Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91C79E1/6556F8DAD78411EA9C5D9640C4F9AE02/26D0F9B82A6611ECB12FB439C4F9AE02.roa
File:                     26D0F9B82A6611ECB12FB439C4F9AE02.roa (raw, json)
Hash identifier:          o8uKSFAZOoKiAV/aw+gEXp611EqrXFJMlAGF3VnwD9c=
Subject key identifier:   52:0C:78:32:B9:79:E1:C3:38:3F:B3:45:E5:8F:7F:3F:E4:68:F1:2A
Certificate issuer:       /CN=A91C79E1/serialNumber=933AC8E7AC4BD3B582989FCCB72FC927D716424B
Certificate serial:       07DA
Authority key identifier: 93:3A:C8:E7:AC:4B:D3:B5:82:98:9F:CC:B7:2F:C9:27:D7:16:42:4B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kzrI56xL07WCmJ_Mty_JJ9cWQks.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91C79E1/6556F8DAD78411EA9C5D9640C4F9AE02/26D0F9B82A6611ECB12FB439C4F9AE02.roa
Signing time:             Mon 20 Jan 2025 20:49:48 +0000
ROA not before:           Mon 20 Jan 2025 20:49:48 +0000
ROA not after:            Fri 01 May 2026 00:00:00 +0000
asID:                     133929
IP address blocks:        43.229.116.0/22 maxlen: 24
                          103.48.140.0/22 maxlen: 24
                          2001:df2:2c00::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91C79E1/6556F8DAD78411EA9C5D9640C4F9AE02/kzrI56xL07WCmJ_Mty_JJ9cWQks.crl
                          rsync://rpki.apnic.net/member_repository/A91C79E1/6556F8DAD78411EA9C5D9640C4F9AE02/kzrI56xL07WCmJ_Mty_JJ9cWQks.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kzrI56xL07WCmJ_Mty_JJ9cWQks.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 11 Apr 2025 21:03:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2010 (0x7da)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91C79E1
        Validity
            Not Before: Jan 20 20:49:48 2025 GMT
            Not After : May  1 00:00:00 2026 GMT
        Subject: CN=678eb6eb-fc75
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:e9:8c:41:15:dd:5d:c7:6d:59:98:e1:b5:88:
                    71:fb:11:b4:7e:4d:7f:ea:da:a9:78:0f:00:92:65:
                    2d:21:9a:67:6e:19:66:8b:f5:07:ac:f3:8d:54:9e:
                    0a:2c:96:96:6a:ed:d2:da:c2:85:a9:22:ba:0f:60:
                    99:c8:25:c2:51:20:84:d8:25:00:f3:03:14:41:2e:
                    dc:71:2b:bb:05:8c:cb:ac:61:68:f1:03:c8:c6:a4:
                    6e:84:08:17:64:da:a1:da:f5:0d:9c:d2:bb:31:4b:
                    7c:03:fa:a4:69:c4:81:39:a4:ab:d2:56:4b:0a:2f:
                    e6:bc:03:cb:78:92:59:ce:b8:86:aa:37:67:f6:87:
                    71:e4:62:c2:cf:7c:41:52:87:d1:dc:89:21:25:4b:
                    f9:65:7d:e5:6a:b8:6c:e8:13:0e:c7:b6:5e:23:bc:
                    86:21:dc:bb:3d:80:c1:49:fb:7c:25:2b:2c:34:a2:
                    e8:42:c6:48:48:43:b6:11:b4:f0:bf:8e:28:b1:32:
                    2d:05:1c:98:b5:6a:af:be:92:df:a2:c3:98:07:f6:
                    36:22:95:74:d9:16:43:20:66:99:3d:88:f6:ee:58:
                    c4:fb:ca:99:a5:f1:19:13:ce:2f:65:fa:34:d5:13:
                    1d:a2:8c:ad:41:0e:2a:0b:6b:05:e9:56:09:c3:a5:
                    e7:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                52:0C:78:32:B9:79:E1:C3:38:3F:B3:45:E5:8F:7F:3F:E4:68:F1:2A
            X509v3 Authority Key Identifier:
