Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91275FD/E1EFD9B6DECE11E4A14F0068C4F9AE02/F20038CA44A311E9AEF6F25AC4F9AE02.roa
File:                     F20038CA44A311E9AEF6F25AC4F9AE02.roa (raw, json)
Hash identifier:          MUajR7g1HWRk7TjqytjGarvqB9UPjBTaktOnykewwyA=
Subject key identifier:   D1:32:56:23:69:D0:74:0A:48:2A:49:BD:D4:18:F0:1E:BA:11:FD:88
Certificate issuer:       /CN=A91275FD/serialNumber=4E10F13F295FBF2B359C84DDD1651BC851AA8AF5
Certificate serial:       2728
Authority key identifier: 4E:10:F1:3F:29:5F:BF:2B:35:9C:84:DD:D1:65:1B:C8:51:AA:8A:F5
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ThDxPylfvys1nITd0WUbyFGqivU.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91275FD/E1EFD9B6DECE11E4A14F0068C4F9AE02/F20038CA44A311E9AEF6F25AC4F9AE02.roa
Signing time:             Thu 22 May 2025 15:52:28 +0000
ROA not before:           Thu 22 May 2025 15:52:28 +0000
ROA not after:            Thu 30 Jul 2026 00:00:00 +0000
asID:                     6163
IP address blocks:        61.9.80.0/21 maxlen: 21
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91275FD/E1EFD9B6DECE11E4A14F0068C4F9AE02/ThDxPylfvys1nITd0WUbyFGqivU.crl
                          rsync://rpki.apnic.net/member_repository/A91275FD/E1EFD9B6DECE11E4A14F0068C4F9AE02/ThDxPylfvys1nITd0WUbyFGqivU.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ThDxPylfvys1nITd0WUbyFGqivU.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 09 Jun 2025 15:50:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 10024 (0x2728)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91275FD, serialNumber=4E10F13F295FBF2B359C84DDD1651BC851AA8AF5
        Validity
            Not Before: May 22 15:52:28 2025 GMT
            Not After : Jul 30 00:00:00 2026 GMT
        Subject: CN=682f483c-93d8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:6a:ff:a8:3e:60:25:0d:3c:c5:96:42:83:4a:
                    ba:9f:b4:c2:d4:7f:ca:4a:c3:1d:62:c0:ea:ee:6d:
                    ad:08:b7:03:96:95:74:44:29:c6:86:b2:c6:b4:87:
                    cf:be:76:f5:7a:12:31:63:bb:ae:aa:61:b5:1d:52:
                    14:a5:3f:a9:3e:3c:49:df:2f:6e:56:b6:01:20:44:
                    c7:eb:80:9a:a5:1d:d6:72:f6:51:bc:b3:57:dc:1a:
                    e3:58:79:01:e2:8c:91:83:3b:f8:97:20:98:39:46:
                    66:29:20:65:31:19:cc:98:05:17:35:82:b0:43:48:
                    92:d7:e9:51:5b:30:0e:7f:56:9a:00:af:fc:44:d0:
                    33:2b:d4:23:5d:2c:cc:87:4a:a1:f0:ac:fa:53:5f:
                    93:22:51:b0:7b:5e:7a:78:23:a9:74:e5:3a:08:61:
                    55:86:0d:01:86:8e:e1:d2:b3:67:bb:47:1d:08:f3:
                    e2:58:e3:9d:bc:ed:52:52:66:3c:89:15:5b:a1:5e:
                    7d:6e:db:b8:71:91:20:8c:ba:c9:e8:a5:2c:54:40:
                    a2:b1:8a:ae:ff:21:b9:67:c2:9c:8d:d9:1a:d9:73:
                    64:f7:e7:bc:c8:a6:fd:e0:87:86:f2:5d:57:54:31:
                    48:c7:c0:a9:74:88:d4:48:78:d0:84:18:b3:01:f5:
                    dc:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D1:32:56:23:69:D0:74:0A:48:2A:49:BD:D4:18:F0:1E:BA:11:FD:88
            X509v3 Authority Key Identifier:
                keyid:4E:10:F1:3F:29:5F:BF:2B:35:9C:84:DD:D1:65:1B:C8:51:AA:8A:F5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91275FD/E1EFD9B6DECE11E4A14F0068C4F9AE02/ThDxPylfvys1nITd0WUbyFGqivU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ThDxPylfvys1nITd0WUbyFGqivU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91275FD/E1EFD9B6DECE11E4A14F0068C4F9AE02/F20038CA44A311E9AEF6F25AC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  61.9.80.0/21

    Signature Algorithm: sha256WithRSAEncryption
         07:37:5f:32:c8:31:7e:5d:8a:05:65:42:3b:b3:63:9e:c3:ff:
         68:71:a7:41:82:1f:d7:41:eb:8c:1c:93:76:42:5a:6d:93:e5:
         5f:d6:cb:e7:b6:37:47:43:e0:7e:4a:d4:24:27:40:7a:29:ed:
         5a:42:1b:f4:0e:1e:55:53:6e:99:cd:f0:12:2a:5a:bd:e2:b2:
         56:6a:53:96:b9:bc:dd:be:6c:47:09:37:b4:40:30:74:59:64:
         61:21:02:e0:be:6b:34:6b:5d:b8:c2:7f:4a:ab:1b:7c:21:9f:
         2e:29:a2:3d:bf:92:12:3f:e8:5f:d8:0e:5a:1d:70:65:c2:01:
         1a:6c:60:25:a2:22:5f:b3:45:ef:9e:ee:fd:8c:38:d0:af:10:
         bf:b5:5c:a5:8a:a8:aa:9a:1e:9a:50:06:0f:60:f8:b8:89:16:
         b9:81:39:d1:c4:1a:0e:2d:d2:b0:07:b6:4a:b8:e7:24:74:a7:
         b1:cf:bf:f1:6d:f3:e6:82:c7:af:b2:ba:64:da:03:09:07:38:
         45:8c:39:2b:a5:76:cc:07:67:e8:9b:1d:d7:88:7b:ca:bc:c1:
         23:fb:a6:06:93:72:7e:bc:64:4b:60:75:11:82:a5:f0:2c:26:
         f2:d4:71:50:12:ff:b7:c6:59:67:d7:a3:db:a7:4f:03:f1:4c:
         59:e3:4f:7e
-----BEGIN CERTIFICATE-----
MIIFcTCCBFmgAwIBAgICJygwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
Mjc1RkQxMTAvBgNVBAUTKDRFMTBGMTNGMjk1RkJGMkIzNTlDODREREQxNjUxQkM4
NTFBQThBRjUwHhcNMjUwNTIyMTU1MjI4WhcNMjYwNzMwMDAwMDAwWjAYMRYwFAYD
VQQDEw02ODJmNDgzYy05M2Q4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAyGr/qD5gJQ08xZZCg0q6n7TC1H/KSsMdYsDq7m2tCLcDlpV0RCnGhrLGtIfP
vnb1ehIxY7uuqmG1HVIUpT+pPjxJ3y9uVrYBIETH64CapR3WcvZRvLNX3BrjWHkB
4oyRgzv4lyCYOUZmKSBlMRnMmAUXNYKwQ0iS1+lRWzAOf1aaAK/8RNAzK9QjXSzM
h0qh8Kz6U1+TIlGwe156eCOpdOU6CGFVhg0Bho7h0rNnu0cdCPPiWOOdvO1SUmY8
iRVboV59btu4cZEgjLrJ6KUsVECisYqu/yG5Z8Kcjdka2XNk9+e8yKb94IeG8l1X
VDFIx8CpdIjUSHjQhBizAfXcqwIDAQABo4IClTCCApEwHQYDVR0OBBYEFNEyViNp
0HQKSCpJvdQY8B66Ef2IMB8GA1UdIwQYMBaAFE4Q8T8pX78rNZyE3dFlG8hRqor1
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyNzVGRC9FMUVGRDlCNkRF
Q0UxMUU0QTE0RjAwNjhDNEY5QUUwMi9UaER4UHlsZnZ5czFuSVRkMFdVYnlGR3Fp
dlUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL1RoRHhQeWxmdnlzMW5JVGQwV1VieUZHcWl2VS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
Mjc1RkQvRTFFRkQ5QjZERUNFMTFFNEExNEYwMDY4QzRGOUFFMDIvRjIwMDM4Q0E0
NEEzMTFFOUFFRjZGMjVBQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E
EDAOMAwEAgABMAYDBAM9CVAwDQYJKoZIhvcNAQELBQADggEBAAc3XzLIMX5digVl
QjuzY57D/2hxp0GCH9dB64wck3ZCWm2T5V/Wy+e2N0dD4H5K1CQnQHop7VpCG/QO
HlVTbpnN8BIqWr3islZqU5a5vN2+bEcJN7RAMHRZZGEhAuC+azRrXbjCf0qrG3wh
ny4poj2/khI/6F/YDlodcGXCARpsYCWiIl+zRe+e7v2MONCvEL+1XKWKqKqaHppQ
Bg9g+LiJFrmBOdHEGg4t0rAHtkq45yR0p7HPv/Ft8+aCx6+yumTaAwkHOEWMOSul
dswHZ+ibHdeIe8q8wSP7pgaTcn68ZEtgdRGCpfAsJvLUcVAS/7fGWWfXo9unTwPx
TFnjT34=
-----END CERTIFICATE-----
Generated at Wed Jun 4 00:05:51 2025 by rpki-client