Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9145B13/4637FBF2B12811EFB750A52BC4F9AE02/05E4CBECB12911EF993BC12DC4F9AE02.roa
File:                     05E4CBECB12911EF993BC12DC4F9AE02.roa (raw, json)
Hash identifier:          6bS2IOUFxNL/dxgXXkv7hlgTjA3VB1/wSeyQ+zl4/9o=
Subject key identifier:   7F:23:99:15:34:DD:F0:D7:38:5B:6B:FC:75:13:26:E0:75:34:45:6B
Certificate issuer:       /CN=A9145B13/serialNumber=E3F16F9D73CCEE2693915A244F44B553A4DB3DCC
Certificate serial:       02
Authority key identifier: E3:F1:6F:9D:73:CC:EE:26:93:91:5A:24:4F:44:B5:53:A4:DB:3D:CC
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/4_FvnXPM7iaTkVokT0S1U6TbPcw.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9145B13/4637FBF2B12811EFB750A52BC4F9AE02/05E4CBECB12911EF993BC12DC4F9AE02.roa
Signing time:             Tue 03 Dec 2024 03:45:22 +0000
ROA not before:           Tue 03 Dec 2024 03:45:22 +0000
ROA not after:            Mon 02 Mar 2026 00:00:00 +0000
asID:                     153466
IP address blocks:        160.250.142.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9145B13/4637FBF2B12811EFB750A52BC4F9AE02/4_FvnXPM7iaTkVokT0S1U6TbPcw.crl
                          rsync://rpki.apnic.net/member_repository/A9145B13/4637FBF2B12811EFB750A52BC4F9AE02/4_FvnXPM7iaTkVokT0S1U6TbPcw.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/4_FvnXPM7iaTkVokT0S1U6TbPcw.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 24 Apr 2025 06:12:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2 (0x2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9145B13, serialNumber=E3F16F9D73CCEE2693915A244F44B553A4DB3DCC
        Validity
            Not Before: Dec  3 03:45:22 2024 GMT
            Not After : Mar  2 00:00:00 2026 GMT
        Subject: CN=674e7ed2-b9e0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:b6:ca:fc:f7:91:df:0b:42:26:57:3a:66:88:
                    94:81:2f:5a:dd:ad:83:87:11:59:9e:58:fa:65:2b:
                    ba:12:54:89:89:2c:36:f1:23:bc:07:92:bd:bf:53:
                    1f:3e:f3:ce:c3:bb:ad:84:49:e2:2d:9b:4c:07:43:
                    94:9b:2e:d6:48:36:81:fa:f4:8c:8e:56:ff:f8:d7:
                    8a:03:30:1d:21:7e:88:50:7a:92:66:57:67:86:ae:
                    4b:87:1d:62:a6:a2:d9:99:1b:81:91:9e:d2:a8:29:
                    08:18:94:2a:e2:46:b2:b8:6c:b6:ef:64:f0:c5:e1:
                    a7:d6:72:44:88:03:d9:d0:fc:7f:eb:38:14:b2:b7:
                    ee:f3:d6:d8:d0:ad:01:9c:9d:1d:0a:59:69:d2:18:
                    f5:c2:61:ac:e5:e9:c9:2b:1f:ed:48:88:cb:34:66:
                    a0:90:06:39:7d:cf:26:8b:71:ef:d1:2b:25:04:23:
                    b5:2c:90:cc:69:51:fe:22:44:45:fd:8e:2d:82:f2:
                    9c:00:00:97:0e:7c:53:91:4c:87:52:73:7b:0f:63:
                    1b:ac:cd:a3:d2:e0:7d:12:4c:68:e9:c2:85:f8:a4:
                    8e:dc:3f:5e:ac:17:cb:4f:3c:f0:3d:20:bc:f0:05:
                    d5:64:cd:ea:f9:bf:26:9b:0a:5b:9f:54:a0:4c:0b:
                    c4:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7F:23:99:15:34:DD:F0:D7:38:5B:6B:FC:75:13:26:E0:75:34:45:6B
            X509v3 Authority Key Identifier:
