Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9125475/AB4479721D7811E2ADB6F2C408B02CD2/3E939EC8902C11EA898EFD7FC4F9AE02.roa
File:                     3E939EC8902C11EA898EFD7FC4F9AE02.roa (raw, json)
Hash identifier:          UqG5YDHsT4LJe2EQlqV189aKea56TLBrDqYoNu0hZ+8=
Subject key identifier:   63:3C:9E:3D:AB:17:CF:4B:39:D2:58:38:9C:B0:C4:2F:4F:9A:32:45
Certificate issuer:       /CN=A9125475/serialNumber=4440F6C422E9500C7D46A62D7DEB70D33A88750E
Certificate serial:       364B
Authority key identifier: 44:40:F6:C4:22:E9:50:0C:7D:46:A6:2D:7D:EB:70:D3:3A:88:75:0E
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RED2xCLpUAx9RqYtfetw0zqIdQ4.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9125475/AB4479721D7811E2ADB6F2C408B02CD2/3E939EC8902C11EA898EFD7FC4F9AE02.roa
Signing time:             Mon 02 Dec 2024 14:30:45 +0000
ROA not before:           Mon 02 Dec 2024 14:30:45 +0000
ROA not after:            Sat 31 Jan 2026 00:00:00 +0000
asID:                     7715
IP address blocks:        61.19.222.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9125475/AB4479721D7811E2ADB6F2C408B02CD2/RED2xCLpUAx9RqYtfetw0zqIdQ4.crl
                          rsync://rpki.apnic.net/member_repository/A9125475/AB4479721D7811E2ADB6F2C408B02CD2/RED2xCLpUAx9RqYtfetw0zqIdQ4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RED2xCLpUAx9RqYtfetw0zqIdQ4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 11 Apr 2025 14:20:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 13899 (0x364b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9125475
        Validity
            Not Before: Dec  2 14:30:45 2024 GMT
            Not After : Jan 31 00:00:00 2026 GMT
        Subject: CN=674dc494-6322
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:77:a0:c0:22:03:e8:e2:98:b7:78:7e:00:31:
                    b6:98:be:91:cc:37:9d:81:54:91:19:5d:d3:9d:76:
                    a8:ea:2a:59:e3:d2:50:22:87:89:f6:3a:19:33:c3:
                    cd:a4:60:3b:f4:5e:aa:1c:cc:c6:93:c9:d4:72:20:
                    e7:c0:6d:21:28:df:61:c3:60:bd:17:4f:f3:ac:ac:
                    bd:df:ca:41:19:0e:c3:00:aa:c8:0d:75:70:c6:16:
                    ca:08:be:92:f7:ff:ae:ca:31:a4:ea:e3:0f:93:42:
                    dd:ed:72:0d:c9:c6:62:ca:e3:53:14:dd:a6:1e:80:
                    7a:8e:eb:dc:62:0d:8a:05:6e:47:b5:67:89:01:38:
                    bb:1d:ba:93:c9:3d:7f:97:9f:98:3a:f3:6d:fe:69:
                    53:2c:97:79:d9:b9:22:bf:15:d3:62:e7:0a:38:b6:
                    50:e2:e9:0b:2e:ac:24:49:f0:7c:58:f2:5d:7b:10:
                    10:b9:30:d4:f7:5b:25:e2:d5:ee:d8:33:ce:31:57:
                    61:36:7b:d9:df:fc:3b:ed:41:99:ae:c1:75:e3:c1:
                    fb:5f:cd:b9:4d:5e:88:5e:a8:cb:19:36:be:a7:f3:
                    26:4f:0d:01:1f:5b:a8:76:76:f2:4c:e7:00:ca:8e:
                    f7:20:7e:17:58:7e:27:e5:4b:f6:43:f8:92:75:7e:
                    d8:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                63:3C:9E:3D:AB:17:CF:4B:39:D2:58:38:9C:B0:C4:2F:4F:9A:32:45
            X509v3 Authority Key Identifier:
