Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A912CEBD/CCD8142899C111EE9A1FDE1FC4F9AE02/F2AB0C4A68C011EFB9196160C4F9AE02.roa
File:                     F2AB0C4A68C011EFB9196160C4F9AE02.roa (raw, json)
Hash identifier:          DaPiCEmlAJvbaPsIVw3SLkMWbmEd02jwt+sb94Y5y+Y=
Subject key identifier:   C1:1A:46:3F:79:20:98:4E:30:58:DD:56:76:5C:1E:23:01:46:36:E7
Certificate issuer:       /CN=A912CEBD/serialNumber=BE91F21C7A0BC06437F3DB5B214208C8774EEBCD
Certificate serial:       DA
Authority key identifier: BE:91:F2:1C:7A:0B:C0:64:37:F3:DB:5B:21:42:08:C8:77:4E:EB:CD
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vpHyHHoLwGQ389tbIUIIyHdO680.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A912CEBD/CCD8142899C111EE9A1FDE1FC4F9AE02/F2AB0C4A68C011EFB9196160C4F9AE02.roa
Signing time:             Sat 25 Jan 2025 04:07:48 +0000
ROA not before:           Sat 25 Jan 2025 04:07:48 +0000
ROA not after:            Tue 31 Mar 2026 00:00:00 +0000
asID:                     56264
IP address blocks:        36.50.102.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A912CEBD/CCD8142899C111EE9A1FDE1FC4F9AE02/vpHyHHoLwGQ389tbIUIIyHdO680.crl
                          rsync://rpki.apnic.net/member_repository/A912CEBD/CCD8142899C111EE9A1FDE1FC4F9AE02/vpHyHHoLwGQ389tbIUIIyHdO680.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vpHyHHoLwGQ389tbIUIIyHdO680.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 10 Apr 2025 04:28:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 218 (0xda)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A912CEBD
        Validity
            Not Before: Jan 25 04:07:48 2025 GMT
            Not After : Mar 31 00:00:00 2026 GMT
        Subject: CN=67946393-10a5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:0d:4d:4e:3c:de:fb:8f:0e:43:ce:dc:4a:b6:
                    84:d1:22:3f:e4:66:0d:74:31:49:55:03:89:4b:cf:
                    09:e1:46:55:55:71:cf:5a:e7:a7:2c:90:43:18:f5:
                    11:0c:19:00:22:32:0a:d7:07:b3:09:db:55:04:5c:
                    fc:f6:91:c1:c1:fd:19:cc:3d:4c:a2:30:d8:85:32:
                    32:3b:91:58:f5:75:a7:94:40:e1:4d:ab:70:01:95:
                    6f:a8:20:4e:c8:90:c6:89:6d:a0:e9:4e:a8:07:bc:
                    f2:ee:d2:71:f5:0a:e6:d2:56:05:09:71:12:95:9b:
                    5c:64:1a:64:01:f4:18:45:3b:f3:5a:d0:dd:8b:9a:
                    54:a1:ac:85:3d:2c:da:5f:4b:4a:a0:0f:1b:03:e5:
                    35:99:09:5d:4b:94:0a:ed:9c:3e:7d:52:3b:5a:10:
                    fb:62:e3:26:06:93:a3:f3:62:33:86:e0:5d:de:ac:
                    e4:07:59:04:7d:fb:af:dc:b7:7e:17:dd:66:2e:c7:
                    14:a9:71:ce:9d:64:e3:8a:1c:85:ab:27:43:e5:13:
                    d3:09:e3:ea:89:17:9f:23:cd:6e:b2:41:89:25:7a:
                    b6:dc:36:39:34:63:ab:16:41:54:a2:82:27:75:f3:
                    f0:04:c2:80:6f:9d:ae:11:ce:3b:4d:ce:7e:db:1b:
                    7b:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C1:1A:46:3F:79:20:98:4E:30:58:DD:56:76:5C:1E:23:01:46:36:E7
            X509v3 Authority Key Identifier:
