Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A919D3C2/72D7CFD623F811E79589D752C4F9AE02/EE4AB71024A211F085E5B916C4F9AE02.roa
File:                     EE4AB71024A211F085E5B916C4F9AE02.roa (raw, json)
Hash identifier:          J7B5RwF0Uei6GB3vuCg/6lhHS2a4ATOJhVhMlxzGnKM=
Subject key identifier:   AE:8C:EC:91:19:12:B1:EB:2F:D7:52:AA:1B:F2:6F:94:8C:A7:FC:1B
Certificate issuer:       /CN=A919D3C2/serialNumber=E7061DB222838DE68A93CE21EF291B05542D8726
Certificate serial:       1AEB
Authority key identifier: E7:06:1D:B2:22:83:8D:E6:8A:93:CE:21:EF:29:1B:05:54:2D:87:26
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5wYdsiKDjeaKk84h7ykbBVQthyY.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A919D3C2/72D7CFD623F811E79589D752C4F9AE02/EE4AB71024A211F085E5B916C4F9AE02.roa
Signing time:             Tue 29 Apr 2025 02:37:45 +0000
ROA not before:           Tue 29 Apr 2025 02:37:45 +0000
ROA not after:            Mon 02 Mar 2026 00:00:00 +0000
asID:                     132221
IP address blocks:        119.15.110.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A919D3C2/72D7CFD623F811E79589D752C4F9AE02/5wYdsiKDjeaKk84h7ykbBVQthyY.crl
                          rsync://rpki.apnic.net/member_repository/A919D3C2/72D7CFD623F811E79589D752C4F9AE02/5wYdsiKDjeaKk84h7ykbBVQthyY.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5wYdsiKDjeaKk84h7ykbBVQthyY.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 17 May 2025 16:14:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 6891 (0x1aeb)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A919D3C2, serialNumber=E7061DB222838DE68A93CE21EF291B05542D8726
        Validity
            Not Before: Apr 29 02:37:45 2025 GMT
            Not After : Mar  2 00:00:00 2026 GMT
        Subject: CN=68103b79-cd8f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:cf:0d:0f:6c:96:4f:1e:fb:f0:64:b7:83:2d:
                    c4:0b:d9:ba:dc:1b:67:3c:a6:b8:1c:1e:09:2f:48:
                    c8:82:bb:95:d8:6b:49:6a:bc:fd:ca:e0:aa:d6:f2:
                    0d:74:9c:fd:21:57:dd:45:cb:38:14:ef:39:7c:ad:
                    6b:c9:cb:c4:1f:3b:25:5c:ef:1c:a3:a1:df:c7:b3:
                    58:dc:ce:59:35:39:6f:65:15:df:fd:06:45:14:7d:
                    09:8b:a5:41:50:21:56:fd:6c:47:6f:6e:44:cd:21:
                    51:85:18:9b:5f:41:5a:42:f6:ca:bd:14:55:27:a2:
                    a1:66:05:3b:71:21:85:b8:fb:c9:58:a4:2c:aa:81:
                    fb:98:67:2b:c8:aa:3f:99:f1:8c:7c:f0:1c:ad:93:
                    7e:c9:e8:49:3f:03:cc:ac:70:cc:a3:82:b2:da:bc:
                    23:de:18:90:e6:77:15:db:b6:95:94:17:d9:26:a8:
                    0c:60:64:f7:c0:ea:fd:48:c1:32:95:a6:43:26:be:
                    47:09:09:fb:0c:7b:e5:13:d6:12:b8:c2:06:f4:ff:
                    05:53:ac:d4:d7:7c:b5:25:7d:2e:c1:7a:f9:8b:ce:
                    5a:bf:44:e5:a4:99:6b:5a:b3:69:14:bf:20:f7:0d:
                    6f:e0:d6:24:7f:98:84:a2:47:37:d1:28:84:86:45:
                    31:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AE:8C:EC:91:19:12:B1:EB:2F:D7:52:AA:1B:F2:6F:94:8C:A7:FC:1B
            X509v3 Authority Key Identifier:
                keyid:E7:06:1D:B2:22:83:8D:E6:8A:93:CE:21:EF:29:1B:05:54:2D:87:26

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A919D3C2/72D7CFD623F811E79589D752C4F9AE02/5wYdsiKDjeaKk84h7ykbBVQthyY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5wYdsiKDjeaKk84h7ykbBVQthyY.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919D3C2/72D7CFD623F811E79589D752C4F9AE02/EE4AB71024A211F085E5B916C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  119.15.110.0/24

    Signature Algorithm: sha256WithRSAEncryption
         7f:12:46:fc:d6:8e:22:ee:a7:03:57:0d:c7:42:b7:05:f1:31:
         77:fe:c8:8b:58:1f:ff:81:91:19:07:12:6c:de:8f:69:da:e4:
         7e:c3:90:49:4f:ec:53:71:98:85:9f:0f:e2:8e:9f:13:6d:7f:
         64:ef:4e:a2:83:be:13:a6:c2:1d:24:f2:d1:10:97:7f:c3:e3:
         91:06:23:73:51:1c:d8:19:ac:e7:56:aa:62:5d:33:67:7b:59:
         ef:aa:45:16:b8:5f:24:20:5a:04:74:95:49:64:d4:7e:73:64:
         26:f8:23:8b:28:94:ff:5b:35:8b:5c:89:3c:8c:c0:75:95:ef:
         3d:91:43:81:9a:35:41:d4:73:81:0d:73:ad:ac:6a:1e:91:11:
         77:2a:2f:ac:f5:6e:fe:10:35:11:e4:21:3c:c2:7e:08:5e:cd:
         99:11:2a:6f:62:c1:d1:c5:3a:92:77:30:36:d4:6e:aa:b9:b1:
         4c:c0:b1:80:98:02:37:76:ef:fe:da:8c:59:cf:0f:ab:60:b0:
         c5:eb:0c:f8:9a:f8:28:97:64:b3:60:24:7c:d9:71:33:39:97:
         32:c3:ed:76:87:67:8e:62:32:92:dd:98:19:b6:1e:00:4d:38:
         9f:56:45:cd:da:9f:d5:59:63:02:00:ed:70:91:3a:b3:0a:5b:
         3f:b3:52:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 12 02:09:49 2025 by rpki-client