Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91C167F/87C3454CC45F11EE8281CC7DC4F9AE02/7FC75E34C4B211EEB684BF7FC4F9AE02.roa
File:                     7FC75E34C4B211EEB684BF7FC4F9AE02.roa (raw, json)
Hash identifier:          ENR1qEuttVnNRROdOyzWRsQ7bm7evUlkAyBRhI4KcO0=
Subject key identifier:   34:BC:C8:4C:02:5D:4C:D2:A0:12:6E:59:B6:FE:38:3F:C1:8E:8D:5B
Certificate issuer:       /CN=A91C167F/serialNumber=C2112F44D4458F185CDB9AD9A91AF82906489CC6
Certificate serial:       CC
Authority key identifier: C2:11:2F:44:D4:45:8F:18:5C:DB:9A:D9:A9:1A:F8:29:06:48:9C:C6
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/whEvRNRFjxhc25rZqRr4KQZInMY.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91C167F/87C3454CC45F11EE8281CC7DC4F9AE02/7FC75E34C4B211EEB684BF7FC4F9AE02.roa
Signing time:             Thu 27 Feb 2025 07:00:39 +0000
ROA not before:           Thu 27 Feb 2025 07:00:39 +0000
ROA not after:            Fri 01 May 2026 00:00:00 +0000
asID:                     152462
IP address blocks:        2001:df3:6fc0::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91C167F/87C3454CC45F11EE8281CC7DC4F9AE02/whEvRNRFjxhc25rZqRr4KQZInMY.crl
                          rsync://rpki.apnic.net/member_repository/A91C167F/87C3454CC45F11EE8281CC7DC4F9AE02/whEvRNRFjxhc25rZqRr4KQZInMY.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/whEvRNRFjxhc25rZqRr4KQZInMY.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 12 Apr 2025 04:51:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 204 (0xcc)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91C167F
        Validity
            Not Before: Feb 27 07:00:39 2025 GMT
            Not After : May  1 00:00:00 2026 GMT
        Subject: CN=67c00d96-5b33
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:d2:d0:4d:f0:13:8c:ea:b9:85:85:5d:ac:d8:
                    e4:a3:3e:cd:64:cd:95:80:a5:55:a7:69:a4:17:0c:
                    2d:d4:41:25:85:5a:4b:2a:10:bc:87:97:e0:5d:c4:
                    a0:57:9f:76:8a:5d:1e:4a:7b:21:f6:49:41:05:ef:
                    b6:31:b1:83:36:58:50:3a:58:3c:a8:e5:ee:61:3f:
                    d9:30:0d:77:5e:ef:8a:a3:b6:96:63:09:3b:54:02:
                    13:cf:5f:8e:4a:b1:61:9f:fb:89:e5:b1:59:82:a9:
                    29:50:e3:c7:c1:25:79:b6:bf:8c:28:cc:4c:8b:ff:
                    97:bb:83:21:61:7a:cd:4d:14:69:5c:57:05:6f:f3:
                    d4:61:33:c1:77:c3:31:0e:f0:38:09:12:68:d7:37:
                    29:f9:d0:6e:50:b4:e9:48:9d:78:90:4a:bf:25:b2:
                    87:3a:36:cb:2e:5f:75:cb:07:cf:bc:c4:c2:9a:1b:
                    aa:99:4f:e0:0a:d5:94:5c:b0:98:e8:03:38:1b:c7:
                    55:19:31:90:b6:1a:ac:87:1b:30:22:bd:08:d0:b9:
                    38:54:7c:1d:67:f6:24:2f:de:05:af:fa:47:5b:70:
                    bf:7a:2c:96:19:ac:05:6e:f0:5a:d2:3c:06:2a:1a:
                    f0:8b:19:24:0d:78:c7:ff:90:fc:93:6b:12:c6:10:
                    08:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                34:BC:C8:4C:02:5D:4C:D2:A0:12:6E:59:B6:FE:38:3F:C1:8E:8D:5B
            X509v3 Authority Key Identifier:
