Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91462B5/6D5FED92CC2F11EC85538037C4F9AE02/093547DEFBE511EFA186694BC4F9AE02.roa
File:                     093547DEFBE511EFA186694BC4F9AE02.roa (raw, json)
Hash identifier:          B3p8XBzeyqHMd+F5ha+PG4Fiao+20EDGEpkx39s5fZk=
Subject key identifier:   F4:4B:6E:63:F0:C7:D8:1A:F4:0A:C0:52:BD:80:F0:3D:33:B4:94:2F
Certificate issuer:       /CN=A91462B5/serialNumber=6483198A5054D4AB7A0161CD6391FA6C14B00208
Certificate serial:       038D
Authority key identifier: 64:83:19:8A:50:54:D4:AB:7A:01:61:CD:63:91:FA:6C:14:B0:02:08
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZIMZilBU1Kt6AWHNY5H6bBSwAgg.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91462B5/6D5FED92CC2F11EC85538037C4F9AE02/093547DEFBE511EFA186694BC4F9AE02.roa
Signing time:             Wed 21 May 2025 01:18:26 +0000
ROA not before:           Wed 21 May 2025 01:18:26 +0000
ROA not after:            Thu 30 Jul 2026 00:00:00 +0000
asID:                     60021
IP address blocks:        157.119.22.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91462B5/6D5FED92CC2F11EC85538037C4F9AE02/ZIMZilBU1Kt6AWHNY5H6bBSwAgg.crl
                          rsync://rpki.apnic.net/member_repository/A91462B5/6D5FED92CC2F11EC85538037C4F9AE02/ZIMZilBU1Kt6AWHNY5H6bBSwAgg.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZIMZilBU1Kt6AWHNY5H6bBSwAgg.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 10 Jun 2025 01:24:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 909 (0x38d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91462B5, serialNumber=6483198A5054D4AB7A0161CD6391FA6C14B00208
        Validity
            Not Before: May 21 01:18:26 2025 GMT
            Not After : Jul 30 00:00:00 2026 GMT
        Subject: CN=682d29e2-7c01
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:84:9f:c5:d8:b0:7b:7a:d6:b1:31:7e:0f:3c:
                    e1:b6:52:32:58:71:83:05:1d:2f:c2:af:26:0d:85:
                    7d:a1:7d:47:7c:4a:f2:0a:be:62:9f:40:a1:5f:cb:
                    ab:ed:13:b6:8f:65:ff:4a:a4:ae:b3:8e:ee:ad:65:
                    b6:05:71:3f:17:7a:33:a1:ac:e6:3d:51:a6:75:67:
                    1e:c7:98:4e:a4:12:1f:a6:dd:6c:fe:23:ec:c0:1f:
                    16:47:02:44:50:98:ef:94:e3:7a:ed:87:50:5c:36:
                    c5:af:a2:5a:97:4b:e6:9b:04:31:c8:a6:23:78:22:
                    00:6b:12:d7:3f:2c:14:58:5a:83:50:19:bf:c6:9b:
                    39:c1:4e:3f:d6:b2:b0:39:3f:3d:54:9b:32:12:0f:
                    7d:f4:7c:50:43:9d:5d:7f:c6:68:7c:5e:24:e4:21:
                    46:00:41:c7:10:91:b2:a3:7b:79:44:43:6b:8a:fd:
                    5a:32:cb:80:08:36:39:71:c8:f0:0e:e6:45:ae:f0:
                    d9:de:50:e7:4d:bb:6d:f8:f7:10:44:1c:27:27:11:
                    8a:c8:d9:d4:08:f8:15:93:32:f3:d1:b5:22:44:a0:
                    b0:66:61:2e:bf:e7:3c:a6:7d:bb:15:62:ef:e7:82:
                    ca:00:b4:c1:a2:2e:fb:7d:2f:cd:ff:9f:86:6d:b0:
                    2e:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F4:4B:6E:63:F0:C7:D8:1A:F4:0A:C0:52:BD:80:F0:3D:33:B4:94:2F
            X509v3 Authority Key Identifier:
                keyid:64:83:19:8A:50:54:D4:AB:7A:01:61:CD:63:91:FA:6C:14:B0:02:08

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91462B5/6D5FED92CC2F11EC85538037C4F9AE02/ZIMZilBU1Kt6AWHNY5H6bBSwAgg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZIMZilBU1Kt6AWHNY5H6bBSwAgg.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91462B5/6D5FED92CC2F11EC85538037C4F9AE02/093547DEFBE511EFA186694BC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  157.119.22.0/24

    Signature Algorithm: sha256WithRSAEncryption
         5d:f3:fc:20:8b:d2:3b:5b:3f:af:14:f5:33:aa:76:3d:9e:80:
         83:de:da:a9:bf:68:d2:82:66:f9:bf:36:7b:ae:60:bb:bc:44:
         f4:36:c3:e0:70:10:e8:90:7a:a3:a4:73:11:90:c8:0d:28:8d:
         90:5f:df:e0:97:3f:2f:48:b2:4d:08:f5:ad:82:6d:7f:e0:84:
         5e:18:1f:00:68:63:e0:c5:a2:ac:14:99:0b:5c:3c:eb:49:a6:
         c2:87:67:65:89:49:27:52:28:1a:a3:f5:57:2f:e8:58:df:67:
         6e:28:5c:62:30:d1:56:25:56:b1:99:4e:e5:ec:b9:82:62:23:
         91:0b:5d:fe:2c:0b:56:23:5f:65:32:6f:54:8f:50:13:d9:6f:
         e1:ab:1f:aa:af:2a:31:3e:a2:82:4c:38:af:83:ea:de:66:4d:
         e1:36:db:3f:45:5e:c2:a6:92:b0:3d:b6:f9:e3:00:d3:b4:c2:
         4f:f3:b6:5b:1f:ac:c4:56:ad:52:98:40:d7:cf:4e:19:55:81:
         d2:1c:c4:71:26:79:2e:cc:44:50:2a:a0:b3:3b:f4:2a:d5:8a:
         cf:2f:84:a9:4d:92:1d:c3:18:71:be:03:e3:f9:07:18:a5:2c:
         bf:31:03:20:94:42:50:33:a3:96:9f:61:e0:07:e8:40:1f:09:
         30:d5:77:d0
-----BEGIN CERTIFICATE-----
MIIFcTCCBFmgAwIBAgICA40wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NDYyQjUxMTAvBgNVBAUTKDY0ODMxOThBNTA1NEQ0QUI3QTAxNjFDRDYzOTFGQTZD
MTRCMDAyMDgwHhcNMjUwNTIxMDExODI2WhcNMjYwNzMwMDAwMDAwWjAYMRYwFAYD
VQQDEw02ODJkMjllMi03YzAxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAw4Sfxdiwe3rWsTF+DzzhtlIyWHGDBR0vwq8mDYV9oX1HfEryCr5in0ChX8ur
7RO2j2X/SqSus47urWW2BXE/F3ozoazmPVGmdWcex5hOpBIfpt1s/iPswB8WRwJE
UJjvlON67YdQXDbFr6Jal0vmmwQxyKYjeCIAaxLXPywUWFqDUBm/xps5wU4/1rKw
OT89VJsyEg999HxQQ51df8ZofF4k5CFGAEHHEJGyo3t5RENriv1aMsuACDY5ccjw
DuZFrvDZ3lDnTbtt+PcQRBwnJxGKyNnUCPgVkzLz0bUiRKCwZmEuv+c8pn27FWLv
54LKALTBoi77fS/N/5+GbbAu5wIDAQABo4IClTCCApEwHQYDVR0OBBYEFPRLbmPw
x9ga9ArAUr2A8D0ztJQvMB8GA1UdIwQYMBaAFGSDGYpQVNSregFhzWOR+mwUsAII
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0NjJCNS82RDVGRUQ5MkND
MkYxMUVDODU1MzgwMzdDNEY5QUUwMi9aSU1aaWxCVTFLdDZBV0hOWTVINmJCU3dB
Z2cuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL1pJTVppbEJVMUt0NkFXSE5ZNUg2YkJTd0FnZy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
NDYyQjUvNkQ1RkVEOTJDQzJGMTFFQzg1NTM4MDM3QzRGOUFFMDIvMDkzNTQ3REVG
QkU1MTFFRkExODY2OTRCQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E
EDAOMAwEAgABMAYDBACddxYwDQYJKoZIhvcNAQELBQADggEBAF3z/CCL0jtbP68U
9TOqdj2egIPe2qm/aNKCZvm/NnuuYLu8RPQ2w+BwEOiQeqOkcxGQyA0ojZBf3+CX
Py9Isk0I9a2CbX/ghF4YHwBoY+DFoqwUmQtcPOtJpsKHZ2WJSSdSKBqj9Vcv6Fjf
Z24oXGIw0VYlVrGZTuXsuYJiI5ELXf4sC1YjX2Uyb1SPUBPZb+GrH6qvKjE+ooJM
OK+D6t5mTeE22z9FXsKmkrA9tvnjANO0wk/ztlsfrMRWrVKYQNfPThlVgdIcxHEm
eS7MRFAqoLM79CrVis8vhKlNkh3DGHG+A+P5BxilLL8xAyCUQlAzo5afYeAH6EAf
CTDVd9A=
-----END CERTIFICATE-----
Generated at Tue Jun 3 23:48:23 2025 by rpki-client