Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9137ABC/713D9FB01D7811E282868DC408B02CD2/8A7AA864C00A11EA9DF31048C4F9AE02.roa
File:                     8A7AA864C00A11EA9DF31048C4F9AE02.roa (raw, json)
Hash identifier:          XhbwSViCoUZb2schR8ZIRRuWC7wV9clW4amG09dFjjo=
Subject key identifier:   99:52:42:D5:30:92:AD:B2:71:38:36:25:B7:17:19:08:ED:0E:B1:32
Certificate issuer:       /CN=A9137ABC/serialNumber=61BF3ED4C3BFBC0916EF9480AAFF222A437AF02C
Certificate serial:       39FE
Authority key identifier: 61:BF:3E:D4:C3:BF:BC:09:16:EF:94:80:AA:FF:22:2A:43:7A:F0:2C
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Yb8-1MO_vAkW75SAqv8iKkN68Cw.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9137ABC/713D9FB01D7811E282868DC408B02CD2/8A7AA864C00A11EA9DF31048C4F9AE02.roa
Signing time:             Mon 14 Jul 2025 14:51:16 +0000
ROA not before:           Mon 14 Jul 2025 14:51:16 +0000
ROA not after:            Wed 30 Sep 2026 00:00:00 +0000
asID:                     45581
IP address blocks:        119.46.182.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9137ABC/713D9FB01D7811E282868DC408B02CD2/Yb8-1MO_vAkW75SAqv8iKkN68Cw.crl
                          rsync://rpki.apnic.net/member_repository/A9137ABC/713D9FB01D7811E282868DC408B02CD2/Yb8-1MO_vAkW75SAqv8iKkN68Cw.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Yb8-1MO_vAkW75SAqv8iKkN68Cw.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 27 Jul 2025 14:20:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 14846 (0x39fe)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9137ABC, serialNumber=61BF3ED4C3BFBC0916EF9480AAFF222A437AF02C
        Validity
            Not Before: Jul 14 14:51:16 2025 GMT
            Not After : Sep 30 00:00:00 2026 GMT
        Subject: CN=68751964-8bbe
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:bc:8d:5e:60:ab:c0:5e:9c:47:9a:22:1e:0e:
                    e2:7d:0d:19:a0:8c:7a:c3:95:d4:82:1e:60:51:81:
                    90:91:61:75:c2:66:d5:2b:da:fe:c0:34:cf:7c:41:
                    34:e5:6e:f9:61:0e:51:3d:6b:84:72:43:df:ef:1e:
                    85:9b:bc:9a:1c:dc:8b:fb:47:96:5d:bb:7b:09:7f:
                    c0:63:29:e5:b3:8a:15:50:f6:e0:76:18:52:5e:f5:
                    de:da:5e:8c:2b:e6:bc:4c:f5:d5:ca:dd:30:36:f8:
                    4e:51:c3:5f:ce:09:90:75:68:bf:c2:b6:e8:de:b0:
                    39:0b:26:3e:6c:54:f8:b8:41:fc:5d:23:43:a2:3b:
                    9c:11:c1:f9:f4:ac:43:b0:02:fe:c8:a4:fb:b3:8a:
                    23:31:91:32:41:36:6f:65:9e:cf:53:61:3d:bb:0f:
                    80:a8:58:ed:50:77:25:8c:85:b2:bf:36:5c:dd:19:
                    b6:e2:63:eb:c5:6b:80:e6:6c:d9:30:31:d7:9c:79:
                    95:4b:10:6c:5d:40:a7:c1:9e:36:de:13:8e:7a:38:
                    2d:be:7b:c8:f7:df:70:58:53:9c:8d:32:0f:f0:0b:
                    bf:63:11:48:33:f9:b8:85:19:95:87:69:74:65:a0:
                    06:d6:f8:61:54:1e:34:40:b4:52:78:cd:ba:a3:50:
                    98:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                99:52:42:D5:30:92:AD:B2:71:38:36:25:B7:17:19:08:ED:0E:B1:32
            X509v3 Authority Key Identifier:
