Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A913C07A/F142614ABE6711EEB33C6D6EC4F9AE02/A1456A4CBE6811EEBFF35870C4F9AE02.roa
File:                     A1456A4CBE6811EEBFF35870C4F9AE02.roa (raw, json)
Hash identifier:          97zPU/AWi/C0nV9VIKmemXWGwZXv9hj/Vz3ExXILCII=
Subject key identifier:   37:88:62:D6:64:85:2E:83:8B:A9:6B:6F:AA:79:60:8E:88:6D:89:A7
Certificate issuer:       /CN=A913C07A/serialNumber=1218DE75B2588B6633A6BF88CD388F31C43AC9C0
Certificate serial:       BB
Authority key identifier: 12:18:DE:75:B2:58:8B:66:33:A6:BF:88:CD:38:8F:31:C4:3A:C9:C0
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/EhjedbJYi2Yzpr-IzTiPMcQ6ycA.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A913C07A/F142614ABE6711EEB33C6D6EC4F9AE02/A1456A4CBE6811EEBFF35870C4F9AE02.roa
Signing time:             Fri 17 Jan 2025 04:17:41 +0000
ROA not before:           Fri 17 Jan 2025 04:17:41 +0000
ROA not after:            Fri 01 May 2026 00:00:00 +0000
asID:                     152447
IP address blocks:        157.15.52.0/23 maxlen: 23
                          157.15.52.0/24 maxlen: 24
                          157.15.53.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A913C07A/F142614ABE6711EEB33C6D6EC4F9AE02/EhjedbJYi2Yzpr-IzTiPMcQ6ycA.crl
                          rsync://rpki.apnic.net/member_repository/A913C07A/F142614ABE6711EEB33C6D6EC4F9AE02/EhjedbJYi2Yzpr-IzTiPMcQ6ycA.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/EhjedbJYi2Yzpr-IzTiPMcQ6ycA.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 12 Apr 2025 04:48:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 187 (0xbb)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A913C07A
        Validity
            Not Before: Jan 17 04:17:41 2025 GMT
            Not After : May  1 00:00:00 2026 GMT
        Subject: CN=6789d9e5-a79a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:2f:d3:3a:74:20:f0:70:bf:19:d7:43:89:46:
                    7a:67:88:6d:f2:8e:07:e1:ed:ac:4d:8b:35:a2:2c:
                    dc:27:ad:9a:99:7b:91:82:65:d5:81:e7:75:b2:1c:
                    07:75:6a:3b:c6:5f:f6:13:9a:29:48:f0:d8:db:16:
                    87:74:c6:f7:d1:e8:92:82:f1:2a:4f:4a:0d:4d:a6:
                    8a:a6:a0:85:9f:75:a3:e6:6a:66:51:7a:f2:c2:59:
                    b7:1e:00:8c:32:15:1a:3a:1d:67:ff:df:db:53:79:
                    3f:90:4d:04:e4:f1:54:9e:a6:76:17:ec:78:7c:5f:
                    21:c6:0a:4c:c0:d1:69:56:da:b6:92:b5:3c:89:10:
                    bd:ab:ff:41:14:10:ce:c5:36:7d:38:20:c2:3a:c5:
                    d9:ae:d7:b7:35:ca:5e:af:6a:4c:b6:2a:01:17:a1:
                    6c:07:88:d2:6a:f1:bd:d3:07:8a:55:bc:19:0f:45:
                    24:48:13:0c:d3:36:50:08:f4:1d:9a:ad:a6:74:c8:
                    ee:f9:aa:ac:3d:ca:08:86:1e:6f:90:21:14:98:9c:
                    f7:e5:aa:a1:64:9e:45:92:85:ba:a3:75:64:e2:f8:
                    94:39:95:5e:32:97:53:b2:c9:67:3b:33:16:92:91:
                    aa:87:28:78:3c:0f:44:04:43:8b:32:c7:19:4f:29:
                    af:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                37:88:62:D6:64:85:2E:83:8B:A9:6B:6F:AA:79:60:8E:88:6D:89:A7
