Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A913DAC6/59EBE2AE5EC511EFB43A1842C4F9AE02/B01E86045EC511EFA4479F42C4F9AE02.roa
File:                     B01E86045EC511EFA4479F42C4F9AE02.roa (raw, json)
Hash identifier:          yDqC4T9k/RQEkfG5fQ7+DRcSfQmuJV8SSd24ypWwq18=
Subject key identifier:   C4:EB:59:7B:B4:AF:0B:62:1E:BA:3F:09:66:93:41:F1:87:16:23:76
Certificate issuer:       /CN=A913DAC6/serialNumber=FC792F1D62F295DF441FA21E8F3BCF27CA610630
Certificate serial:       02
Authority key identifier: FC:79:2F:1D:62:F2:95:DF:44:1F:A2:1E:8F:3B:CF:27:CA:61:06:30
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_HkvHWLyld9EH6IejzvPJ8phBjA.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A913DAC6/59EBE2AE5EC511EFB43A1842C4F9AE02/B01E86045EC511EFA4479F42C4F9AE02.roa
Signing time:             Tue 20 Aug 2024 07:27:43 +0000
ROA not before:           Tue 20 Aug 2024 07:27:43 +0000
ROA not after:            Sun 31 Aug 2025 00:00:00 +0000
asID:                     137998
IP address blocks:        203.25.165.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A913DAC6/59EBE2AE5EC511EFB43A1842C4F9AE02/_HkvHWLyld9EH6IejzvPJ8phBjA.crl
                          rsync://rpki.apnic.net/member_repository/A913DAC6/59EBE2AE5EC511EFB43A1842C4F9AE02/_HkvHWLyld9EH6IejzvPJ8phBjA.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_HkvHWLyld9EH6IejzvPJ8phBjA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 30 Nov 2024 02:50:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2 (0x2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A913DAC6/serialNumber=FC792F1D62F295DF441FA21E8F3BCF27CA610630
        Validity
            Not Before: Aug 20 07:27:43 2024 GMT
            Not After : Aug 31 00:00:00 2025 GMT
        Subject: CN=66c4456f-c1fb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:e0:03:64:30:13:38:38:6a:ec:58:fe:68:d3:
                    88:50:a4:a7:a8:4a:d9:40:17:07:5b:6a:2b:94:0c:
                    76:8b:fd:7a:fd:39:5d:bd:a7:c4:be:01:95:89:9d:
                    c9:5c:33:e2:64:c2:ce:41:05:88:1b:b9:20:c8:06:
                    79:2e:bc:a0:cc:3b:23:6f:6e:b0:6c:35:f8:3e:d0:
                    3d:7c:0d:30:c7:64:41:5b:c5:52:73:06:a7:76:a9:
                    b7:aa:1f:d4:b8:3e:1c:76:08:d0:a6:0f:02:e7:e3:
                    8b:fd:f2:3e:f1:95:38:98:d5:89:84:12:5c:32:0f:
                    29:20:ce:14:01:aa:8e:9a:6d:26:c1:b2:cd:a4:ac:
                    64:19:fc:96:9b:c7:b7:98:bf:01:e2:14:a7:2e:93:
                    c5:df:12:cd:97:4e:eb:b0:c7:49:2a:77:de:97:bc:
                    20:30:8e:71:e8:02:01:6f:ad:b8:30:8f:66:6b:d3:
                    63:92:51:6b:a6:18:66:d5:97:22:07:c7:6c:ce:bf:
                    19:96:f3:bc:18:47:a6:09:ee:67:60:f3:42:f9:47:
                    de:06:20:a2:c9:56:f0:2c:1a:2c:fb:d5:1e:2d:30:
                    9d:be:0a:6d:ae:1d:79:65:67:4c:ed:f4:fe:86:19:
                    ae:60:63:52:5a:8e:cb:bb:88:3f:b3:31:a1:53:f3:
                    ef:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C4:EB:59:7B:B4:AF:0B:62:1E:BA:3F:09:66:93:41:F1:87:16:23:76
            X509v3 Authority Key Identifier:
                keyid:FC:79:2F:1D:62:F2:95:DF:44:1F:A2:1E:8F:3B:CF:27:CA:61:06:30

