Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9110718/9283EDEE0E9411EB9669E133C4F9AE02/830314BE0E9711EB9A6C2B3CC4F9AE02.roa
File:                     830314BE0E9711EB9A6C2B3CC4F9AE02.roa (raw, json)
Hash identifier:          eUQRjtj0tF+4ReuUVl4yzwgyQ7i/OO1b+JP4gilLkCk=
Subject key identifier:   ED:FC:71:5C:C0:43:6D:B6:01:51:0D:DF:7F:EE:6E:15:46:9F:86:8D
Certificate issuer:       /CN=A9110718/serialNumber=76174625E81632D38DF62A83B57B03BA2887E6F5
Certificate serial:       07BB
Authority key identifier: 76:17:46:25:E8:16:32:D3:8D:F6:2A:83:B5:7B:03:BA:28:87:E6:F5
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dhdGJegWMtON9iqDtXsDuiiH5vU.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9110718/9283EDEE0E9411EB9669E133C4F9AE02/830314BE0E9711EB9A6C2B3CC4F9AE02.roa
Signing time:             Wed 16 Apr 2025 21:31:46 +0000
ROA not before:           Wed 16 Apr 2025 21:31:46 +0000
ROA not after:            Mon 31 Aug 2026 00:00:00 +0000
asID:                     132796
IP address blocks:        202.92.156.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9110718/9283EDEE0E9411EB9669E133C4F9AE02/dhdGJegWMtON9iqDtXsDuiiH5vU.crl
                          rsync://rpki.apnic.net/member_repository/A9110718/9283EDEE0E9411EB9669E133C4F9AE02/dhdGJegWMtON9iqDtXsDuiiH5vU.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dhdGJegWMtON9iqDtXsDuiiH5vU.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 27 Apr 2025 21:07:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1979 (0x7bb)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9110718, serialNumber=76174625E81632D38DF62A83B57B03BA2887E6F5
        Validity
            Not Before: Apr 16 21:31:46 2025 GMT
            Not After : Aug 31 00:00:00 2026 GMT
        Subject: CN=680021c2-2290
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:56:28:d8:05:e7:ff:36:f1:b5:05:0b:73:07:
                    f6:08:4a:41:44:de:81:a0:18:33:e3:8f:91:e8:7a:
                    52:0c:1f:30:13:2c:49:32:7a:a1:5e:0c:b4:07:91:
                    97:7a:fa:f9:38:b8:04:99:96:df:cf:55:26:72:ca:
                    dc:de:ac:a1:2d:c4:15:92:f1:57:54:a1:73:b3:79:
                    ce:13:f8:8a:09:e8:9e:93:af:ca:25:13:09:6d:21:
                    d9:fe:e6:21:b6:c5:dd:ef:66:4a:44:a2:82:63:a8:
                    c6:6e:b1:a4:2c:43:f1:ed:3f:e9:6e:25:9e:e2:07:
                    0c:67:6a:21:bf:dc:2c:73:fc:ab:61:0f:84:20:16:
                    be:64:eb:e0:47:1d:35:89:dd:fb:a9:e1:20:1a:a3:
                    9a:ac:7f:8f:04:67:91:0b:57:f7:73:16:ed:2d:64:
                    1f:fa:b3:46:6d:dc:9b:36:66:f8:e7:d3:a2:61:03:
                    64:c9:5f:24:13:a0:15:1f:f6:ac:e9:34:c9:e2:6d:
                    47:29:6c:be:36:6f:af:cd:9d:ca:52:0b:3c:26:ae:
                    52:ed:c8:af:01:df:1b:2a:09:8a:f8:0d:75:d3:8f:
                    a2:ad:53:8d:1c:5c:36:51:80:c3:bf:d0:18:ec:28:
                    22:bc:79:85:2a:c7:75:e6:c3:4e:e8:83:9f:74:76:
                    00:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                ED:FC:71:5C:C0:43:6D:B6:01:51:0D:DF:7F:EE:6E:15:46:9F:86:8D
            X509v3 Authority Key Identifier:
