Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91955C8/9CD3E8F6FF5811E2BB4B2E3F5911EA32/13065E72E09911EAB8D3B833C4F9AE02.roa
File:                     13065E72E09911EAB8D3B833C4F9AE02.roa (raw, json)
Hash identifier:          7Dey0JGvmlqmWqhli9F4C8bTHZAZtymVOQxhxzYVfX4=
Subject key identifier:   13:00:C0:A4:51:D2:03:C1:48:86:16:C8:13:86:15:24:82:E1:E0:C9
Certificate issuer:       /CN=A91955C8/serialNumber=C6673D3648F43F4674F5F5EBFCBFA31BB964F64B
Certificate serial:       309D
Authority key identifier: C6:67:3D:36:48:F4:3F:46:74:F5:F5:EB:FC:BF:A3:1B:B9:64:F6:4B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xmc9Nkj0P0Z09fXr_L-jG7lk9ks.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91955C8/9CD3E8F6FF5811E2BB4B2E3F5911EA32/13065E72E09911EAB8D3B833C4F9AE02.roa
Signing time:             Wed 30 Apr 2025 15:52:54 +0000
ROA not before:           Wed 30 Apr 2025 15:52:54 +0000
ROA not after:            Wed 01 Jul 2026 00:00:00 +0000
asID:                     63199
IP address blocks:        180.87.165.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91955C8/9CD3E8F6FF5811E2BB4B2E3F5911EA32/xmc9Nkj0P0Z09fXr_L-jG7lk9ks.crl
                          rsync://rpki.apnic.net/member_repository/A91955C8/9CD3E8F6FF5811E2BB4B2E3F5911EA32/xmc9Nkj0P0Z09fXr_L-jG7lk9ks.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xmc9Nkj0P0Z09fXr_L-jG7lk9ks.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 23 May 2025 15:39:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 12445 (0x309d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91955C8, serialNumber=C6673D3648F43F4674F5F5EBFCBFA31BB964F64B
        Validity
            Not Before: Apr 30 15:52:54 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=68124756-67b7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:c8:4d:d1:83:f4:27:55:63:7d:e3:f3:1b:cc:
                    04:c3:40:f3:9a:c2:a5:6e:c3:83:7e:a5:c2:d8:36:
                    9a:5f:9c:02:05:2a:51:45:03:a6:40:5c:c8:39:74:
                    5d:90:f8:a1:7d:74:7c:50:b8:7f:21:01:2d:15:99:
                    7e:17:d9:dc:e8:71:ca:59:5c:62:05:e0:83:2f:22:
                    e2:24:9c:ed:b0:5f:f7:50:09:05:8e:b6:03:a5:9f:
                    93:c7:76:e8:f9:b5:9d:72:2e:fa:7a:8f:05:bf:ee:
                    c9:af:ad:ae:c7:ab:5b:5d:97:16:5e:1a:37:52:01:
                    7f:30:a7:f2:52:68:c4:77:65:c4:ae:b2:1a:8e:48:
                    d5:25:33:a3:c9:e4:18:da:5f:d1:a8:06:6f:73:02:
                    fc:6b:aa:3b:9e:b3:46:86:26:13:c2:68:91:a7:d5:
                    13:29:44:40:09:70:d0:b6:d2:4a:04:85:cb:4b:28:
                    3a:62:c1:c7:56:f4:3e:11:33:f6:1a:92:d2:33:f4:
                    e2:ef:c0:be:7a:98:fc:2a:1d:fa:4b:01:82:20:89:
                    41:2d:72:0d:41:0a:0b:73:b6:e4:ac:04:ce:4d:e3:
                    3e:b6:dc:a0:db:7a:5b:4c:5f:e2:b9:49:dd:10:1a:
                    76:e7:06:82:ba:66:8c:83:48:d1:5c:ea:f7:39:0c:
                    fe:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                13:00:C0:A4:51:D2:03:C1:48:86:16:C8:13:86:15:24:82:E1:E0:C9
            X509v3 Authority Key Identifier:
                keyid:C6:67:3D:36:48:F4:3F:46:74:F5:F5:EB:FC:BF:A3:1B:B9:64:F6:4B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91955C8/9CD3E8F6FF5811E2BB4B2E3F5911EA32/xmc9Nkj0P0Z09fXr_L-jG7lk9ks.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xmc9Nkj0P0Z09fXr_L-jG7lk9ks.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91955C8/9CD3E8F6FF5811E2BB4B2E3F5911EA32/13065E72E09911EAB8D3B833C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  180.87.165.0/24

    Signature Algorithm: sha256WithRSAEncryption
         37:d2:3f:2c:05:39:90:4e:97:9d:84:31:63:3c:c1:64:0e:bb:
         9f:1b:fb:83:69:68:b6:f3:32:e8:08:35:72:b1:42:0d:f9:69:
         dd:30:47:b4:39:fd:e0:c4:b8:50:bc:4f:ab:94:5e:e1:e6:e8:
         0d:19:e3:7e:75:35:17:cb:d1:3c:0c:dc:ad:27:7e:c7:30:12:
         f6:9c:dd:09:d6:95:dc:34:73:39:b3:c9:23:e2:f5:76:86:52:
         7f:d2:ca:ee:ca:54:95:93:d5:d5:d6:e9:15:7e:c9:66:bc:a4:
         cf:c1:d4:4f:d4:fd:46:21:28:4b:a3:56:bc:09:dd:9c:bc:d0:
         b0:2c:3f:16:5c:0b:54:b8:76:55:15:f0:67:99:65:9d:c1:59:
         bd:6c:e6:f7:e6:d5:86:71:4b:ba:bd:9a:89:7d:10:f0:b8:89:
         fc:de:ea:46:3c:db:73:6e:61:e9:b7:71:74:ce:4f:e9:3a:96:
         f1:eb:e5:4f:4a:0a:7a:a5:4b:09:9d:65:a9:20:dd:6f:6d:35:
         dc:49:bb:55:4d:76:4b:07:57:3e:1b:e1:b9:e1:37:aa:bc:b3:
         60:8a:a6:91:08:f4:23:1b:f0:1f:a5:09:38:64:d5:7c:3d:f1:
         3b:ae:45:4e:d3:ff:bf:0b:a1:a8:01:fd:f0:d5:fa:01:0f:2c:
         8b:af:ee:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 16 23:54:49 2025 by rpki-client