                keyid:44:40:F6:C4:22:E9:50:0C:7D:46:A6:2D:7D:EB:70:D3:3A:88:75:0E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9125475/AB4479721D7811E2ADB6F2C408B02CD2/RED2xCLpUAx9RqYtfetw0zqIdQ4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RED2xCLpUAx9RqYtfetw0zqIdQ4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9125475/AB4479721D7811E2ADB6F2C408B02CD2/3E939EC8902C11EA898EFD7FC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  61.19.222.0/24

    Signature Algorithm: sha256WithRSAEncryption
         c7:9a:76:4b:e9:ae:b3:f7:a5:c9:4e:8d:bf:1d:1b:6c:11:71:
         12:7b:3f:50:88:5b:39:1a:bd:48:15:1f:c1:0f:70:f2:8a:d4:
         29:8f:1d:b1:5e:1c:26:ca:6b:c7:e6:b3:b4:fd:46:8e:2d:6f:
         f2:c1:5f:f6:04:70:ef:63:ca:09:b1:f9:26:9a:40:31:89:66:
         4e:03:9e:ec:86:a5:ac:ed:fd:6a:43:fe:9c:93:70:6b:d9:02:
         d1:97:46:dd:a5:7e:39:e3:3c:0a:c3:9f:4c:89:b4:94:7c:7d:
         0b:27:37:b2:53:b5:45:e8:66:df:e9:8b:81:63:25:2e:27:f0:
         0f:f1:48:72:4e:e3:64:e2:b8:0d:dc:82:5c:cd:72:ed:ec:fe:
         69:4f:55:04:a9:90:d5:8b:7e:f6:51:f7:c3:a2:d1:06:34:e5:
         fb:ce:40:24:36:76:95:2f:e2:ee:30:7c:fb:64:70:04:78:fd:
         3c:a8:03:68:08:a5:9d:36:e6:93:d5:53:08:c5:d9:9a:f5:4b:
         56:ad:08:3c:aa:4a:91:b4:a6:b1:77:75:a0:d0:51:91:b4:64:
         f8:43:3f:74:e4:4e:84:0e:9a:5a:f1:e5:fa:4b:61:a2:fc:97:
         81:54:05:f7:4e:51:ac:58:ca:62:dd:78:03:e8:7c:d9:7a:b6:
         fd:bf:18:18
-----BEGIN CERTIFICATE-----
MIIFcTCCBFmgAwIBAgICNkswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MjU0NzUxMTAvBgNVBAUTKDQ0NDBGNkM0MjJFOTUwMEM3RDQ2QTYyRDdERUI3MEQz
M0E4ODc1MEUwHhcNMjQxMjAyMTQzMDQ1WhcNMjYwMTMxMDAwMDAwWjAYMRYwFAYD
VQQDEw02NzRkYzQ5NC02MzIyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA2negwCID6OKYt3h+ADG2mL6RzDedgVSRGV3TnXao6ipZ49JQIoeJ9joZM8PN
pGA79F6qHMzGk8nUciDnwG0hKN9hw2C9F0/zrKy938pBGQ7DAKrIDXVwxhbKCL6S
9/+uyjGk6uMPk0Ld7XINycZiyuNTFN2mHoB6juvcYg2KBW5HtWeJATi7HbqTyT1/
l5+YOvNt/mlTLJd52bkivxXTYucKOLZQ4ukLLqwkSfB8WPJdexAQuTDU91sl4tXu
2DPOMVdhNnvZ3/w77UGZrsF148H7X825TV6IXqjLGTa+p/MmTw0BH1uodnbyTOcA
yo73IH4XWH4n5Uv2Q/iSdX7YaQIDAQABo4IClTCCApEwHQYDVR0OBBYEFGM8nj2r
F89LOdJYOJywxC9PmjJFMB8GA1UdIwQYMBaAFERA9sQi6VAMfUamLX3rcNM6iHUO
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyNTQ3NS9BQjQ0Nzk3MjFE
NzgxMUUyQURCNkYyQzQwOEIwMkNEMi9SRUQyeENMcFVBeDlScVl0ZmV0dzB6cUlk
UTQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL1JFRDJ4Q0xwVUF4OVJxWXRmZXR3MHpxSWRRNC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
MjU0NzUvQUI0NDc5NzIxRDc4MTFFMkFEQjZGMkM0MDhCMDJDRDIvM0U5MzlFQzg5
MDJDMTFFQTg5OEVGRDdGQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E
EDAOMAwEAgABMAYDBAA9E94wDQYJKoZIhvcNAQELBQADggEBAMeadkvprrP3pclO
jb8dG2wRcRJ7P1CIWzkavUgVH8EPcPKK1CmPHbFeHCbKa8fms7T9Ro4tb/LBX/YE
cO9jygmx+SaaQDGJZk4DnuyGpazt/WpD/pyTcGvZAtGXRt2lfjnjPArDn0yJtJR8
fQsnN7JTtUXoZt/pi4FjJS4n8A/xSHJO42TiuA3cglzNcu3s/mlPVQSpkNWLfvZR
98Oi0QY05fvOQCQ2dpUv4u4wfPtkcAR4/TyoA2gIpZ025pPVUwjF2Zr1S1atCDyq
SpG0prF3daDQUZG0ZPhDP3TkToQOmlrx5fpLYaL8l4FUBfdOUaxYymLdeAPofNl6
tv2/GBg=
-----END CERTIFICATE-----
Generated at Sun Apr 6 15:23:08 2025 by rpki-client