                keyid:BE:91:F2:1C:7A:0B:C0:64:37:F3:DB:5B:21:42:08:C8:77:4E:EB:CD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A912CEBD/CCD8142899C111EE9A1FDE1FC4F9AE02/vpHyHHoLwGQ389tbIUIIyHdO680.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vpHyHHoLwGQ389tbIUIIyHdO680.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912CEBD/CCD8142899C111EE9A1FDE1FC4F9AE02/F2AB0C4A68C011EFB9196160C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  36.50.102.0/23

    Signature Algorithm: sha256WithRSAEncryption
         2d:88:f6:93:78:44:f9:04:79:7e:02:c5:13:80:d4:b9:37:f1:
         96:fd:69:e0:b0:84:79:5e:18:7c:c5:c3:9b:74:a6:d9:f6:9b:
         86:26:b3:4a:d5:02:4e:59:c3:ca:94:7c:6d:21:87:99:eb:f9:
         98:12:cd:64:48:32:11:60:05:5a:11:b4:f6:17:b3:c3:db:cf:
         aa:0b:73:b1:13:fa:89:ee:a7:a5:36:f3:7c:86:02:de:3a:04:
         b0:c1:e3:d2:37:4a:3f:70:86:5f:b7:34:ff:dd:5b:e8:50:98:
         30:68:f0:36:f8:97:45:b4:de:5e:14:69:a3:de:d9:23:8e:7d:
         76:28:93:38:f3:32:14:e4:d1:ea:83:bf:84:a4:0d:c2:bb:92:
         b2:2b:c6:07:46:2c:dc:cb:5e:b4:ec:44:9a:1f:f8:63:6a:cc:
         22:dc:b6:bd:ed:28:cc:55:44:6c:c4:10:c3:82:55:33:b6:d6:
         9d:3e:12:74:db:6e:df:2b:6c:41:08:11:e4:3c:27:21:72:4e:
         9a:10:ac:25:ed:e7:29:a4:6e:6f:b4:8f:57:85:11:0e:73:5e:
         d9:d1:1a:cb:46:80:9a:86:0a:ff:3d:63:f8:5a:94:16:cd:65:
         33:47:e9:1c:4e:55:3d:af:ae:fd:37:74:87:d0:72:b0:9d:55:
         67:77:86:d4
-----BEGIN CERTIFICATE-----
MIIFcTCCBFmgAwIBAgICANowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MkNFQkQxMTAvBgNVBAUTKEJFOTFGMjFDN0EwQkMwNjQzN0YzREI1QjIxNDIwOEM4
Nzc0RUVCQ0QwHhcNMjUwMTI1MDQwNzQ4WhcNMjYwMzMxMDAwMDAwWjAYMRYwFAYD
VQQDEw02Nzk0NjM5My0xMGE1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAzA1NTjze+48OQ87cSraE0SI/5GYNdDFJVQOJS88J4UZVVXHPWuenLJBDGPUR
DBkAIjIK1wezCdtVBFz89pHBwf0ZzD1MojDYhTIyO5FY9XWnlEDhTatwAZVvqCBO
yJDGiW2g6U6oB7zy7tJx9Qrm0lYFCXESlZtcZBpkAfQYRTvzWtDdi5pUoayFPSza
X0tKoA8bA+U1mQldS5QK7Zw+fVI7WhD7YuMmBpOj82IzhuBd3qzkB1kEffuv3Ld+
F91mLscUqXHOnWTjihyFqydD5RPTCePqiRefI81uskGJJXq23DY5NGOrFkFUooIn
dfPwBMKAb52uEc47Tc5+2xt7NQIDAQABo4IClTCCApEwHQYDVR0OBBYEFMEaRj95
IJhOMFjdVnZcHiMBRjbnMB8GA1UdIwQYMBaAFL6R8hx6C8BkN/PbWyFCCMh3TuvN
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyQ0VCRC9DQ0Q4MTQyODk5
QzExMUVFOUExRkRFMUZDNEY5QUUwMi92cEh5SEhvTHdHUTM4OXRiSVVJSXlIZE82
ODAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL3ZwSHlISG9Md0dRMzg5dGJJVUlJeUhkTzY4MC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
MkNFQkQvQ0NEODE0Mjg5OUMxMTFFRTlBMUZERTFGQzRGOUFFMDIvRjJBQjBDNEE2
OEMwMTFFRkI5MTk2MTYwQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E
EDAOMAwEAgABMAYDBAEkMmYwDQYJKoZIhvcNAQELBQADggEBAC2I9pN4RPkEeX4C
xROA1Lk38Zb9aeCwhHleGHzFw5t0ptn2m4Yms0rVAk5Zw8qUfG0hh5nr+ZgSzWRI
MhFgBVoRtPYXs8Pbz6oLc7ET+onup6U283yGAt46BLDB49I3Sj9whl+3NP/dW+hQ
mDBo8Db4l0W03l4UaaPe2SOOfXYokzjzMhTk0eqDv4SkDcK7krIrxgdGLNzLXrTs
RJof+GNqzCLctr3tKMxVRGzEEMOCVTO21p0+EnTbbt8rbEEIEeQ8JyFyTpoQrCXt
5ymkbm+0j1eFEQ5zXtnRGstGgJqGCv89Y/halBbNZTNH6RxOVT2vrv03dIfQcrCd
VWd3htQ=
-----END CERTIFICATE-----
Generated at Sat Apr 5 02:10:05 2025 by rpki-client