            X509v3 Authority Key Identifier:
                keyid:12:18:DE:75:B2:58:8B:66:33:A6:BF:88:CD:38:8F:31:C4:3A:C9:C0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A913C07A/F142614ABE6711EEB33C6D6EC4F9AE02/EhjedbJYi2Yzpr-IzTiPMcQ6ycA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/EhjedbJYi2Yzpr-IzTiPMcQ6ycA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913C07A/F142614ABE6711EEB33C6D6EC4F9AE02/A1456A4CBE6811EEBFF35870C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  157.15.52.0/23

    Signature Algorithm: sha256WithRSAEncryption
         94:f5:4d:b2:69:67:bf:68:14:a9:66:2e:40:32:c8:41:a7:58:
         31:cd:55:e5:d8:f0:12:a6:30:33:72:b2:27:74:26:0f:45:dc:
         ef:2b:ba:fe:45:bb:f4:f2:2b:c5:fc:00:d5:c9:31:c6:d7:4f:
         ba:72:87:be:24:b3:43:5b:ad:7d:00:26:e9:f6:ac:d3:0b:70:
         62:89:6c:0b:f8:c9:9f:87:33:2e:16:2d:66:15:0b:07:c1:28:
         d8:c3:ce:cd:0b:12:8a:af:e3:ac:d6:e4:15:5a:fb:ac:40:b0:
         bb:41:56:df:35:26:0d:2c:34:96:6c:36:d2:b3:91:ab:75:54:
         53:7b:58:c3:74:5b:2f:63:b3:28:d5:b6:96:72:89:c8:2c:12:
         96:83:cc:62:a7:54:e4:6e:59:cd:29:36:3f:39:12:13:a1:95:
         bd:a0:23:6a:ba:a5:9f:2b:3b:8e:fa:a8:45:c8:8f:5b:93:56:
         dc:14:41:13:f8:11:c7:4d:12:02:0d:fd:14:7c:6f:cb:0d:47:
         3e:84:37:58:b3:f9:de:48:ca:ea:2f:c7:4e:ea:32:c5:3f:eb:
         08:a8:a6:91:63:d3:d4:09:da:b0:36:2e:5b:92:e1:9c:0d:e0:
         2f:02:23:cf:73:66:32:1b:46:99:e5:f8:e5:ec:2f:12:cf:42:
         b9:39:c1:a1
-----BEGIN CERTIFICATE-----
MIIFcTCCBFmgAwIBAgICALswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
M0MwN0ExMTAvBgNVBAUTKDEyMThERTc1QjI1ODhCNjYzM0E2QkY4OENEMzg4RjMx
QzQzQUM5QzAwHhcNMjUwMTE3MDQxNzQxWhcNMjYwNTAxMDAwMDAwWjAYMRYwFAYD
VQQDEw02Nzg5ZDllNS1hNzlhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAli/TOnQg8HC/GddDiUZ6Z4ht8o4H4e2sTYs1oizcJ62amXuRgmXVged1shwH
dWo7xl/2E5opSPDY2xaHdMb30eiSgvEqT0oNTaaKpqCFn3Wj5mpmUXrywlm3HgCM
MhUaOh1n/9/bU3k/kE0E5PFUnqZ2F+x4fF8hxgpMwNFpVtq2krU8iRC9q/9BFBDO
xTZ9OCDCOsXZrte3Ncper2pMtioBF6FsB4jSavG90weKVbwZD0UkSBMM0zZQCPQd
mq2mdMju+aqsPcoIhh5vkCEUmJz35aqhZJ5FkoW6o3Vk4viUOZVeMpdTsslnOzMW
kpGqhyh4PA9EBEOLMscZTymvxwIDAQABo4IClTCCApEwHQYDVR0OBBYEFDeIYtZk
hS6Di6lrb6p5YI6IbYmnMB8GA1UdIwQYMBaAFBIY3nWyWItmM6a/iM04jzHEOsnA
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzQzA3QS9GMTQyNjE0QUJF
NjcxMUVFQjMzQzZENkVDNEY5QUUwMi9FaGplZGJKWWkyWXpwci1JelRpUE1jUTZ5
Y0EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy
RkQxRkYyL0VoamVkYkpZaTJZenByLUl6VGlQTWNRNnljQS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
M0MwN0EvRjE0MjYxNEFCRTY3MTFFRUIzM0M2RDZFQzRGOUFFMDIvQTE0NTZBNENC
RTY4MTFFRUJGRjM1ODcwQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E
EDAOMAwEAgABMAYDBAGdDzQwDQYJKoZIhvcNAQELBQADggEBAJT1TbJpZ79oFKlm
LkAyyEGnWDHNVeXY8BKmMDNysid0Jg9F3O8ruv5Fu/TyK8X8ANXJMcbXT7pyh74k
s0NbrX0AJun2rNMLcGKJbAv4yZ+HMy4WLWYVCwfBKNjDzs0LEoqv46zW5BVa+6xA
sLtBVt81Jg0sNJZsNtKzkat1VFN7WMN0Wy9jsyjVtpZyicgsEpaDzGKnVORuWc0p
Nj85EhOhlb2gI2q6pZ8rO476qEXIj1uTVtwUQRP4EcdNEgIN/RR8b8sNRz6EN1iz
+d5Iyuovx07qMsU/6wioppFj09QJ2rA2LluS4ZwN4C8CI89zZjIbRpnl+OXsLxLP
Qrk5waE=
-----END CERTIFICATE-----
Generated at Sat Apr 5 22:16:33 2025 by rpki-client