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A913DAC6/59EBE2AE5EC511EFB43A1842C4F9AE02/_HkvHWLyld9EH6IejzvPJ8phBjA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_HkvHWLyld9EH6IejzvPJ8phBjA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913DAC6/59EBE2AE5EC511EFB43A1842C4F9AE02/B01E86045EC511EFA4479F42C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  203.25.165.0/24

    Signature Algorithm: sha256WithRSAEncryption
         76:4e:41:84:d3:a8:44:c1:b0:c5:d6:99:4b:c7:66:5d:1c:86:
         48:12:1e:db:82:81:72:b2:fe:8f:70:7f:bb:93:e3:b9:fa:f8:
         3d:29:f7:93:58:c0:f5:e2:dc:5c:07:27:f2:82:e8:5f:e4:3a:
         30:35:90:21:02:0e:0b:12:55:66:95:35:0b:1c:cb:b6:91:03:
         f3:b3:89:35:b9:d9:ea:a2:c1:41:eb:39:40:b9:a8:31:cd:00:
         50:30:9a:be:8b:f0:29:7e:16:48:1a:f8:1b:30:7f:a7:01:fc:
         be:38:91:f8:a3:17:67:43:59:a8:21:13:48:f3:d3:a1:14:af:
         b7:a9:0b:6a:79:6b:3e:84:6a:4b:38:31:af:0d:c5:c4:57:a0:
         7d:f4:7d:20:1f:16:04:b9:6c:ac:67:00:49:c9:79:02:43:df:
         31:74:fb:60:77:27:0d:b4:56:48:c9:00:63:62:8d:07:c5:2d:
         9a:54:d4:29:d0:2c:b0:cd:bb:4c:35:72:be:2c:12:f8:03:7a:
         89:d3:c0:be:d0:bb:22:07:13:02:a5:e3:e2:03:69:44:33:be:
         a4:57:b1:37:ed:08:ab:63:c2:9e:25:0e:5e:94:2f:46:a3:9b:
         55:6b:bc:df:7c:0f:59:f7:ce:84:4d:52:26:db:dc:a8:dc:c9:
         3e:ad:78:12
-----BEGIN CERTIFICATE-----
MIIFcDCCBFigAwIBAgIBAjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTEz
REFDNjExMC8GA1UEBRMoRkM3OTJGMUQ2MkYyOTVERjQ0MUZBMjFFOEYzQkNGMjdD
QTYxMDYzMDAeFw0yNDA4MjAwNzI3NDNaFw0yNTA4MzEwMDAwMDBaMBgxFjAUBgNV
BAMTDTY2YzQ0NTZmLWMxZmIwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQC+4ANkMBM4OGrsWP5o04hQpKeoStlAFwdbaiuUDHaL/Xr9OV29p8S+AZWJnclc
M+Jkws5BBYgbuSDIBnkuvKDMOyNvbrBsNfg+0D18DTDHZEFbxVJzBqd2qbeqH9S4
Phx2CNCmDwLn44v98j7xlTiY1YmEElwyDykgzhQBqo6abSbBss2krGQZ/Jabx7eY
vwHiFKcuk8XfEs2XTuuwx0kqd96XvCAwjnHoAgFvrbgwj2Zr02OSUWumGGbVlyIH
x2zOvxmW87wYR6YJ7mdg80L5R94GIKLJVvAsGiz71R4tMJ2+Cm2uHXllZ0zt9P6G
Ga5gY1Jajsu7iD+zMaFT8++tAgMBAAGjggKVMIICkTAdBgNVHQ4EFgQUxOtZe7Sv
C2Ieuj8JZpNB8YcWI3YwHwYDVR0jBBgwFoAU/HkvHWLyld9EH6IejzvPJ8phBjAw
DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTNEQUM2LzU5RUJFMkFFNUVD
NTExRUZCNDNBMTg0MkM0RjlBRTAyL19Ia3ZIV0x5bGQ5RUg2SWVqenZQSjhwaEJq
QS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG
RDFGRjIvX0hrdkhXTHlsZDlFSDZJZWp6dlBKOHBoQmpBLmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwgcsGCCsGAQUFBwELBIG+MIG7MIGDBggrBgEFBQcw
C4Z3cnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz
REFDNi81OUVCRTJBRTVFQzUxMUVGQjQzQTE4NDJDNEY5QUUwMi9CMDFFODYwNDVF
QzUxMUVGQTQ0NzlGNDJDNEY5QUUwMi5yb2EwMwYIKwYBBQUHMA2GJ2h0dHBzOi8v
cnJkcC5hcG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAfBggrBgEFBQcBBwEB/wQQ
MA4wDAQCAAEwBgMEAMsZpTANBgkqhkiG9w0BAQsFAAOCAQEAdk5BhNOoRMGwxdaZ
S8dmXRyGSBIe24KBcrL+j3B/u5Pjufr4PSn3k1jA9eLcXAcn8oLoX+Q6MDWQIQIO
CxJVZpU1CxzLtpED87OJNbnZ6qLBQes5QLmoMc0AUDCavovwKX4WSBr4GzB/pwH8
vjiR+KMXZ0NZqCETSPPToRSvt6kLanlrPoRqSzgxrw3FxFegffR9IB8WBLlsrGcA
Scl5AkPfMXT7YHcnDbRWSMkAY2KNB8UtmlTUKdAssM27TDVyviwS+AN6idPAvtC7
IgcTAqXj4gNpRDO+pFexN+0Iq2PCniUOXpQvRqObVWu833wPWffOhE1SJtvcqNzJ
Pq14Eg==
-----END CERTIFICATE-----
Generated at Sat Nov 23 07:45:02 2024 by rpki-client on console-ams.rpki-client.org