Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91D51A0/7C53910C7F8411EC80518E51C4F9AE02/350FEB88D40611EDADEE3D1EC4F9AE02.roa
File:                     350FEB88D40611EDADEE3D1EC4F9AE02.roa (raw, json)
Hash identifier:          fPCfFsxMUqOAvLJmkWjc+RPsiCNLjQ233XGNCqOiY/w=
Subject key identifier:   7C:38:89:DD:86:38:95:35:B0:70:4A:17:C0:F6:E3:2B:6A:DD:04:AF
Certificate issuer:       /CN=A91D51A0/serialNumber=C6EABEB93E1D06E2C32E1C4CBE147CFB39992539
Certificate serial:       03FF
Authority key identifier: C6:EA:BE:B9:3E:1D:06:E2:C3:2E:1C:4C:BE:14:7C:FB:39:99:25:39
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xuq-uT4dBuLDLhxMvhR8-zmZJTk.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91D51A0/7C53910C7F8411EC80518E51C4F9AE02/350FEB88D40611EDADEE3D1EC4F9AE02.roa
Signing time:             Fri 07 Mar 2025 00:46:04 +0000
ROA not before:           Fri 07 Mar 2025 00:46:04 +0000
ROA not after:            Fri 01 May 2026 00:00:00 +0000
asID:                     151062
IP address blocks:        2400:54a0:2a00::/44 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91D51A0/7C53910C7F8411EC80518E51C4F9AE02/xuq-uT4dBuLDLhxMvhR8-zmZJTk.crl
                          rsync://rpki.apnic.net/member_repository/A91D51A0/7C53910C7F8411EC80518E51C4F9AE02/xuq-uT4dBuLDLhxMvhR8-zmZJTk.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xuq-uT4dBuLDLhxMvhR8-zmZJTk.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 12 Apr 2025 00:43:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1023 (0x3ff)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91D51A0
        Validity
            Not Before: Mar  7 00:46:04 2025 GMT
            Not After : May  1 00:00:00 2026 GMT
        Subject: CN=67ca41cc-e694
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:62:ec:8c:57:e5:8a:53:d7:e3:91:72:c8:75:
                    c0:25:19:99:18:32:4a:7a:be:29:ab:15:fa:fb:2d:
                    c5:81:d5:df:99:0c:54:21:5b:29:c9:45:89:69:8a:
                    a1:b9:fb:5d:7e:37:33:4d:d7:2f:00:86:9d:f1:99:
                    4f:4c:b6:1d:b5:24:c2:43:99:87:a8:d9:1c:04:f7:
                    8f:f8:11:22:34:f9:e7:3d:15:e2:d1:5d:a7:51:e7:
                    45:33:30:cf:88:61:f7:54:05:ee:fe:c4:6f:4d:20:
                    19:ff:6f:29:44:9a:56:a2:fc:ad:58:fb:a4:ee:a3:
                    19:a9:17:e1:99:d0:81:6f:ad:24:ec:10:c1:79:fa:
                    a2:69:a0:9b:0f:c5:1e:21:87:c9:28:b0:d1:09:49:
                    ac:a1:c7:b6:5f:13:86:dd:4f:d3:0e:bf:19:81:63:
                    2c:74:fc:51:41:65:9f:16:16:83:ad:3e:e6:1a:1f:
                    4b:b7:aa:a3:7e:fc:45:1c:db:18:a5:9d:cd:9a:c0:
                    41:5f:4d:93:d0:36:ae:50:5d:12:43:0b:91:5b:3d:
                    ef:fc:0b:c0:01:94:a2:28:1c:f7:84:3f:c7:21:d9:
                    16:ba:24:2e:69:b9:ba:88:6b:d5:e8:28:42:2b:4a:
                    9a:a1:f6:e4:e7:74:4a:1d:b8:46:9c:34:17:83:87:
                    59:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7C:38:89:DD:86:38:95:35:B0:70:4A:17:C0:F6:E3:2B:6A:DD:04:AF
            X509v3 Authority Key Identifier:
