Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9178B2B/BFDD222E3C4411EAAEE6F70AC4F9AE02/1F676C22068711EDA1C2070DC4F9AE02.roa
File:                     1F676C22068711EDA1C2070DC4F9AE02.roa (raw, json)
Hash identifier:          /7INLjkCJxuGRBamYiwMgMuR9Yx5BJwn5CHWQ9lp1M4=
Subject key identifier:   6B:04:D3:68:9B:88:38:C0:11:55:55:3A:2E:72:ED:E7:45:D8:6E:06
Certificate issuer:       /CN=A9178B2B/serialNumber=202079D6C9FE07BF186221D1A99827CBF6B122AE
Certificate serial:       0B47
Authority key identifier: 20:20:79:D6:C9:FE:07:BF:18:62:21:D1:A9:98:27:CB:F6:B1:22:AE
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ICB51sn-B78YYiHRqZgny_axIq4.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9178B2B/BFDD222E3C4411EAAEE6F70AC4F9AE02/1F676C22068711EDA1C2070DC4F9AE02.roa
Signing time:             Thu 08 May 2025 19:54:38 +0000
ROA not before:           Thu 08 May 2025 19:54:38 +0000
ROA not after:            Thu 30 Jul 2026 00:00:00 +0000
asID:                     9009
IP address blocks:        45.115.26.0/24 maxlen: 24
                          103.55.11.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9178B2B/BFDD222E3C4411EAAEE6F70AC4F9AE02/ICB51sn-B78YYiHRqZgny_axIq4.crl
                          rsync://rpki.apnic.net/member_repository/A9178B2B/BFDD222E3C4411EAAEE6F70AC4F9AE02/ICB51sn-B78YYiHRqZgny_axIq4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ICB51sn-B78YYiHRqZgny_axIq4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 17 May 2025 18:58:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2887 (0xb47)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9178B2B, serialNumber=202079D6C9FE07BF186221D1A99827CBF6B122AE
        Validity
            Not Before: May  8 19:54:38 2025 GMT
            Not After : Jul 30 00:00:00 2026 GMT
        Subject: CN=681d0bfe-1083
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ed:21:46:c9:4d:d9:d5:fa:d2:86:36:55:30:6a:
                    54:8e:d2:4d:b9:cc:20:bf:63:a8:83:19:28:ec:8e:
                    02:47:5d:84:97:09:de:f8:9b:94:e7:84:94:16:37:
                    18:d2:97:7d:dd:a5:a1:c0:ce:fe:b8:bf:df:55:29:
                    8a:39:c6:78:98:ba:fd:3d:f5:08:36:cb:5e:d5:80:
                    0a:fd:3b:25:8f:3c:4a:9e:24:8e:1e:07:3d:11:2c:
                    aa:4d:99:fa:cf:3c:85:2b:3a:26:65:1a:18:66:29:
                    5a:5a:7c:70:e0:f6:0e:7e:78:7a:34:f6:46:e4:22:
                    c3:99:f5:7e:e1:43:21:02:4f:2a:3a:f2:d4:f2:fb:
                    b6:88:1e:be:02:f0:d9:46:f5:97:ed:65:5c:c4:c9:
                    31:99:61:f8:73:34:98:3b:81:ee:ea:ca:fb:b0:a9:
                    24:5d:8f:63:8d:59:dd:4d:4b:fa:a6:bd:2b:d3:2e:
                    52:5e:1b:c6:80:a2:18:8c:e4:8b:ba:fe:2a:ce:90:
                    a5:50:cf:c3:18:83:91:6d:d0:55:c1:82:06:bb:31:
                    6d:44:2f:9a:f0:3a:c9:c6:bf:0c:06:ff:a5:3f:1b:
                    92:1f:19:c9:50:85:f5:40:62:0f:6d:f6:59:59:77:
                    54:d1:fb:71:05:fb:e9:61:b7:97:13:56:f4:66:42:
                    32:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6B:04:D3:68:9B:88:38:C0:11:55:55:3A:2E:72:ED:E7:45:D8:6E:06
            X509v3 Authority Key Identifier:
                keyid:20:20:79:D6:C9:FE:07:BF:18:62:21:D1:A9:98:27:CB:F6:B1:22:AE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9178B2B/BFDD222E3C4411EAAEE6F70AC4F9AE02/ICB51sn-B78YYiHRqZgny_axIq4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ICB51sn-B78YYiHRqZgny_axIq4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9178B2B/BFDD222E3C4411EAAEE6F70AC4F9AE02/1F676C22068711EDA1C2070DC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.115.26.0/24
                  103.55.11.0/24

    Signature Algorithm: sha256WithRSAEncryption
         a4:3c:aa:7d:d1:0d:17:d4:63:fa:bb:6a:46:c5:9c:07:41:29:
         92:95:1f:ff:7a:bf:96:60:88:e1:ff:04:8e:ac:24:fc:c7:dc:
         2c:46:1e:6b:cb:17:17:30:e8:22:7c:4f:24:0a:f5:18:00:4f:
         c3:a5:2a:4c:3d:7d:7c:be:4a:67:96:11:17:44:98:f1:3f:ac:
         14:93:ec:01:39:45:ea:4f:46:ab:89:f1:dd:ea:cc:b7:c5:e5:
         15:99:50:0b:2c:8e:3a:5a:38:45:95:d8:3b:e4:a5:97:52:64:
         bf:4c:08:86:60:bb:e4:f7:0b:0e:0d:19:6f:7c:1d:8e:e2:96:
         12:0f:0f:12:46:48:dd:26:b8:33:51:f5:84:c0:f1:f4:be:9e:
         bc:28:cb:2e:b8:da:5b:43:75:af:9a:76:fe:71:32:df:e5:bc:
         fc:58:6e:06:86:2b:eb:ec:15:95:9c:61:95:86:06:93:a2:cb:
         47:21:74:bc:01:85:fc:db:ff:c8:1c:ab:e8:66:cf:69:d7:df:
         b9:06:47:38:b2:b2:13:29:6b:78:6c:4c:b0:c0:01:d3:e1:3e:
         00:6d:f9:40:e9:ca:c2:fb:de:7b:fa:f1:00:71:d5:78:a3:6d:
         2f:82:70:66:47:c0:50:62:28:6d:9f:26:57:08:a5:c3:72:24:
         5d:a7:35:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 17:03:55 2025 by rpki-client