Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91462B5/6D5FED92CC2F11EC85538037C4F9AE02/0534699EFBE511EFA186694BC4F9AE02.roa
File:                     0534699EFBE511EFA186694BC4F9AE02.roa (raw, json)
Hash identifier:          GSRflamgYfmiMSGgOVwzrsGpbOS/t7mfSPncCgDxV6M=
Subject key identifier:   C0:BB:17:3B:14:21:25:B0:11:6F:CD:75:15:4D:61:31:ED:1A:9B:39
Certificate issuer:       /CN=A91462B5/serialNumber=6483198A5054D4AB7A0161CD6391FA6C14B00208
Certificate serial:       034D
Authority key identifier: 64:83:19:8A:50:54:D4:AB:7A:01:61:CD:63:91:FA:6C:14:B0:02:08
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZIMZilBU1Kt6AWHNY5H6bBSwAgg.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91462B5/6D5FED92CC2F11EC85538037C4F9AE02/0534699EFBE511EFA186694BC4F9AE02.roa
Signing time:             Sat 08 Mar 2025 06:17:32 +0000
ROA not before:           Sat 08 Mar 2025 06:17:32 +0000
ROA not after:            Wed 30 Jul 2025 00:00:00 +0000
asID:                     134687
IP address blocks:        157.119.22.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91462B5/6D5FED92CC2F11EC85538037C4F9AE02/ZIMZilBU1Kt6AWHNY5H6bBSwAgg.crl
                          rsync://rpki.apnic.net/member_repository/A91462B5/6D5FED92CC2F11EC85538037C4F9AE02/ZIMZilBU1Kt6AWHNY5H6bBSwAgg.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZIMZilBU1Kt6AWHNY5H6bBSwAgg.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 12 Apr 2025 01:22:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 845 (0x34d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91462B5
        Validity
            Not Before: Mar  8 06:17:32 2025 GMT
            Not After : Jul 30 00:00:00 2025 GMT
        Subject: CN=67cbe0fc-6d5b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:78:b0:8d:d4:e4:37:f2:5a:ba:4b:98:4f:eb:
                    88:3c:33:c8:3a:57:d4:f1:b2:c3:ce:74:df:b2:db:
                    fd:a7:e6:a9:61:8e:d3:ea:cc:55:be:93:02:ff:a4:
                    91:c7:00:2b:e2:32:d8:df:ff:2d:bd:b5:60:fd:11:
                    1b:32:a2:4d:57:46:bf:f8:04:3d:67:aa:cb:6e:98:
                    4a:b5:48:ff:14:58:7b:53:6c:27:4e:f2:1e:47:f5:
                    1f:01:f5:8c:e8:b5:54:b7:8c:ea:22:4e:74:a7:88:
                    36:55:e6:80:c5:92:ab:d2:0a:c0:ed:b1:80:37:08:
                    23:df:0d:d9:9e:f6:45:5e:10:8a:71:2a:d3:26:36:
                    03:8e:d7:27:b3:3a:f0:5e:c3:f6:69:02:e2:e4:4f:
                    47:c7:4e:b1:6d:5d:f2:14:f5:f9:b1:bf:23:86:b9:
                    a3:7e:f0:83:82:ec:be:9e:50:26:36:1e:34:81:1b:
                    f4:6a:4d:11:4a:8c:ed:ba:c7:8a:a9:a6:9a:3a:77:
                    9a:71:47:06:ed:e1:f7:cb:41:90:18:b1:c1:9b:c4:
                    92:9d:88:45:5d:f6:21:3d:40:fd:4c:62:5e:6b:c1:
                    2f:c5:78:bd:92:57:01:c3:67:0e:1a:38:b7:ec:25:
                    db:00:00:6a:80:5c:60:91:27:3f:01:31:71:aa:ce:
                    f2:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C0:BB:17:3B:14:21:25:B0:11:6F:CD:75:15:4D:61:31:ED:1A:9B:39
            X509v3 Authority Key Identifier:
