Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91B1AE1/FC8243F464E811EF9C40F85AC4F9AE02/1A760026E06311EFB6B86F0AC4F9AE02.roa
File:                     1A760026E06311EFB6B86F0AC4F9AE02.roa (raw, json)
Hash identifier:          BcuVtmOHXLPxkjx7hblzpyOxk5cBOskxSlEb1CxWfWQ=
Subject key identifier:   97:DE:DD:13:2E:06:08:5E:20:22:C1:75:EF:1B:F4:91:16:13:EF:65
Certificate issuer:       /CN=A91B1AE1/serialNumber=C393FE4E35A26744BF3709BC367660489272D2D1
Certificate serial:       74
Authority key identifier: C3:93:FE:4E:35:A2:67:44:BF:37:09:BC:36:76:60:48:92:72:D2:D1
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/w5P-TjWiZ0S_Nwm8NnZgSJJy0tE.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91B1AE1/FC8243F464E811EF9C40F85AC4F9AE02/1A760026E06311EFB6B86F0AC4F9AE02.roa
Signing time:             Tue 11 Mar 2025 06:22:26 +0000
ROA not before:           Tue 11 Mar 2025 06:22:26 +0000
ROA not after:            Mon 02 Mar 2026 00:00:00 +0000
asID:                     152172
IP address blocks:        36.50.110.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91B1AE1/FC8243F464E811EF9C40F85AC4F9AE02/w5P-TjWiZ0S_Nwm8NnZgSJJy0tE.crl
                          rsync://rpki.apnic.net/member_repository/A91B1AE1/FC8243F464E811EF9C40F85AC4F9AE02/w5P-TjWiZ0S_Nwm8NnZgSJJy0tE.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/w5P-TjWiZ0S_Nwm8NnZgSJJy0tE.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 05 Apr 2025 05:08:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 116 (0x74)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91B1AE1
        Validity
            Not Before: Mar 11 06:22:26 2025 GMT
            Not After : Mar  2 00:00:00 2026 GMT
        Subject: CN=67cfd6a2-ab92
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f5:c4:0e:45:13:17:ee:c8:b7:7d:82:ed:96:7f:
                    81:80:67:c6:dc:9c:71:f1:44:40:07:91:de:de:f8:
                    5e:31:de:d8:db:f2:2a:fd:d0:2e:d5:6e:4a:95:82:
                    4f:d8:0a:ca:ba:4e:7b:9d:c0:bb:99:f9:22:76:05:
                    8b:d3:28:f2:3a:93:b0:3c:a5:c2:e4:e3:54:c9:5e:
                    73:ad:95:b6:a1:ad:e5:5f:af:13:db:a0:2d:e0:9f:
                    d2:3a:19:91:21:30:1d:f4:29:a0:73:7c:7a:a5:a6:
                    b6:6a:c8:7f:db:a6:b3:54:85:0c:6f:6f:e1:94:ec:
                    8d:1e:d5:5e:c2:4a:ee:5e:24:b3:d7:18:6f:ca:81:
                    49:94:01:dd:cb:8f:33:6c:02:aa:27:a8:d0:eb:24:
                    ad:f1:a9:55:bf:5a:2b:7b:53:67:d9:f6:d0:ef:ed:
                    4a:30:29:08:01:9a:b0:93:85:6d:17:06:9a:55:ad:
                    d8:85:e9:0f:b9:a4:85:ff:62:b6:ed:7f:28:df:0f:
                    de:58:8e:e7:96:dc:79:c0:65:ae:24:53:11:f5:ca:
                    74:3f:7f:b1:4f:f2:33:27:63:ec:67:d4:44:f6:8b:
                    ba:11:0e:7f:74:20:be:d0:b0:f0:fc:ac:ec:3a:72:
                    b5:cf:bc:38:33:01:27:35:cc:81:6d:1e:96:48:b0:
                    d5:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                97:DE:DD:13:2E:06:08:5E:20:22:C1:75:EF:1B:F4:91:16:13:EF:65
            X509v3 Authority Key Identifier:
                keyid:C3:93:FE:4E:35:A2:67:44:BF:37:09:BC:36:76:60:48:92:72:D2:D1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91B1AE1/FC8243F464E811EF9C40F85AC4F9AE02/w5P-TjWiZ0S_Nwm8NnZgSJJy0tE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/w5P-TjWiZ0S_Nwm8NnZgSJJy0tE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B1AE1/FC8243F464E811EF9C40F85AC4F9AE02/1A760026E06311EFB6B86F0AC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  36.50.110.0/23

    Signature Algorithm: sha256WithRSAEncryption
         39:3d:2c:e0:a7:d0:ad:87:c9:26:52:bf:c5:d9:b4:a5:9e:11:
         3a:eb:66:cc:4b:2d:76:ce:47:83:08:f0:43:f6:ba:66:cc:b2:
         e6:99:00:6a:72:fb:66:70:9c:b1:43:96:6a:62:c7:04:2a:28:
         a0:84:3c:57:6d:bf:f6:ab:76:48:90:3f:6b:b8:04:2c:cd:d5:
         4b:b3:5f:58:0b:cc:df:3e:76:67:4c:41:b1:2e:0a:d1:70:b9:
         e0:17:76:43:9b:41:d4:bc:af:61:9f:4e:6a:60:e1:8c:f9:b3:
         26:4b:91:81:3f:eb:89:15:d4:08:35:f8:c7:e4:37:cb:a7:0c:
         2a:8e:9a:4b:3d:db:b6:7f:57:0d:9c:69:0c:28:d5:7a:5c:72:
         f0:5f:43:b2:0d:09:18:39:3a:5e:be:92:61:a4:4d:ab:ba:f8:
         94:bf:af:73:4b:c5:fe:5a:c2:8a:01:70:dd:c1:62:a8:2d:4e:
         05:b7:d2:76:84:26:db:2f:20:a7:3b:39:dc:8d:36:cf:bf:d7:
         e7:a7:a3:54:a5:fe:ff:bc:6e:a6:82:87:fe:4d:1f:30:19:ae:
         d7:97:6d:eb:7c:6c:b8:a7:3e:e3:35:a8:4a:a4:ec:9a:cf:9f:
         9b:f8:63:1d:02:fb:0c:6e:1e:cb:1b:5b:84:6c:ce:23:03:89:
         a8:1b:84:3d
-----BEGIN CERTIFICATE-----
MIIFcDCCBFigAwIBAgIBdDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFC
MUFFMTExMC8GA1UEBRMoQzM5M0ZFNEUzNUEyNjc0NEJGMzcwOUJDMzY3NjYwNDg5
MjcyRDJEMTAeFw0yNTAzMTEwNjIyMjZaFw0yNjAzMDIwMDAwMDBaMBgxFjAUBgNV
BAMTDTY3Y2ZkNmEyLWFiOTIwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQD1xA5FExfuyLd9gu2Wf4GAZ8bcnHHxREAHkd7e+F4x3tjb8ir90C7VbkqVgk/Y
Csq6TnudwLuZ+SJ2BYvTKPI6k7A8pcLk41TJXnOtlbahreVfrxPboC3gn9I6GZEh
MB30KaBzfHqlprZqyH/bprNUhQxvb+GU7I0e1V7CSu5eJLPXGG/KgUmUAd3LjzNs
AqonqNDrJK3xqVW/Wit7U2fZ9tDv7UowKQgBmrCThW0XBppVrdiF6Q+5pIX/Yrbt
fyjfD95YjueW3HnAZa4kUxH1ynQ/f7FP8jMnY+xn1ET2i7oRDn90IL7QsPD8rOw6
crXPvDgzASc1zIFtHpZIsNVjAgMBAAGjggKVMIICkTAdBgNVHQ4EFgQUl97dEy4G
CF4gIsF17xv0kRYT72UwHwYDVR0jBBgwFoAUw5P+TjWiZ0S/Nwm8NnZgSJJy0tEw
DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUIxQUUxL0ZDODI0M0Y0NjRF
ODExRUY5QzQwRjg1QUM0RjlBRTAyL3c1UC1UaldpWjBTX053bThOblpnU0pKeTB0
RS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG
RDFGRjIvdzVQLVRqV2laMFNfTndtOE5uWmdTSkp5MHRFLmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwgcsGCCsGAQUFBwELBIG+MIG7MIGDBggrBgEFBQcw
C4Z3cnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC
MUFFMS9GQzgyNDNGNDY0RTgxMUVGOUM0MEY4NUFDNEY5QUUwMi8xQTc2MDAyNkUw
NjMxMUVGQjZCODZGMEFDNEY5QUUwMi5yb2EwMwYIKwYBBQUHMA2GJ2h0dHBzOi8v
cnJkcC5hcG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAfBggrBgEFBQcBBwEB/wQQ
MA4wDAQCAAEwBgMEASQybjANBgkqhkiG9w0BAQsFAAOCAQEAOT0s4KfQrYfJJlK/
xdm0pZ4ROutmzEstds5HgwjwQ/a6Zsyy5pkAanL7ZnCcsUOWamLHBCoooIQ8V22/
9qt2SJA/a7gELM3VS7NfWAvM3z52Z0xBsS4K0XC54Bd2Q5tB1LyvYZ9OamDhjPmz
JkuRgT/riRXUCDX4x+Q3y6cMKo6aSz3btn9XDZxpDCjVelxy8F9Dsg0JGDk6Xr6S
YaRNq7r4lL+vc0vF/lrCigFw3cFiqC1OBbfSdoQm2y8gpzs53I02z7/X56ejVKX+
/7xupoKH/k0fMBmu15dt63xsuKc+4zWoSqTsms+fm/hjHQL7DG4eyxtbhGzOIwOJ
qBuEPQ==
-----END CERTIFICATE-----
Generated at Sat Apr 5 01:58:00 2025 by rpki-client