Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91EE96E/23D2F16EEC2111EFA355605FC4F9AE02/7F639A182CB011F08B722116C4F9AE02.roa
File:                     7F639A182CB011F08B722116C4F9AE02.roa (raw, json)
Hash identifier:          spTkb5xEKtj6kOvbsLtYV5brzWGqrgveZXxT4s0PHa4=
Subject key identifier:   16:64:3B:65:5B:C0:2C:D4:EB:A2:BA:8A:14:DC:BF:DA:15:3A:04:1F
Certificate issuer:       /CN=A91EE96E/serialNumber=2429A3EE5088F3D45372A8E3B36834C75EAE6D29
Certificate serial:       31
Authority key identifier: 24:29:A3:EE:50:88:F3:D4:53:72:A8:E3:B3:68:34:C7:5E:AE:6D:29
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JCmj7lCI89RTcqjjs2g0x16ubSk.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91EE96E/23D2F16EEC2111EFA355605FC4F9AE02/7F639A182CB011F08B722116C4F9AE02.roa
Signing time:             Fri 09 May 2025 08:35:01 +0000
ROA not before:           Fri 09 May 2025 08:35:01 +0000
ROA not after:            Tue 30 Sep 2025 00:00:00 +0000
asID:                     36352
IP address blocks:        45.120.4.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91EE96E/23D2F16EEC2111EFA355605FC4F9AE02/JCmj7lCI89RTcqjjs2g0x16ubSk.crl
                          rsync://rpki.apnic.net/member_repository/A91EE96E/23D2F16EEC2111EFA355605FC4F9AE02/JCmj7lCI89RTcqjjs2g0x16ubSk.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JCmj7lCI89RTcqjjs2g0x16ubSk.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 20 May 2025 06:54:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 49 (0x31)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91EE96E, serialNumber=2429A3EE5088F3D45372A8E3B36834C75EAE6D29
        Validity
            Not Before: May  9 08:35:01 2025 GMT
            Not After : Sep 30 00:00:00 2025 GMT
        Subject: CN=681dbe35-ffd5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:17:52:01:60:85:57:75:8d:50:22:d6:19:be:
                    1a:39:08:81:7c:2e:15:ad:67:cd:24:70:8d:41:ff:
                    68:57:4b:dc:5f:20:21:33:74:f1:db:9e:1b:3e:a2:
                    37:32:88:5a:1e:be:00:23:49:a2:02:04:26:0e:fe:
                    76:f8:7f:ce:7b:30:01:4c:75:14:40:e5:22:c4:c0:
                    de:85:c5:70:40:ab:fa:1f:e2:b6:2c:eb:d9:ad:cb:
                    ca:39:c9:8a:8f:80:26:2d:24:e9:8e:38:40:c8:cc:
                    45:5f:8b:a7:f9:9b:3b:ec:51:c4:e6:4c:f8:e3:53:
                    a3:4c:6e:d8:e3:7f:27:dd:15:bd:4c:bd:71:c8:b9:
                    ca:f6:54:79:20:d3:13:12:52:ff:dc:15:39:e8:55:
                    e3:2b:9a:59:94:56:88:45:36:cb:d3:20:c2:ce:c9:
                    00:40:74:fa:c4:99:85:c8:c3:f6:8e:12:8b:5a:17:
                    67:e2:df:12:a5:c6:ba:81:93:3d:2a:1b:59:a2:c5:
                    dc:b1:33:d8:b7:c2:0c:15:9c:2b:c6:af:85:47:c1:
                    ba:ab:57:45:a4:d1:17:b2:3e:c3:ec:68:4c:01:74:
                    df:8b:17:1b:f3:5a:2e:0c:a5:e5:89:83:43:4c:e0:
                    39:5e:83:69:5f:ec:20:95:c8:40:db:80:56:e9:5d:
                    d7:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                16:64:3B:65:5B:C0:2C:D4:EB:A2:BA:8A:14:DC:BF:DA:15:3A:04:1F
            X509v3 Authority Key Identifier:
                keyid:24:29:A3:EE:50:88:F3:D4:53:72:A8:E3:B3:68:34:C7:5E:AE:6D:29

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91EE96E/23D2F16EEC2111EFA355605FC4F9AE02/JCmj7lCI89RTcqjjs2g0x16ubSk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JCmj7lCI89RTcqjjs2g0x16ubSk.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EE96E/23D2F16EEC2111EFA355605FC4F9AE02/7F639A182CB011F08B722116C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.120.4.0/22

    Signature Algorithm: sha256WithRSAEncryption
         31:0f:0f:c9:70:08:af:44:61:92:c7:58:10:90:0c:1c:b4:3f:
         83:bd:65:59:be:a6:47:bb:e3:4e:aa:8b:f2:64:93:d9:1d:43:
         d5:dc:40:f3:30:f4:c1:98:39:7b:4c:58:c4:9d:1f:98:86:a8:
         80:d2:ae:4a:f5:0d:e5:7f:90:24:df:d7:93:74:14:71:20:78:
         81:8b:ae:83:1b:8c:cb:1b:81:2a:b9:a4:09:3a:f4:b2:45:6e:
         c6:5d:a6:42:e1:3f:a4:df:48:75:18:9d:74:b6:69:fc:68:5c:
         02:ff:16:81:f1:8b:5d:06:73:fb:f8:98:15:6b:72:6a:4e:8b:
         12:ad:e2:29:fa:7b:f4:e9:f0:7d:d1:73:c7:82:30:7f:2f:1d:
         18:4c:90:24:87:e5:5d:63:1a:6e:dd:16:55:27:8d:70:bd:1f:
         89:9b:d6:51:05:bf:0e:f8:0b:20:b1:c3:61:6d:88:f0:84:df:
         50:c0:78:1e:d5:4d:87:25:04:e9:c0:ef:0a:0f:a0:de:b7:1b:
         3a:ad:f1:ff:38:41:80:2a:3a:24:a5:79:cd:d5:93:04:38:8b:
         25:35:73:94:bf:28:77:a6:23:62:91:31:f6:5f:82:ab:45:e8:
         dd:30:3e:a0:f3:05:6f:41:c0:16:75:03:17:4b:9e:0c:ca:59:
         eb:e2:f2:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 14 04:37:18 2025 by rpki-client