Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A916EB94/E3CC25D8811E11EC92025551C4F9AE02/50F671067CC411EF8589DF32C4F9AE02.roa
File:                     50F671067CC411EF8589DF32C4F9AE02.roa (raw, json)
Hash identifier:          OIx3I5y70K4lhigPdUK9t3VwKVKzekhTxytvaT3fL4k=
Subject key identifier:   9D:7D:67:61:78:D0:46:13:11:49:3A:95:62:A2:00:0B:70:38:21:17
Certificate issuer:       /CN=A916EB94/serialNumber=C4D4FB0FF027796E9DAA17B75551FD0B77F1982F
Certificate serial:       0420
Authority key identifier: C4:D4:FB:0F:F0:27:79:6E:9D:AA:17:B7:55:51:FD:0B:77:F1:98:2F
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xNT7D_AneW6dqhe3VVH9C3fxmC8.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A916EB94/E3CC25D8811E11EC92025551C4F9AE02/50F671067CC411EF8589DF32C4F9AE02.roa
Signing time:             Tue 01 Jul 2025 01:06:18 +0000
ROA not before:           Tue 01 Jul 2025 01:06:18 +0000
ROA not after:            Mon 31 Aug 2026 00:00:00 +0000
asID:                     139029
IP address blocks:        45.112.73.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A916EB94/E3CC25D8811E11EC92025551C4F9AE02/xNT7D_AneW6dqhe3VVH9C3fxmC8.crl
                          rsync://rpki.apnic.net/member_repository/A916EB94/E3CC25D8811E11EC92025551C4F9AE02/xNT7D_AneW6dqhe3VVH9C3fxmC8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xNT7D_AneW6dqhe3VVH9C3fxmC8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 10 Jul 2025 00:51:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1056 (0x420)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A916EB94, serialNumber=C4D4FB0FF027796E9DAA17B75551FD0B77F1982F
        Validity
            Not Before: Jul  1 01:06:18 2025 GMT
            Not After : Aug 31 00:00:00 2026 GMT
        Subject: CN=6863348a-83aa
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ec:e3:f5:25:1f:01:49:df:5b:a8:01:f4:8e:f7:
                    0f:9a:e4:71:58:6f:55:87:38:28:ee:1d:c2:24:37:
                    2c:7b:0e:82:0f:81:e8:10:f5:bc:25:9f:3b:59:14:
                    ee:6c:ac:78:01:21:57:82:e7:39:b0:9b:4f:2f:08:
                    a7:d1:87:d1:5c:0f:31:af:c4:f2:5c:fb:b7:ab:3d:
                    2c:1b:f6:61:c1:99:23:3b:0a:67:5c:9e:24:bb:2d:
                    71:77:54:e4:35:95:60:9d:c6:78:70:57:4d:fc:dc:
                    07:eb:e4:3c:90:d7:40:6a:7e:b3:7d:4b:5a:dc:74:
                    9f:19:77:25:a8:35:50:8b:85:92:e9:a7:ab:49:65:
                    90:47:f7:c4:14:04:55:9c:03:dd:0e:aa:ac:ab:83:
                    39:0a:1b:1b:ea:6c:44:83:f1:8e:b8:ce:25:4c:47:
                    d6:4d:f5:d0:0c:4f:54:c9:de:e8:fc:88:1e:87:5e:
                    6b:be:c5:20:a0:f0:ad:04:70:59:e4:11:ad:37:c0:
                    cc:63:8e:6c:2a:19:30:b2:06:22:d3:00:58:a7:0f:
                    4a:12:30:ab:84:0f:53:fb:c9:a0:28:c6:82:e7:97:
                    2f:94:81:7c:40:91:0f:f0:2a:09:2b:0c:c9:2b:fa:
                    d0:25:ea:06:2e:fc:bf:ef:e2:17:26:eb:ff:d8:74:
                    5c:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9D:7D:67:61:78:D0:46:13:11:49:3A:95:62:A2:00:0B:70:38:21:17
            X509v3 Authority Key Identifier:
                keyid:C4:D4:FB:0F:F0:27:79:6E:9D:AA:17:B7:55:51:FD:0B:77:F1:98:2F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A916EB94/E3CC25D8811E11EC92025551C4F9AE02/xNT7D_AneW6dqhe3VVH9C3fxmC8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xNT7D_AneW6dqhe3VVH9C3fxmC8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916EB94/E3CC25D8811E11EC92025551C4F9AE02/50F671067CC411EF8589DF32C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.112.73.0/24

    Signature Algorithm: sha256WithRSAEncryption
         59:7e:15:0c:e1:f8:f3:94:f5:c9:ec:de:a6:dd:56:da:f3:b7:
         a6:de:29:77:d1:b1:ba:9f:a7:1d:6b:05:00:e3:e0:3a:c2:cd:
         96:0f:84:d9:b5:1a:ae:52:3c:92:82:52:13:e5:6f:a2:3a:b7:
         c4:13:f9:7b:ee:9f:cb:58:18:60:fc:04:4b:4e:4f:db:f2:91:
         08:61:44:ca:e8:24:46:b8:b8:21:8d:bf:c8:90:18:52:53:e0:
         17:cd:42:ba:83:e2:ef:60:54:d5:0a:0a:e3:fa:ad:a2:fd:c9:
         8d:09:f1:65:54:58:05:df:7c:84:e6:07:03:c9:54:9a:20:d7:
         64:b0:23:48:99:6e:11:48:92:34:54:e6:b1:0d:2e:a6:2b:1e:
         cb:a1:d0:04:0d:4d:f7:e7:61:84:21:b8:b8:35:73:2b:32:02:
         5d:d3:7e:02:7b:d6:9b:c6:e9:b7:7c:cb:db:e2:0e:8c:b1:c5:
         33:b2:40:88:eb:dd:0c:aa:eb:de:c5:f3:c5:65:26:49:4f:a7:
         61:1a:6a:8f:6f:5d:eb:7f:3a:21:6e:19:15:42:b6:34:80:eb:
         da:71:b9:e1:95:8e:7e:38:02:0c:75:6f:ec:a6:3c:62:89:d6:
         b2:f1:b4:07:c9:69:6f:29:b5:e4:86:b0:4a:0e:6d:71:ad:18:
         38:07:40:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 3 10:40:25 2025 by rpki-client