                keyid:C2:11:2F:44:D4:45:8F:18:5C:DB:9A:D9:A9:1A:F8:29:06:48:9C:C6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91C167F/87C3454CC45F11EE8281CC7DC4F9AE02/whEvRNRFjxhc25rZqRr4KQZInMY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/whEvRNRFjxhc25rZqRr4KQZInMY.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C167F/87C3454CC45F11EE8281CC7DC4F9AE02/7FC75E34C4B211EEB684BF7FC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:df3:6fc0::/48

    Signature Algorithm: sha256WithRSAEncryption
         19:e0:11:3c:07:70:c6:2b:3d:9c:a8:2f:38:7e:e9:87:b6:21:
         9a:8b:e6:0d:ee:15:db:53:41:94:71:95:39:fc:5c:97:72:34:
         72:fe:f4:e9:c2:d4:d8:a4:ff:54:bc:85:79:15:18:19:06:91:
         2e:ad:66:60:11:9d:33:74:bf:fb:a2:bf:52:22:27:05:d1:21:
         58:1d:ee:09:d1:f2:55:94:38:d9:6d:28:1e:d7:05:81:09:44:
         82:cd:3c:16:1a:12:c3:56:7b:b2:2b:bb:98:4c:78:e4:70:49:
         9a:1a:5b:af:7c:9d:9d:f1:17:63:28:93:d3:fb:ba:5c:0e:f1:
         43:19:1f:c4:f2:e6:7c:72:5c:61:f8:22:39:62:f8:a3:c1:7b:
         cb:4b:0d:f0:c3:ce:f3:38:bb:49:37:9e:df:7e:dd:d4:94:83:
         91:92:e9:fe:d8:19:2a:71:1f:71:db:bc:db:6b:4f:40:55:aa:
         06:a9:63:d3:50:7b:14:bc:21:2e:45:8d:a8:ee:52:b0:c7:92:
         76:6d:cd:70:41:50:d1:6e:90:55:2a:a5:d7:94:53:ef:79:f1:
         28:95:b9:e8:b0:af:17:a0:dd:89:5f:0d:30:f5:6e:ae:26:39:
         ae:55:9a:f4:3f:3c:4a:76:0a:30:eb:84:4a:fa:82:55:8e:f2:
         3f:a4:4c:64
-----BEGIN CERTIFICATE-----
MIIFdDCCBFygAwIBAgICAMwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QzE2N0YxMTAvBgNVBAUTKEMyMTEyRjQ0RDQ0NThGMTg1Q0RCOUFEOUE5MUFGODI5
MDY0ODlDQzYwHhcNMjUwMjI3MDcwMDM5WhcNMjYwNTAxMDAwMDAwWjAYMRYwFAYD
VQQDEw02N2MwMGQ5Ni01YjMzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAx9LQTfATjOq5hYVdrNjkoz7NZM2VgKVVp2mkFwwt1EElhVpLKhC8h5fgXcSg
V592il0eSnsh9klBBe+2MbGDNlhQOlg8qOXuYT/ZMA13Xu+Ko7aWYwk7VAITz1+O
SrFhn/uJ5bFZgqkpUOPHwSV5tr+MKMxMi/+Xu4MhYXrNTRRpXFcFb/PUYTPBd8Mx
DvA4CRJo1zcp+dBuULTpSJ14kEq/JbKHOjbLLl91ywfPvMTCmhuqmU/gCtWUXLCY
6AM4G8dVGTGQthqshxswIr0I0Lk4VHwdZ/YkL94Fr/pHW3C/eiyWGawFbvBa0jwG
KhrwixkkDXjH/5D8k2sSxhAI6QIDAQABo4ICmDCCApQwHQYDVR0OBBYEFDS8yEwC
XUzSoBJuWbb+OD/Bjo1bMB8GA1UdIwQYMBaAFMIRL0TURY8YXNua2aka+CkGSJzG
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDMTY3Ri84N0MzNDU0Q0M0
NUYxMUVFODI4MUNDN0RDNEY5QUUwMi93aEV2Uk5SRmp4aGMyNXJacVJyNEtRWklu
TVkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL3doRXZSTlJGanhoYzI1clpxUnI0S1FaSW5NWS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
QzE2N0YvODdDMzQ1NENDNDVGMTFFRTgyODFDQzdEQzRGOUFFMDIvN0ZDNzVFMzRD
NEIyMTFFRUI2ODRCRjdGQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwIgYIKwYBBQUHAQcBAf8E
EzARMA8EAgACMAkDBwAgAQ3zb8AwDQYJKoZIhvcNAQELBQADggEBABngETwHcMYr
PZyoLzh+6Ye2IZqL5g3uFdtTQZRxlTn8XJdyNHL+9OnC1Nik/1S8hXkVGBkGkS6t
ZmARnTN0v/uiv1IiJwXRIVgd7gnR8lWUONltKB7XBYEJRILNPBYaEsNWe7Iru5hM
eORwSZoaW698nZ3xF2Mok9P7ulwO8UMZH8Ty5nxyXGH4Ijli+KPBe8tLDfDDzvM4
u0k3nt9+3dSUg5GS6f7YGSpxH3HbvNtrT0BVqgapY9NQexS8IS5FjajuUrDHknZt
zXBBUNFukFUqpdeUU+958SiVueiwrxeg3YlfDTD1bq4mOa5VmvQ/PEp2CjDrhEr6
glWO8j+kTGQ=
-----END CERTIFICATE-----
Generated at Sat Apr 5 07:10:23 2025 by rpki-client