Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A912F535/69A58078BA6611EEBC39626EC4F9AE02/A3048576EC3911EEA6178B13C4F9AE02.roa
File:                     A3048576EC3911EEA6178B13C4F9AE02.roa (raw, json)
Hash identifier:          VTp2ABLnUqS/Ob5XrNRvfYj53nTFMS/ZxCFHhPG4kpU=
Subject key identifier:   F0:98:DA:7D:8B:0C:2B:BF:1C:50:DF:4F:08:06:2D:3B:4D:6E:C4:7C
Certificate issuer:       /CN=A912F535/serialNumber=D48CED18F68CA226983F9F999A140636275B6A55
Certificate serial:       0125
Authority key identifier: D4:8C:ED:18:F6:8C:A2:26:98:3F:9F:99:9A:14:06:36:27:5B:6A:55
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1IztGPaMoiaYP5-ZmhQGNidbalU.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A912F535/69A58078BA6611EEBC39626EC4F9AE02/A3048576EC3911EEA6178B13C4F9AE02.roa
Signing time:             Sat 21 Jun 2025 04:33:26 +0000
ROA not before:           Sat 21 Jun 2025 04:33:26 +0000
ROA not after:            Thu 30 Jul 2026 00:00:00 +0000
asID:                     138995
IP address blocks:        14.192.4.0/22 maxlen: 23
                          43.224.224.0/22 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A912F535/69A58078BA6611EEBC39626EC4F9AE02/1IztGPaMoiaYP5-ZmhQGNidbalU.crl
                          rsync://rpki.apnic.net/member_repository/A912F535/69A58078BA6611EEBC39626EC4F9AE02/1IztGPaMoiaYP5-ZmhQGNidbalU.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1IztGPaMoiaYP5-ZmhQGNidbalU.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 28 Jul 2025 04:57:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 293 (0x125)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A912F535, serialNumber=D48CED18F68CA226983F9F999A140636275B6A55
        Validity
            Not Before: Jun 21 04:33:26 2025 GMT
            Not After : Jul 30 00:00:00 2026 GMT
        Subject: CN=68563616-6178
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:ba:93:ba:bd:35:b1:2b:ca:60:63:e6:86:d7:
                    e4:be:31:1f:c0:2e:79:95:aa:96:8f:6f:01:33:d7:
                    8a:1b:d3:c7:cf:3a:93:74:27:67:14:11:e8:b6:c9:
                    45:85:bf:4d:7d:f3:d6:02:23:f5:8f:b4:c2:e4:0b:
                    90:0f:64:54:a2:fc:9c:dd:d3:74:80:df:6d:ac:ac:
                    db:3f:50:88:12:7f:73:a5:ea:b1:4a:cc:f5:46:72:
                    85:b7:db:c9:a8:69:99:ec:c0:1f:67:c5:a1:8e:70:
                    5a:62:43:96:57:0f:b7:dd:45:fb:9f:e5:e2:4d:21:
                    d6:d8:88:5d:5a:2e:9e:67:80:9a:cd:de:dc:8d:41:
                    53:76:dd:f0:0b:c7:01:a3:12:20:fc:5c:dc:5d:a5:
                    52:2d:fe:a4:f4:1b:22:75:7d:5c:31:6a:6e:2e:67:
                    27:be:95:b1:ab:ad:ef:d0:80:b3:ad:ca:be:0e:ca:
                    7b:55:07:aa:8a:3a:74:48:64:af:51:f6:c0:9f:55:
                    13:de:d3:6d:fb:96:80:6b:8d:14:31:7c:b5:06:1a:
                    82:e1:de:60:98:50:73:64:18:69:9c:40:c4:36:a3:
                    02:0a:e1:ba:7b:b6:d6:ad:05:3a:3f:d9:58:82:1c:
                    ec:db:e0:6f:14:45:bd:0f:88:78:33:fa:7b:37:03:
                    84:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F0:98:DA:7D:8B:0C:2B:BF:1C:50:DF:4F:08:06:2D:3B:4D:6E:C4:7C
            X509v3 Authority Key Identifier:
