Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91B625F/22D91F7211CE11EB8AD05A2BC4F9AE02/82CA92C4703A11EBB9A2D47AC4F9AE02.roa
File:                     82CA92C4703A11EBB9A2D47AC4F9AE02.roa (raw, json)
Hash identifier:          Y/iBnK8ZipjxkATaALxABZ9CTEeJIdjjxY8Yxx9n9DM=
Subject key identifier:   A2:09:7F:47:64:B3:FA:80:66:F5:F5:03:B6:71:E5:05:26:BB:89:AB
Certificate issuer:       /CN=A91B625F/serialNumber=E155B82A87D28E877602F994F8FFD3E744AAF480
Certificate serial:       079A
Authority key identifier: E1:55:B8:2A:87:D2:8E:87:76:02:F9:94:F8:FF:D3:E7:44:AA:F4:80
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4VW4KofSjod2AvmU-P_T50Sq9IA.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91B625F/22D91F7211CE11EB8AD05A2BC4F9AE02/82CA92C4703A11EBB9A2D47AC4F9AE02.roa
Signing time:             Tue 10 Dec 2024 21:50:47 +0000
ROA not before:           Tue 10 Dec 2024 21:50:47 +0000
ROA not after:            Sat 31 Jan 2026 00:00:00 +0000
asID:                     140936
IP address blocks:        2406:9dc0:6660::/44 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91B625F/22D91F7211CE11EB8AD05A2BC4F9AE02/4VW4KofSjod2AvmU-P_T50Sq9IA.crl
                          rsync://rpki.apnic.net/member_repository/A91B625F/22D91F7211CE11EB8AD05A2BC4F9AE02/4VW4KofSjod2AvmU-P_T50Sq9IA.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4VW4KofSjod2AvmU-P_T50Sq9IA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 11 Apr 2025 21:39:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1946 (0x79a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91B625F
        Validity
            Not Before: Dec 10 21:50:47 2024 GMT
            Not After : Jan 31 00:00:00 2026 GMT
        Subject: CN=6758b7b7-03a5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:27:07:f4:14:a4:24:16:40:9d:31:d6:c4:5d:
                    11:65:cc:e1:99:4b:01:c9:98:66:fa:ed:28:11:29:
                    03:43:42:de:e4:09:ac:c0:7c:5e:b6:82:2a:f6:fd:
                    16:44:7b:9e:89:fd:d8:53:23:2c:29:e5:93:45:09:
                    f4:50:29:d9:0a:80:0b:c0:fc:66:04:18:6e:93:9a:
                    7e:51:0d:96:fb:bf:83:0c:4e:1d:ee:f9:5e:9d:6d:
                    2a:60:f0:40:ac:99:48:0e:c1:ad:7e:1c:ba:d7:07:
                    99:85:80:48:4a:69:4d:64:5e:b9:11:39:f3:bf:4b:
                    aa:e6:60:3b:f5:c0:eb:13:99:20:0c:df:ee:0d:3f:
                    01:97:62:ca:b9:90:35:2e:9e:28:78:34:ee:2f:9f:
                    50:35:32:6b:f0:fc:55:cb:f4:43:bb:2e:a9:89:c6:
                    e0:48:ba:4a:ae:c8:51:f5:8c:d6:9b:0b:ec:dd:ae:
                    3a:ab:5a:62:1e:75:11:fa:7e:55:8d:3a:86:8e:1d:
                    38:47:ce:31:a0:bb:58:7c:28:a1:28:73:f1:b2:b2:
                    76:1a:66:c5:01:c2:37:2d:2b:d3:cb:c9:bd:ea:b9:
                    c2:78:22:8e:c0:ff:fb:d3:d9:33:78:4f:ee:24:06:
                    f1:ba:8a:35:1b:7b:58:1e:0d:2e:14:a9:ae:00:63:
                    f5:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A2:09:7F:47:64:B3:FA:80:66:F5:F5:03:B6:71:E5:05:26:BB:89:AB
            X509v3 Authority Key Identifier:
                keyid:E1:55:B8:2A:87:D2:8E:87:76:02:F9:94:F8:FF:D3:E7:44:AA:F4:80