                keyid:C6:EA:BE:B9:3E:1D:06:E2:C3:2E:1C:4C:BE:14:7C:FB:39:99:25:39

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91D51A0/7C53910C7F8411EC80518E51C4F9AE02/xuq-uT4dBuLDLhxMvhR8-zmZJTk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xuq-uT4dBuLDLhxMvhR8-zmZJTk.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D51A0/7C53910C7F8411EC80518E51C4F9AE02/350FEB88D40611EDADEE3D1EC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  2400:54a0:2a00::/44

    Signature Algorithm: sha256WithRSAEncryption
         4a:89:2b:48:bb:41:f8:b2:3e:d0:06:6c:2b:2b:d5:14:e0:a1:
         5c:d7:0e:1e:cd:55:9c:35:92:c5:a0:24:75:ae:c7:7a:f3:44:
         a2:67:2e:6d:d3:6d:6e:7e:51:fb:48:ec:aa:9a:b6:0f:97:fc:
         58:ee:8a:ea:da:0c:60:36:d6:ec:30:e8:4d:f4:3f:c7:ca:96:
         c5:cc:ef:68:19:52:bb:b6:f4:20:65:fc:0a:e3:36:01:7e:21:
         7f:63:9b:0e:72:7a:45:1b:d8:12:5a:fd:4e:a4:ab:7a:24:6e:
         db:08:df:e7:9a:42:6e:db:1a:10:8e:ad:09:9a:ab:8b:1a:bc:
         f9:44:73:4a:81:da:c0:92:a5:6b:38:5c:c5:c0:c9:f8:48:7c:
         55:13:f7:63:67:79:61:66:71:c4:11:af:cd:1a:c4:ee:df:98:
         d2:17:cb:45:38:b0:3f:ec:b7:a2:fc:02:d5:9a:c2:e2:32:9e:
         38:9f:7e:8c:5e:dc:95:c6:98:c7:64:33:d1:25:b0:87:7a:ed:
         cd:85:72:63:02:8c:9e:35:e9:72:c8:fc:ca:f4:8c:e1:13:61:
         a8:f0:29:81:09:d5:48:76:86:2d:d8:4a:65:df:e5:4d:9c:ad:
         8f:4a:ee:61:c4:a1:61:d4:37:0e:b3:db:e4:60:7e:49:0a:4e:
         88:8e:8e:4d
-----BEGIN CERTIFICATE-----
MIIFdDCCBFygAwIBAgICA/8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RDUxQTAxMTAvBgNVBAUTKEM2RUFCRUI5M0UxRDA2RTJDMzJFMUM0Q0JFMTQ3Q0ZC
Mzk5OTI1MzkwHhcNMjUwMzA3MDA0NjA0WhcNMjYwNTAxMDAwMDAwWjAYMRYwFAYD
VQQDEw02N2NhNDFjYy1lNjk0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAzGLsjFflilPX45FyyHXAJRmZGDJKer4pqxX6+y3FgdXfmQxUIVspyUWJaYqh
uftdfjczTdcvAIad8ZlPTLYdtSTCQ5mHqNkcBPeP+BEiNPnnPRXi0V2nUedFMzDP
iGH3VAXu/sRvTSAZ/28pRJpWovytWPuk7qMZqRfhmdCBb60k7BDBefqiaaCbD8Ue
IYfJKLDRCUmsoce2XxOG3U/TDr8ZgWMsdPxRQWWfFhaDrT7mGh9Lt6qjfvxFHNsY
pZ3NmsBBX02T0DauUF0SQwuRWz3v/AvAAZSiKBz3hD/HIdkWuiQuabm6iGvV6ChC
K0qaofbk53RKHbhGnDQXg4dZgQIDAQABo4ICmDCCApQwHQYDVR0OBBYEFHw4id2G
OJU1sHBKF8D24ytq3QSvMB8GA1UdIwQYMBaAFMbqvrk+HQbiwy4cTL4UfPs5mSU5
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFENTFBMC83QzUzOTEwQzdG
ODQxMUVDODA1MThFNTFDNEY5QUUwMi94dXEtdVQ0ZEJ1TERMaHhNdmhSOC16bVpK
VGsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL3h1cS11VDRkQnVMRExoeE12aFI4LXptWkpUay5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
RDUxQTAvN0M1MzkxMEM3Rjg0MTFFQzgwNTE4RTUxQzRGOUFFMDIvMzUwRkVCODhE
NDA2MTFFREFERUUzRDFFQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwIgYIKwYBBQUHAQcBAf8E
EzARMA8EAgACMAkDBwQkAFSgKgAwDQYJKoZIhvcNAQELBQADggEBAEqJK0i7Qfiy
PtAGbCsr1RTgoVzXDh7NVZw1ksWgJHWux3rzRKJnLm3TbW5+UftI7Kqatg+X/Fju
iuraDGA21uww6E30P8fKlsXM72gZUru29CBl/ArjNgF+IX9jmw5yekUb2BJa/U6k
q3okbtsI3+eaQm7bGhCOrQmaq4savPlEc0qB2sCSpWs4XMXAyfhIfFUT92NneWFm
ccQRr80axO7fmNIXy0U4sD/st6L8AtWawuIynjiffoxe3JXGmMdkM9ElsId67c2F
cmMCjJ416XLI/Mr0jOETYajwKYEJ1Uh2hi3YSmXf5U2crY9K7mHEoWHUNw6z2+Rg
fkkKToiOjk0=
-----END CERTIFICATE-----
Generated at Sat Apr 5 22:07:46 2025 by rpki-client