:92:15:75:02:6d:81:42:4f:90:99:6c:
         5c:fb:c8:d2:33:79:41:56:cd:bf:6a:bf:12:10:91:2b:8c:6b:
         e7:0b:6a:07:7e:82:17:73:5c:90:04:8a:f6:8a:b6:35:84:fe:
         5a:f7:8a:29:de:9d:eb:3a:af:5a:c6:09:a5:80:4d:05:28:d1:
         10:e2:3a:6e:29:78:17:55:b9:b5:5a:18:79:69:8b:20:a2:0a:
         6d:99:ff:fc:b9:8b:14:2a:cf:9f:33:0e:1f:aa:91:ee:ba:33:
         f8:44:5a:b3:4d:2d:da:bc:0a:75:be:f1:5f:cf:08:a1:70:22:
         83:ac:0f:21:19:0d:a6:ef:16:72:64:db:31:fa:06:02:f9:a9:
         fc:ce:04:20:67:cf:f4:5b:7f:0f:c7:92:29:03:17:6f:44:86:
         fb:45:bb:d6:3f:35:45:05:04:5b:00:8a:66:be:52:73:04:c8:
         37:fe:62:6a:39:75:3d:71:e8:e9:05:fe:3d:d5:ae:51:86:25:
         84:76:7f:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 14 06:47:30 2025 by rpki-client