                keyid:93:3A:C8:E7:AC:4B:D3:B5:82:98:9F:CC:B7:2F:C9:27:D7:16:42:4B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91C79E1/6556F8DAD78411EA9C5D9640C4F9AE02/kzrI56xL07WCmJ_Mty_JJ9cWQks.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kzrI56xL07WCmJ_Mty_JJ9cWQks.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C79E1/6556F8DAD78411EA9C5D9640C4F9AE02/26D0F9B82A6611ECB12FB439C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  43.229.116.0/22
                  103.48.140.0/22
                IPv6:
                  2001:df2:2c00::/48

    Signature Algorithm: sha256WithRSAEncryption
         0e:0e:78:c1:03:1e:c6:d8:06:f5:ac:02:e0:e2:00:33:3a:df:
         62:b6:f4:cf:45:8d:8d:10:f1:10:47:fb:4a:b6:74:5c:60:5c:
         19:57:e4:c4:33:80:3b:32:8d:e6:3a:ea:ec:58:37:93:76:85:
         bb:6e:9e:44:99:b8:de:57:a8:48:6c:ff:35:69:1d:0b:da:3a:
         a7:38:6c:50:8c:96:15:da:d0:ed:49:73:d9:67:cb:d3:4b:0f:
         44:e3:6f:b2:24:ba:0e:aa:24:bd:f0:7d:f6:8c:fe:45:f0:eb:
         08:08:19:2e:f0:de:d0:61:c7:9a:59:70:70:66:76:bb:20:8e:
         85:d3:1b:3f:4a:5c:24:14:15:d3:64:01:c9:6f:cb:6d:24:26:
         94:4b:67:8a:02:9e:8e:80:4c:5e:88:7b:a6:f9:a6:21:63:24:
         0b:a0:3c:87:ee:cf:f6:8d:ac:ea:80:92:97:a0:7e:b0:25:b4:
         72:e4:79:fd:35:e4:7a:52:01:50:0c:08:95:39:45:86:95:68:
         96:5b:f8:a0:22:4b:b3:6e:18:38:9b:3e:ee:67:81:17:5d:86:
         e8:7a:61:05:ab:fe:12:61:8b:03:12:88:19:d4:e3:00:90:67:
         4a:d6:d8:6e:a3:9c:e1:98:79:d6:0e:59:18:05:f2:27:5e:9a:
         d9:e0:08:a4
-----BEGIN CERTIFICATE-----
MIIFiDCCBHCgAwIBAgICB9owDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
Qzc5RTExMTAvBgNVBAUTKDkzM0FDOEU3QUM0QkQzQjU4Mjk4OUZDQ0I3MkZDOTI3
RDcxNjQyNEIwHhcNMjUwMTIwMjA0OTQ4WhcNMjYwNTAxMDAwMDAwWjAYMRYwFAYD
VQQDEw02NzhlYjZlYi1mYzc1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAx+mMQRXdXcdtWZjhtYhx+xG0fk1/6tqpeA8AkmUtIZpnbhlmi/UHrPONVJ4K
LJaWau3S2sKFqSK6D2CZyCXCUSCE2CUA8wMUQS7ccSu7BYzLrGFo8QPIxqRuhAgX
ZNqh2vUNnNK7MUt8A/qkacSBOaSr0lZLCi/mvAPLeJJZzriGqjdn9odx5GLCz3xB
UofR3IkhJUv5ZX3larhs6BMOx7ZeI7yGIdy7PYDBSft8JSssNKLoQsZISEO2EbTw
v44osTItBRyYtWqvvpLfosOYB/Y2IpV02RZDIGaZPYj27ljE+8qZpfEZE84vZfo0
1RMdooytQQ4qC2sF6VYJw6XnxwIDAQABo4ICrDCCAqgwHQYDVR0OBBYEFFIMeDK5
eeHDOD+zReWPfz/kaPEqMB8GA1UdIwQYMBaAFJM6yOesS9O1gpifzLcvySfXFkJL
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDNzlFMS82NTU2RjhEQUQ3
ODQxMUVBOUM1RDk2NDBDNEY5QUUwMi9renJJNTZ4TDA3V0NtSl9NdHlfSko5Y1dR
a3MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2t6ckk1NnhMMDdXQ21KX010eV9KSjljV1Frcy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
Qzc5RTEvNjU1NkY4REFENzg0MTFFQTlDNUQ5NjQwQzRGOUFFMDIvMjZEMEY5Qjgy
QTY2MTFFQ0IxMkZCNDM5QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwNgYIKwYBBQUHAQcBAf8E
JzAlMBIEAgABMAwDBAIr5XQDBAJnMIwwDwQCAAIwCQMHACABDfIsADANBgkqhkiG
9w0BAQsFAAOCAQEADg54wQMextgG9awC4OIAMzrfYrb0z0WNjRDxEEf7SrZ0XGBc
GVfkxDOAOzKN5jrq7Fg3k3aFu26eRJm43leoSGz/NWkdC9o6pzhsUIyWFdrQ7Ulz
2WfL00sPRONvsiS6DqokvfB99oz+RfDrCAgZLvDe0GHHmllwcGZ2uyCOhdMbP0pc
JBQV02QByW/LbSQmlEtnigKejoBMXoh7pvmmIWMkC6A8h+7P9o2s6oCSl6B+sCW0
cuR5/TXkelIBUAwIlTlFhpVollv4oCJLs24YOJs+7meBF12G6HphBav+EmGLAxKI
GdTjAJBnStbYbqOc4Zh51g5ZGAXyJ16a2eAIpA==
-----END CERTIFICATE-----
Generated at Sat Apr 5 07:18:23 2025 by rpki-client