                keyid:D4:8C:ED:18:F6:8C:A2:26:98:3F:9F:99:9A:14:06:36:27:5B:6A:55

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A912F535/69A58078BA6611EEBC39626EC4F9AE02/1IztGPaMoiaYP5-ZmhQGNidbalU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1IztGPaMoiaYP5-ZmhQGNidbalU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912F535/69A58078BA6611EEBC39626EC4F9AE02/A3048576EC3911EEA6178B13C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  14.192.4.0/22
                  43.224.224.0/22

    Signature Algorithm: sha256WithRSAEncryption
         57:15:d8:41:5f:4e:5e:44:03:7d:03:82:dc:da:05:bc:33:fd:
         da:ef:2d:83:ca:67:ef:9c:71:8e:19:92:be:d4:0f:be:78:fc:
         c0:84:31:4d:a9:09:34:3b:cc:3d:0b:9b:e2:bf:79:11:8d:82:
         1f:50:ce:1f:fd:e2:35:e1:41:21:a3:62:44:57:3a:76:7a:53:
         ff:5f:92:5a:c5:2d:16:ab:93:a8:36:aa:93:ed:bb:fd:79:e1:
         f5:f6:49:25:d1:77:02:72:b2:e9:46:ce:50:cd:5e:d2:10:06:
         e1:28:45:82:f0:12:cc:08:72:99:7c:ba:74:7b:60:6b:3a:81:
         08:77:9d:e1:f4:a6:3c:ae:16:96:1c:1e:81:5a:52:8e:60:8c:
         de:ae:c6:78:14:97:56:5f:37:12:cd:20:8e:e5:bd:df:13:5a:
         81:0f:2a:1b:5e:97:9f:40:da:1a:1f:fc:b9:b0:38:32:b3:2e:
         20:f3:14:ce:a3:9a:74:11:ba:80:30:0e:b6:77:57:be:53:7e:
         3b:83:0a:02:69:ab:78:71:88:1d:13:be:93:4e:01:67:11:2d:
         83:9c:8e:54:dd:8f:2f:f4:f3:7a:35:c5:5d:9a:fd:03:45:34:
         58:92:2e:f4:f3:80:d0:60:d9:2a:f3:0b:58:87:f9:75:49:59:
         78:f0:c7:56
-----BEGIN CERTIFICATE-----
MIIFdzCCBF+gAwIBAgICASUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MkY1MzUxMTAvBgNVBAUTKEQ0OENFRDE4RjY4Q0EyMjY5ODNGOUY5OTlBMTQwNjM2
Mjc1QjZBNTUwHhcNMjUwNjIxMDQzMzI2WhcNMjYwNzMwMDAwMDAwWjAYMRYwFAYD
VQQDEw02ODU2MzYxNi02MTc4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAs7qTur01sSvKYGPmhtfkvjEfwC55laqWj28BM9eKG9PHzzqTdCdnFBHotslF
hb9NffPWAiP1j7TC5AuQD2RUovyc3dN0gN9trKzbP1CIEn9zpeqxSsz1RnKFt9vJ
qGmZ7MAfZ8WhjnBaYkOWVw+33UX7n+XiTSHW2IhdWi6eZ4Cazd7cjUFTdt3wC8cB
oxIg/FzcXaVSLf6k9BsidX1cMWpuLmcnvpWxq63v0ICzrcq+Dsp7VQeqijp0SGSv
UfbAn1UT3tNt+5aAa40UMXy1BhqC4d5gmFBzZBhpnEDENqMCCuG6e7bWrQU6P9lY
ghzs2+BvFEW9D4h4M/p7NwOEfQIDAQABo4ICmzCCApcwHQYDVR0OBBYEFPCY2n2L
DCu/HFDfTwgGLTtNbsR8MB8GA1UdIwQYMBaAFNSM7Rj2jKImmD+fmZoUBjYnW2pV
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyRjUzNS82OUE1ODA3OEJB
NjYxMUVFQkMzOTYyNkVDNEY5QUUwMi8xSXp0R1BhTW9pYVlQNS1abWhRR05pZGJh
bFUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyLzFJenRHUGFNb2lhWVA1LVptaFFHTmlkYmFsVS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
MkY1MzUvNjlBNTgwNzhCQTY2MTFFRUJDMzk2MjZFQzRGOUFFMDIvQTMwNDg1NzZF
QzM5MTFFRUE2MTc4QjEzQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwJQYIKwYBBQUHAQcBAf8E
FjAUMBIEAgABMAwDBAIOwAQDBAIr4OAwDQYJKoZIhvcNAQELBQADggEBAFcV2EFf
Tl5EA30DgtzaBbwz/drvLYPKZ++ccY4Zkr7UD754/MCEMU2pCTQ7zD0Lm+K/eRGN
gh9Qzh/94jXhQSGjYkRXOnZ6U/9fklrFLRark6g2qpPtu/154fX2SSXRdwJysulG
zlDNXtIQBuEoRYLwEswIcpl8unR7YGs6gQh3neH0pjyuFpYcHoFaUo5gjN6uxngU
l1ZfNxLNII7lvd8TWoEPKhtel59A2hof/LmwODKzLiDzFM6jmnQRuoAwDrZ3V75T
fjuDCgJpq3hxiB0TvpNOAWcRLYOcjlTdjy/083o1xV2a/QNFNFiSLvTzgNBg2Srz
C1iH+XVJWXjwx1Y=
-----END CERTIFICATE-----
Generated at Mon Jul 21 12:36:30 2025 by rpki-client