                keyid:61:BF:3E:D4:C3:BF:BC:09:16:EF:94:80:AA:FF:22:2A:43:7A:F0:2C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9137ABC/713D9FB01D7811E282868DC408B02CD2/Yb8-1MO_vAkW75SAqv8iKkN68Cw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Yb8-1MO_vAkW75SAqv8iKkN68Cw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9137ABC/713D9FB01D7811E282868DC408B02CD2/8A7AA864C00A11EA9DF31048C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  119.46.182.0/24

    Signature Algorithm: sha256WithRSAEncryption
         29:e3:ac:e6:24:70:69:3f:39:e7:48:84:0d:9a:5c:ac:bf:fe:
         7e:14:ff:33:c3:f8:31:2d:fd:a3:1f:8f:83:d1:98:2c:27:bc:
         79:95:0b:3d:ee:ea:92:2d:c7:bc:f2:57:b6:3b:91:d7:f7:db:
         09:8b:28:8a:ae:b8:c5:cb:85:87:83:51:88:66:db:1c:db:e0:
         31:5c:5e:47:24:70:1f:fa:43:1e:83:a8:7b:bf:2b:e7:6a:50:
         e2:8c:91:71:d8:0a:35:07:62:ce:54:2f:19:79:12:9e:66:62:
         4b:6d:bd:e3:eb:e7:c7:79:4b:6f:69:d8:c8:62:9b:c9:10:cf:
         44:28:c8:bc:f2:ab:fb:bd:f2:83:b5:0a:17:13:10:90:ee:13:
         df:32:0c:da:34:0d:8f:77:f5:d2:63:4b:9c:36:9e:9b:70:9c:
         e2:10:41:e4:f9:4f:3a:4c:b9:ef:91:e2:1a:a8:bf:d4:60:7b:
         5b:94:d2:04:64:95:68:f5:ba:6e:27:12:65:85:ad:64:31:22:
         af:0e:c0:e6:43:d1:6c:c3:d7:c0:6a:97:00:e9:97:a4:a7:d2:
         d1:65:f0:70:90:12:c9:f8:25:50:02:83:5c:7a:e1:06:4e:7b:
         ba:ef:b7:62:63:f1:b6:53:e7:e9:bb:08:ce:ca:2e:48:7c:c3:
         9a:1a:f5:10
-----BEGIN CERTIFICATE-----
MIIFcTCCBFmgAwIBAgICOf4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MzdBQkMxMTAvBgNVBAUTKDYxQkYzRUQ0QzNCRkJDMDkxNkVGOTQ4MEFBRkYyMjJB
NDM3QUYwMkMwHhcNMjUwNzE0MTQ1MTE2WhcNMjYwOTMwMDAwMDAwWjAYMRYwFAYD
VQQDEw02ODc1MTk2NC04YmJlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAwLyNXmCrwF6cR5oiHg7ifQ0ZoIx6w5XUgh5gUYGQkWF1wmbVK9r+wDTPfEE0
5W75YQ5RPWuEckPf7x6Fm7yaHNyL+0eWXbt7CX/AYynls4oVUPbgdhhSXvXe2l6M
K+a8TPXVyt0wNvhOUcNfzgmQdWi/wrbo3rA5CyY+bFT4uEH8XSNDojucEcH59KxD
sAL+yKT7s4ojMZEyQTZvZZ7PU2E9uw+AqFjtUHcljIWyvzZc3Rm24mPrxWuA5mzZ
MDHXnHmVSxBsXUCnwZ423hOOejgtvnvI999wWFOcjTIP8Au/YxFIM/m4hRmVh2l0
ZaAG1vhhVB40QLRSeM26o1CYnQIDAQABo4IClTCCApEwHQYDVR0OBBYEFJlSQtUw
kq2ycTg2JbcXGQjtDrEyMB8GA1UdIwQYMBaAFGG/PtTDv7wJFu+UgKr/IipDevAs
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzN0FCQy83MTNEOUZCMDFE
NzgxMUUyODI4NjhEQzQwOEIwMkNEMi9ZYjgtMU1PX3ZBa1c3NVNBcXY4aUtrTjY4
Q3cuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL1liOC0xTU9fdkFrVzc1U0FxdjhpS2tONjhDdy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
MzdBQkMvNzEzRDlGQjAxRDc4MTFFMjgyODY4REM0MDhCMDJDRDIvOEE3QUE4NjRD
MDBBMTFFQTlERjMxMDQ4QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E
EDAOMAwEAgABMAYDBAB3LrYwDQYJKoZIhvcNAQELBQADggEBACnjrOYkcGk/OedI
hA2aXKy//n4U/zPD+DEt/aMfj4PRmCwnvHmVCz3u6pItx7zyV7Y7kdf32wmLKIqu
uMXLhYeDUYhm2xzb4DFcXkckcB/6Qx6DqHu/K+dqUOKMkXHYCjUHYs5ULxl5Ep5m
YkttvePr58d5S29p2Mhim8kQz0QoyLzyq/u98oO1ChcTEJDuE98yDNo0DY939dJj
S5w2nptwnOIQQeT5TzpMue+R4hqov9Rge1uU0gRklWj1um4nEmWFrWQxIq8OwOZD
0WzD18BqlwDpl6Sn0tFl8HCQEsn4JVACg1x64QZOe7rvt2Jj8bZT5+m7CM7KLkh8
w5oa9RA=
-----END CERTIFICATE-----
Generated at Tue Jul 22 05:01:38 2025 by rpki-client