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91B625F/22D91F7211CE11EB8AD05A2BC4F9AE02/4VW4KofSjod2AvmU-P_T50Sq9IA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4VW4KofSjod2AvmU-P_T50Sq9IA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B625F/22D91F7211CE11EB8AD05A2BC4F9AE02/82CA92C4703A11EBB9A2D47AC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  2406:9dc0:6660::/44

    Signature Algorithm: sha256WithRSAEncryption
         7b:63:43:66:af:dd:b1:08:a4:01:b0:c3:78:78:af:b4:74:92:
         cb:30:2b:a6:b4:b2:0a:ca:a3:dd:b6:ea:9d:80:a9:f2:1d:98:
         63:79:09:18:64:21:93:2b:b6:1a:93:1e:5f:4c:6e:c3:af:2b:
         9c:eb:21:31:55:5b:39:9a:56:d1:9f:78:99:9e:2a:bd:36:3a:
         b5:0b:f3:8c:fe:e1:02:7b:c6:f4:9e:0f:90:ee:97:fd:f3:17:
         b7:84:48:c5:27:3b:3d:34:72:72:81:fc:9a:c6:05:50:c8:f5:
         f2:52:c7:f9:f0:f5:96:63:d7:51:ca:54:96:37:4c:d0:73:4c:
         9d:6b:ac:21:ca:48:d8:1c:38:8d:5c:94:4e:db:c7:c6:41:92:
         22:4f:c6:d3:d5:2d:f2:da:b9:b1:a8:6f:be:f9:00:5e:e6:a2:
         d2:19:6f:e3:94:19:cf:a0:82:ea:87:88:8f:59:6e:be:c4:cc:
         14:c5:bc:87:11:d2:70:4e:49:9f:12:fd:45:4a:20:94:b1:f6:
         58:ae:dc:08:63:d8:2f:a0:c4:d2:39:8c:c5:0e:d6:5d:99:e8:
         40:e4:3f:1c:41:4f:60:a7:12:2b:65:4d:9a:c0:f8:9f:56:7f:
         ca:b0:be:20:82:60:f1:5b:aa:1d:1c:6d:0c:9f:c9:0c:de:08:
         a4:b7:37:82
-----BEGIN CERTIFICATE-----
MIIFdDCCBFygAwIBAgICB5owDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QjYyNUYxMTAvBgNVBAUTKEUxNTVCODJBODdEMjhFODc3NjAyRjk5NEY4RkZEM0U3
NDRBQUY0ODAwHhcNMjQxMjEwMjE1MDQ3WhcNMjYwMTMxMDAwMDAwWjAYMRYwFAYD
VQQDEw02NzU4YjdiNy0wM2E1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAxScH9BSkJBZAnTHWxF0RZczhmUsByZhm+u0oESkDQ0Le5AmswHxetoIq9v0W
RHueif3YUyMsKeWTRQn0UCnZCoALwPxmBBhuk5p+UQ2W+7+DDE4d7vlenW0qYPBA
rJlIDsGtfhy61weZhYBISmlNZF65ETnzv0uq5mA79cDrE5kgDN/uDT8Bl2LKuZA1
Lp4oeDTuL59QNTJr8PxVy/RDuy6picbgSLpKrshR9YzWmwvs3a46q1piHnUR+n5V
jTqGjh04R84xoLtYfCihKHPxsrJ2GmbFAcI3LSvTy8m96rnCeCKOwP/709kzeE/u
JAbxuoo1G3tYHg0uFKmuAGP1bQIDAQABo4ICmDCCApQwHQYDVR0OBBYEFKIJf0dk
s/qAZvX1A7Zx5QUmu4mrMB8GA1UdIwQYMBaAFOFVuCqH0o6HdgL5lPj/0+dEqvSA
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCNjI1Ri8yMkQ5MUY3MjEx
Q0UxMUVCOEFEMDVBMkJDNEY5QUUwMi80Vlc0S29mU2pvZDJBdm1VLVBfVDUwU3E5
SUEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyLzRWVzRLb2ZTam9kMkF2bVUtUF9UNTBTcTlJQS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
QjYyNUYvMjJEOTFGNzIxMUNFMTFFQjhBRDA1QTJCQzRGOUFFMDIvODJDQTkyQzQ3
MDNBMTFFQkI5QTJENDdBQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwIgYIKwYBBQUHAQcBAf8E
EzARMA8EAgACMAkDBwQkBp3AZmAwDQYJKoZIhvcNAQELBQADggEBAHtjQ2av3bEI
pAGww3h4r7R0ksswK6a0sgrKo9226p2AqfIdmGN5CRhkIZMrthqTHl9MbsOvK5zr
ITFVWzmaVtGfeJmeKr02OrUL84z+4QJ7xvSeD5Dul/3zF7eESMUnOz00cnKB/JrG
BVDI9fJSx/nw9ZZj11HKVJY3TNBzTJ1rrCHKSNgcOI1clE7bx8ZBkiJPxtPVLfLa
ubGob775AF7motIZb+OUGc+gguqHiI9Zbr7EzBTFvIcR0nBOSZ8S/UVKIJSx9liu
3Ahj2C+gxNI5jMUO1l2Z6EDkPxxBT2CnEitlTZrA+J9Wf8qwviCCYPFbqh0cbQyf
yQzeCKS3N4I=
-----END CERTIFICATE-----
Generated at Sat Apr 5 03:54:00 2025 by rpki-client