                keyid:64:83:19:8A:50:54:D4:AB:7A:01:61:CD:63:91:FA:6C:14:B0:02:08

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91462B5/6D5FED92CC2F11EC85538037C4F9AE02/ZIMZilBU1Kt6AWHNY5H6bBSwAgg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZIMZilBU1Kt6AWHNY5H6bBSwAgg.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91462B5/6D5FED92CC2F11EC85538037C4F9AE02/0534699EFBE511EFA186694BC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  157.119.22.0/24

    Signature Algorithm: sha256WithRSAEncryption
         b2:84:aa:a6:46:bf:10:77:9c:2a:9a:72:a4:fe:d6:bc:81:ef:
         9e:17:11:bc:18:e0:91:f2:02:60:91:ca:f8:cf:be:02:a0:e5:
         1b:4e:ea:34:9c:cb:23:d5:d2:b0:d3:5d:1d:80:4c:30:18:02:
         94:de:8e:77:6b:c4:8b:aa:6f:d2:54:7e:64:47:a7:2d:5e:5d:
         14:05:4c:2c:4c:6f:de:f0:3b:92:a5:bc:87:b7:d0:ff:d2:e0:
         7b:4b:7b:d0:1d:e8:49:80:61:34:6d:66:b4:a2:8e:1b:d7:cb:
         a2:29:14:58:4d:67:c9:dd:0d:f0:65:2f:88:5c:11:6f:2c:5f:
         9a:cc:43:61:0e:69:09:cf:82:39:94:35:8b:36:95:69:c1:34:
         f7:f3:27:53:77:4c:77:b3:da:aa:ae:eb:36:3c:cb:60:70:9a:
         86:ce:a5:7b:56:ee:de:9f:76:43:15:7f:9b:4e:ae:1b:48:4a:
         32:cc:9a:20:58:e6:de:09:16:75:f5:fb:0c:83:7c:05:92:35:
         e3:e2:4f:3a:15:00:e5:40:89:ad:09:d1:c6:d3:ca:51:dc:76:
         38:e8:8f:e0:36:58:00:9e:7c:78:ff:a6:ac:35:89:26:4f:74:
         68:a6:8f:20:68:2c:a1:d5:99:2b:17:77:96:36:99:0c:f3:02:
         60:1d:e6:c4
-----BEGIN CERTIFICATE-----
MIIFcTCCBFmgAwIBAgICA00wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NDYyQjUxMTAvBgNVBAUTKDY0ODMxOThBNTA1NEQ0QUI3QTAxNjFDRDYzOTFGQTZD
MTRCMDAyMDgwHhcNMjUwMzA4MDYxNzMyWhcNMjUwNzMwMDAwMDAwWjAYMRYwFAYD
VQQDEw02N2NiZTBmYy02ZDViMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAxHiwjdTkN/JaukuYT+uIPDPIOlfU8bLDznTfstv9p+apYY7T6sxVvpMC/6SR
xwAr4jLY3/8tvbVg/REbMqJNV0a/+AQ9Z6rLbphKtUj/FFh7U2wnTvIeR/UfAfWM
6LVUt4zqIk50p4g2VeaAxZKr0grA7bGANwgj3w3ZnvZFXhCKcSrTJjYDjtcnszrw
XsP2aQLi5E9Hx06xbV3yFPX5sb8jhrmjfvCDguy+nlAmNh40gRv0ak0RSoztuseK
qaaaOneacUcG7eH3y0GQGLHBm8SSnYhFXfYhPUD9TGJea8EvxXi9klcBw2cOGji3
7CXbAABqgFxgkSc/ATFxqs7yBwIDAQABo4IClTCCApEwHQYDVR0OBBYEFMC7FzsU
ISWwEW/NdRVNYTHtGps5MB8GA1UdIwQYMBaAFGSDGYpQVNSregFhzWOR+mwUsAII
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0NjJCNS82RDVGRUQ5MkND
MkYxMUVDODU1MzgwMzdDNEY5QUUwMi9aSU1aaWxCVTFLdDZBV0hOWTVINmJCU3dB
Z2cuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL1pJTVppbEJVMUt0NkFXSE5ZNUg2YkJTd0FnZy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
NDYyQjUvNkQ1RkVEOTJDQzJGMTFFQzg1NTM4MDM3QzRGOUFFMDIvMDUzNDY5OUVG
QkU1MTFFRkExODY2OTRCQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E
EDAOMAwEAgABMAYDBACddxYwDQYJKoZIhvcNAQELBQADggEBALKEqqZGvxB3nCqa
cqT+1ryB754XEbwY4JHyAmCRyvjPvgKg5RtO6jScyyPV0rDTXR2ATDAYApTejndr
xIuqb9JUfmRHpy1eXRQFTCxMb97wO5KlvIe30P/S4HtLe9Ad6EmAYTRtZrSijhvX
y6IpFFhNZ8ndDfBlL4hcEW8sX5rMQ2EOaQnPgjmUNYs2lWnBNPfzJ1N3THez2qqu
6zY8y2BwmobOpXtW7t6fdkMVf5tOrhtISjLMmiBY5t4JFnX1+wyDfAWSNePiTzoV
AOVAia0J0cbTylHcdjjoj+A2WACefHj/pqw1iSZPdGimjyBoLKHVmSsXd5Y2mQzz
AmAd5sQ=
-----END CERTIFICATE-----
Generated at Sun Apr 6 17:25:21 2025 by rpki-client