                keyid:76:17:46:25:E8:16:32:D3:8D:F6:2A:83:B5:7B:03:BA:28:87:E6:F5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9110718/9283EDEE0E9411EB9669E133C4F9AE02/dhdGJegWMtON9iqDtXsDuiiH5vU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dhdGJegWMtON9iqDtXsDuiiH5vU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9110718/9283EDEE0E9411EB9669E133C4F9AE02/830314BE0E9711EB9A6C2B3CC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  202.92.156.0/24

    Signature Algorithm: sha256WithRSAEncryption
         0b:36:c2:fa:8a:87:df:d2:6d:43:2b:90:31:fe:32:84:d1:5b:
         e7:f3:fe:49:04:90:1a:d3:39:01:ff:b7:5c:5f:88:52:bc:b3:
         24:75:7b:ed:41:5f:bb:1a:d5:c7:00:ae:18:a8:40:49:c7:94:
         40:97:ba:63:23:8a:69:9d:6f:db:d2:2b:1d:5a:5b:a4:a8:67:
         cd:f1:a8:5f:23:d3:76:0b:6d:45:6a:ec:47:df:9b:cc:c6:22:
         0d:a9:25:53:bc:e6:7d:56:29:9d:86:3d:0c:97:53:6a:fb:97:
         77:f4:06:78:17:29:b5:b5:86:c7:51:75:37:17:47:0e:8b:1d:
         a5:c0:9f:8f:c2:74:2e:03:99:e2:f1:d4:16:0c:4c:d5:5d:7f:
         8d:91:05:e4:6f:d3:71:1b:00:50:21:f3:3e:c7:62:03:2e:38:
         16:cc:b2:76:88:49:4e:14:95:28:1b:e7:07:a0:0e:64:f3:e4:
         04:fe:87:65:11:52:7d:1d:d1:19:6b:43:86:3d:78:71:f1:d0:
         73:ec:b5:fd:a8:c9:36:7b:86:a0:da:73:ad:31:94:5f:18:8e:
         f7:c2:00:a2:72:f7:17:ea:3e:51:fa:8b:e0:82:d7:8d:45:fd:
         e3:8c:65:46:21:ae:a9:fb:8b:b6:28:bb:b9:88:06:28:04:7b:
         ac:87:7d:20
-----BEGIN CERTIFICATE-----
MIIFcTCCBFmgAwIBAgICB7swDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MTA3MTgxMTAvBgNVBAUTKDc2MTc0NjI1RTgxNjMyRDM4REY2MkE4M0I1N0IwM0JB
Mjg4N0U2RjUwHhcNMjUwNDE2MjEzMTQ2WhcNMjYwODMxMDAwMDAwWjAYMRYwFAYD
VQQDEw02ODAwMjFjMi0yMjkwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA0VYo2AXn/zbxtQULcwf2CEpBRN6BoBgz44+R6HpSDB8wEyxJMnqhXgy0B5GX
evr5OLgEmZbfz1Umcsrc3qyhLcQVkvFXVKFzs3nOE/iKCeiek6/KJRMJbSHZ/uYh
tsXd72ZKRKKCY6jGbrGkLEPx7T/pbiWe4gcMZ2ohv9wsc/yrYQ+EIBa+ZOvgRx01
id37qeEgGqOarH+PBGeRC1f3cxbtLWQf+rNGbdybNmb459OiYQNkyV8kE6AVH/as
6TTJ4m1HKWy+Nm+vzZ3KUgs8Jq5S7civAd8bKgmK+A1104+irVONHFw2UYDDv9AY
7CgivHmFKsd15sNO6IOfdHYACwIDAQABo4IClTCCApEwHQYDVR0OBBYEFO38cVzA
Q222AVEN33/ubhVGn4aNMB8GA1UdIwQYMBaAFHYXRiXoFjLTjfYqg7V7A7ooh+b1
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExMDcxOC85MjgzRURFRTBF
OTQxMUVCOTY2OUUxMzNDNEY5QUUwMi9kaGRHSmVnV010T045aXFEdFhzRHVpaUg1
dlUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2RoZEdKZWdXTXRPTjlpcUR0WHNEdWlpSDV2VS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
MTA3MTgvOTI4M0VERUUwRTk0MTFFQjk2NjlFMTMzQzRGOUFFMDIvODMwMzE0QkUw
RTk3MTFFQjlBNkMyQjNDQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E
EDAOMAwEAgABMAYDBADKXJwwDQYJKoZIhvcNAQELBQADggEBAAs2wvqKh9/SbUMr
kDH+MoTRW+fz/kkEkBrTOQH/t1xfiFK8syR1e+1BX7sa1ccArhioQEnHlECXumMj
immdb9vSKx1aW6SoZ83xqF8j03YLbUVq7Effm8zGIg2pJVO85n1WKZ2GPQyXU2r7
l3f0BngXKbW1hsdRdTcXRw6LHaXAn4/CdC4DmeLx1BYMTNVdf42RBeRv03EbAFAh
8z7HYgMuOBbMsnaISU4UlSgb5wegDmTz5AT+h2URUn0d0RlrQ4Y9eHHx0HPstf2o
yTZ7hqDac60xlF8YjvfCAKJy9xfqPlH6i+CC141F/eOMZUYhrqn7i7You7mIBigE
e6yHfSA=
-----END CERTIFICATE-----
Generated at Tue Apr 22 04:46:03 2025 by rpki-client