                keyid:E3:F1:6F:9D:73:CC:EE:26:93:91:5A:24:4F:44:B5:53:A4:DB:3D:CC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9145B13/4637FBF2B12811EFB750A52BC4F9AE02/4_FvnXPM7iaTkVokT0S1U6TbPcw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/4_FvnXPM7iaTkVokT0S1U6TbPcw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9145B13/4637FBF2B12811EFB750A52BC4F9AE02/05E4CBECB12911EF993BC12DC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  160.250.142.0/23

    Signature Algorithm: sha256WithRSAEncryption
         22:37:43:65:6c:5a:2d:b4:ac:35:e3:c4:1f:1b:be:b3:2f:ae:
         7e:c0:7a:87:f6:28:ac:6f:97:4a:df:01:5b:09:a4:67:62:e5:
         17:19:17:80:24:2b:13:7e:f9:2a:84:95:bb:b9:a5:d9:4f:35:
         47:56:2a:0a:ef:f1:9a:26:ca:af:fd:29:51:9e:c2:5e:6b:b0:
         19:4b:a1:7a:4a:d1:aa:e0:71:10:bb:dd:86:ea:ed:8e:10:26:
         7f:e8:ae:6f:df:05:9b:3d:3c:5d:89:35:3d:a5:59:35:f9:2a:
         3a:08:2a:61:6b:db:19:b2:ee:b7:98:34:ba:ce:69:30:60:4a:
         44:d9:e9:89:72:6d:3e:e9:a6:3c:18:a3:9c:31:f2:ae:ee:83:
         6d:0e:29:de:7a:6c:14:72:e6:36:74:b2:bf:0f:63:d2:37:3f:
         42:9f:36:40:54:f5:00:96:b4:81:e3:ef:1f:64:b0:fa:99:b4:
         0c:f1:f6:77:f4:38:4c:e9:79:d8:7a:9b:1f:c6:c5:7a:32:5d:
         18:0f:0a:44:33:ff:27:f6:a3:eb:98:41:91:3b:04:33:64:f9:
         ef:52:4b:34:e7:e4:e6:4f:49:3a:ea:fb:b6:58:8d:4a:63:a9:
         76:85:7e:df:b3:4d:a8:6f:2e:e7:97:fc:18:bb:9d:92:09:32:
         47:fb:93:56
-----BEGIN CERTIFICATE-----
MIIFcDCCBFigAwIBAgIBAjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE0
NUIxMzExMC8GA1UEBRMoRTNGMTZGOUQ3M0NDRUUyNjkzOTE1QTI0NEY0NEI1NTNB
NERCM0RDQzAeFw0yNDEyMDMwMzQ1MjJaFw0yNjAzMDIwMDAwMDBaMBgxFjAUBgNV
BAMTDTY3NGU3ZWQyLWI5ZTAwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQCttsr895HfC0ImVzpmiJSBL1rdrYOHEVmeWPplK7oSVImJLDbxI7wHkr2/Ux8+
887Du62ESeItm0wHQ5SbLtZINoH69IyOVv/414oDMB0hfohQepJmV2eGrkuHHWKm
otmZG4GRntKoKQgYlCriRrK4bLbvZPDF4afWckSIA9nQ/H/rOBSyt+7z1tjQrQGc
nR0KWWnSGPXCYazl6ckrH+1IiMs0ZqCQBjl9zyaLce/RKyUEI7UskMxpUf4iREX9
ji2C8pwAAJcOfFORTIdSc3sPYxuszaPS4H0STGjpwoX4pI7cP16sF8tPPPA9ILzw
BdVkzer5vyabClufVKBMC8RDAgMBAAGjggKVMIICkTAdBgNVHQ4EFgQUfyOZFTTd
8Nc4W2v8dRMm4HU0RWswHwYDVR0jBBgwFoAU4/FvnXPM7iaTkVokT0S1U6TbPcww
DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTQ1QjEzLzQ2MzdGQkYyQjEy
ODExRUZCNzUwQTUyQkM0RjlBRTAyLzRfRnZuWFBNN2lhVGtWb2tUMFMxVTZUYlBj
dy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG
RDFGRjIvNF9Gdm5YUE03aWFUa1Zva1QwUzFVNlRiUGN3LmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwgcsGCCsGAQUFBwELBIG+MIG7MIGDBggrBgEFBQcw
C4Z3cnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0
NUIxMy80NjM3RkJGMkIxMjgxMUVGQjc1MEE1MkJDNEY5QUUwMi8wNUU0Q0JFQ0Ix
MjkxMUVGOTkzQkMxMkRDNEY5QUUwMi5yb2EwMwYIKwYBBQUHMA2GJ2h0dHBzOi8v
cnJkcC5hcG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAfBggrBgEFBQcBBwEB/wQQ
MA4wDAQCAAEwBgMEAaD6jjANBgkqhkiG9w0BAQsFAAOCAQEAIjdDZWxaLbSsNePE
Hxu+sy+ufsB6h/YorG+XSt8BWwmkZ2LlFxkXgCQrE375KoSVu7ml2U81R1YqCu/x
mibKr/0pUZ7CXmuwGUuhekrRquBxELvdhurtjhAmf+iub98Fmz08XYk1PaVZNfkq
OggqYWvbGbLut5g0us5pMGBKRNnpiXJtPummPBijnDHyru6DbQ4p3npsFHLmNnSy
vw9j0jc/Qp82QFT1AJa0gePvH2Sw+pm0DPH2d/Q4TOl52HqbH8bFejJdGA8KRDP/
J/aj65hBkTsEM2T571JLNOfk5k9JOur7tliNSmOpdoV+37NNqG8u55f8GLudkgky
R/uTVg==
-----END CERTIFICATE-----
Generated at Fri Apr 18 14:32:59 2025 by rpki-client