Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91462B5/6D5FED92CC2F11EC85538037C4F9AE02/0534699EFBE511EFA186694BC4F9AE02.roa
File:                     0534699EFBE511EFA186694BC4F9AE02.roa (raw, json)
Hash identifier:          V8jxioFBATYyyacUvA9Ne9bS/Pjgktz1YDqw/xsdisw=
Subject key identifier:   6B:16:75:0F:80:48:C8:A0:0C:6A:DD:52:A9:11:49:E7:65:D3:2B:73
Certificate issuer:       /CN=A91462B5/serialNumber=6483198A5054D4AB7A0161CD6391FA6C14B00208
Certificate serial:       0386
Authority key identifier: 64:83:19:8A:50:54:D4:AB:7A:01:61:CD:63:91:FA:6C:14:B0:02:08
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZIMZilBU1Kt6AWHNY5H6bBSwAgg.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91462B5/6D5FED92CC2F11EC85538037C4F9AE02/0534699EFBE511EFA186694BC4F9AE02.roa
Signing time:             Wed 21 May 2025 01:18:20 +0000
ROA not before:           Wed 21 May 2025 01:18:20 +0000
ROA not after:            Thu 30 Jul 2026 00:00:00 +0000
asID:                     134687
IP address blocks:        157.119.22.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91462B5/6D5FED92CC2F11EC85538037C4F9AE02/ZIMZilBU1Kt6AWHNY5H6bBSwAgg.crl
                          rsync://rpki.apnic.net/member_repository/A91462B5/6D5FED92CC2F11EC85538037C4F9AE02/ZIMZilBU1Kt6AWHNY5H6bBSwAgg.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZIMZilBU1Kt6AWHNY5H6bBSwAgg.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 10 Jun 2025 01:24:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 902 (0x386)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91462B5, serialNumber=6483198A5054D4AB7A0161CD6391FA6C14B00208
        Validity
            Not Before: May 21 01:18:20 2025 GMT
            Not After : Jul 30 00:00:00 2026 GMT
        Subject: CN=682d29db-b288
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:2f:04:85:c2:32:18:a7:d5:55:60:41:6f:94:
                    66:d5:74:63:a3:69:ff:b7:79:fe:13:68:64:eb:12:
                    89:34:c9:98:8f:a1:a0:1d:44:fe:42:6f:d8:11:e1:
                    75:b2:9d:4e:b1:f7:8b:06:da:e6:a9:f4:e1:55:74:
                    06:d7:a8:c7:d5:f1:c6:e1:7b:e9:5c:65:89:aa:58:
                    da:df:8a:43:bc:12:85:24:bf:61:45:96:ce:2b:32:
                    ac:08:9e:3b:29:93:65:a3:9c:43:f8:ae:dd:57:9f:
                    bd:c5:d6:96:19:77:fb:f9:8d:8e:88:c5:5b:ad:10:
                    00:85:bf:ce:fc:b4:18:5a:8e:86:8e:50:86:bd:08:
                    15:b9:92:9a:3f:5d:8e:50:bd:fb:81:51:4b:81:64:
                    fb:b9:5c:e5:cb:b7:f8:bd:5e:24:14:82:99:b5:e7:
                    e1:e2:03:63:ce:cd:78:26:16:27:ec:c7:21:66:3e:
                    6b:5e:46:df:0e:e6:22:c8:35:55:98:fe:97:6f:3e:
                    a7:93:f4:d9:da:e9:28:d8:33:d3:14:30:22:5c:6e:
                    26:b7:86:0a:40:54:56:b4:04:88:00:eb:56:a8:72:
                    c2:65:c5:72:f3:88:07:43:95:50:9e:94:9b:5c:ee:
                    4a:cc:40:a7:ef:b1:7b:31:6e:bd:df:81:af:09:23:
                    b2:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6B:16:75:0F:80:48:C8:A0:0C:6A:DD:52:A9:11:49:E7:65:D3:2B:73
            X509v3 Authority Key Identifier:
                keyid:64:83:19:8A:50:54:D4:AB:7A:01:61:CD:63:91:FA:6C:14:B0:02:08

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91462B5/6D5FED92CC2F11EC85538037C4F9AE02/ZIMZilBU1Kt6AWHNY5H6bBSwAgg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZIMZilBU1Kt6AWHNY5H6bBSwAgg.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91462B5/6D5FED92CC2F11EC85538037C4F9AE02/0534699EFBE511EFA186694BC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  157.119.22.0/24

    Signature Algorithm: sha256WithRSAEncryption
         94:03:e0:7e:6b:0b:b5:9f:79:e7:8d:8c:46:e2:27:35:9e:82:
         3d:99:32:7d:d0:6e:e0:f6:b9:51:ad:06:04:42:db:c1:0d:27:
         fe:76:7a:5e:32:ec:d7:45:c7:b2:cb:87:06:8d:6c:bd:20:57:
         d7:65:2c:79:b1:84:29:6d:d1:79:f6:76:45:3f:db:b1:9c:fc:
         00:ba:25:50:0d:61:99:a6:ed:37:6a:31:48:8a:24:bd:10:db:
         cc:a9:8b:b8:d8:43:9a:f0:bd:6b:c7:0c:09:b3:3a:49:4e:9b:
         b3:f3:8d:c5:4e:cc:82:45:65:77:ee:83:60:4d:d8:f5:8f:72:
         57:da:59:fe:3f:27:e9:05:05:d7:8f:b2:77:9a:79:e1:03:0c:
         b9:d3:b6:40:c9:4c:1f:b3:5c:91:ba:c8:78:93:3f:6b:b3:9f:
         88:2f:22:45:a9:55:f6:21:ab:d1:5b:ac:2d:f8:29:b9:47:8b:
         80:6a:29:0f:93:d6:23:91:76:1f:fc:72:76:bf:22:18:33:31:
         71:88:c5:34:d1:6c:f6:01:f3:f0:88:27:a0:ec:26:21:79:fe:
         99:2d:9e:78:69:e4:93:6d:fd:8d:4c:bf:fa:f5:e9:5e:73:77:
         84:bb:1d:3e:54:2f:c4:f4:61:c3:52:f5:90:77:e8:ac:86:5a:
         31:64:4e:01
-----BEGIN CERTIFICATE-----
MIIFcTCCBFmgAwIBAgICA4YwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NDYyQjUxMTAvBgNVBAUTKDY0ODMxOThBNTA1NEQ0QUI3QTAxNjFDRDYzOTFGQTZD
MTRCMDAyMDgwHhcNMjUwNTIxMDExODIwWhcNMjYwNzMwMDAwMDAwWjAYMRYwFAYD
VQQDEw02ODJkMjlkYi1iMjg4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAty8EhcIyGKfVVWBBb5Rm1XRjo2n/t3n+E2hk6xKJNMmYj6GgHUT+Qm/YEeF1
sp1OsfeLBtrmqfThVXQG16jH1fHG4XvpXGWJqlja34pDvBKFJL9hRZbOKzKsCJ47
KZNlo5xD+K7dV5+9xdaWGXf7+Y2OiMVbrRAAhb/O/LQYWo6GjlCGvQgVuZKaP12O
UL37gVFLgWT7uVzly7f4vV4kFIKZtefh4gNjzs14JhYn7MchZj5rXkbfDuYiyDVV
mP6Xbz6nk/TZ2uko2DPTFDAiXG4mt4YKQFRWtASIAOtWqHLCZcVy84gHQ5VQnpSb
XO5KzECn77F7MW6934GvCSOyqQIDAQABo4IClTCCApEwHQYDVR0OBBYEFGsWdQ+A
SMigDGrdUqkRSedl0ytzMB8GA1UdIwQYMBaAFGSDGYpQVNSregFhzWOR+mwUsAII
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0NjJCNS82RDVGRUQ5MkND
MkYxMUVDODU1MzgwMzdDNEY5QUUwMi9aSU1aaWxCVTFLdDZBV0hOWTVINmJCU3dB
Z2cuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL1pJTVppbEJVMUt0NkFXSE5ZNUg2YkJTd0FnZy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
NDYyQjUvNkQ1RkVEOTJDQzJGMTFFQzg1NTM4MDM3QzRGOUFFMDIvMDUzNDY5OUVG
QkU1MTFFRkExODY2OTRCQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E
EDAOMAwEAgABMAYDBACddxYwDQYJKoZIhvcNAQELBQADggEBAJQD4H5rC7WfeeeN
jEbiJzWegj2ZMn3QbuD2uVGtBgRC28ENJ/52el4y7NdFx7LLhwaNbL0gV9dlLHmx
hClt0Xn2dkU/27Gc/AC6JVANYZmm7TdqMUiKJL0Q28ypi7jYQ5rwvWvHDAmzOklO
m7PzjcVOzIJFZXfug2BN2PWPclfaWf4/J+kFBdePsneaeeEDDLnTtkDJTB+zXJG6
yHiTP2uzn4gvIkWpVfYhq9FbrC34KblHi4BqKQ+T1iORdh/8cna/IhgzMXGIxTTR
bPYB8/CIJ6DsJiF5/pktnnhp5JNt/Y1Mv/r16V5zd4S7HT5UL8T0YcNS9ZB36KyG
WjFkTgE=
-----END CERTIFICATE-----
Generated at Tue Jun 3 23:53:49 2025 by rpki-client