Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A914DC5D/39E7146C2A3311EB929DC07CC4F9AE02/6A0673EE2A4311EBBD69BE46C4F9AE02.roa
File:                     6A0673EE2A4311EBBD69BE46C4F9AE02.roa (raw, json)
Hash identifier:          pljZ5ks8zWLJ41xwtC7HEEzJ6OzoY7GJ/ohRRrP+jLs=
Subject key identifier:   7A:FB:9B:1D:C1:2A:D9:E2:22:BC:8A:20:08:FE:BA:BA:3A:08:D6:4C
Certificate issuer:       /CN=A914DC5D/serialNumber=20F2531A7BA8212D2BB0900D576372D33F846928
Certificate serial:       0891
Authority key identifier: 20:F2:53:1A:7B:A8:21:2D:2B:B0:90:0D:57:63:72:D3:3F:84:69:28
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IPJTGnuoIS0rsJANV2Ny0z-EaSg.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A914DC5D/39E7146C2A3311EB929DC07CC4F9AE02/6A0673EE2A4311EBBD69BE46C4F9AE02.roa
Signing time:             Tue 20 May 2025 21:51:03 +0000
ROA not before:           Tue 20 May 2025 21:51:03 +0000
ROA not after:            Wed 30 Sep 2026 00:00:00 +0000
asID:                     7588
IP address blocks:        202.44.204.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A914DC5D/39E7146C2A3311EB929DC07CC4F9AE02/IPJTGnuoIS0rsJANV2Ny0z-EaSg.crl
                          rsync://rpki.apnic.net/member_repository/A914DC5D/39E7146C2A3311EB929DC07CC4F9AE02/IPJTGnuoIS0rsJANV2Ny0z-EaSg.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IPJTGnuoIS0rsJANV2Ny0z-EaSg.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 09 Jun 2025 21:55:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2193 (0x891)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A914DC5D, serialNumber=20F2531A7BA8212D2BB0900D576372D33F846928
        Validity
            Not Before: May 20 21:51:03 2025 GMT
            Not After : Sep 30 00:00:00 2026 GMT
        Subject: CN=682cf947-57d1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:cb:b2:5f:85:3e:ec:21:cc:d4:8d:bb:cd:5d:
                    18:18:67:0b:6c:c9:23:f8:37:a0:80:bc:37:32:06:
                    6b:53:52:5f:59:a6:b7:44:6d:ad:a2:12:65:61:7c:
                    8a:e8:fc:45:8e:ab:b7:10:df:1c:c5:26:75:58:4e:
                    e4:c7:12:03:ab:4d:59:7a:6b:98:1b:0a:83:ef:9c:
                    14:47:b5:c8:90:7c:39:99:75:72:3d:b2:48:7a:5b:
                    45:bc:ad:4f:f2:43:79:00:cc:fe:ec:e1:35:39:5d:
                    cc:66:26:c5:e2:10:b6:d6:3b:a2:55:df:90:d7:75:
                    94:8c:66:8f:39:f6:0a:6c:67:7c:cf:1f:d4:57:34:
                    77:61:79:d5:2a:51:a4:60:e3:11:1b:9b:88:d5:cc:
                    a5:18:82:64:31:b7:20:df:8e:b2:18:a6:9d:e0:4d:
                    b4:10:e8:51:ca:b4:0b:5e:1d:7a:f6:4b:75:99:4a:
                    98:74:3f:13:2b:76:f5:7f:bf:64:b2:e0:80:86:9b:
                    c3:11:b4:8e:e8:ba:2e:e9:5c:e0:37:6a:fa:2e:88:
                    7c:8c:81:02:93:58:a6:03:57:4a:0e:c5:7f:92:3f:
                    7b:c8:1f:6d:bb:85:42:b6:51:00:9a:61:f8:81:68:
                    f3:22:f9:ab:54:15:3a:27:71:68:eb:69:20:0e:cf:
                    22:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7A:FB:9B:1D:C1:2A:D9:E2:22:BC:8A:20:08:FE:BA:BA:3A:08:D6:4C
            X509v3 Authority Key Identifier:
                keyid:20:F2:53:1A:7B:A8:21:2D:2B:B0:90:0D:57:63:72:D3:3F:84:69:28

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A914DC5D/39E7146C2A3311EB929DC07CC4F9AE02/IPJTGnuoIS0rsJANV2Ny0z-EaSg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IPJTGnuoIS0rsJANV2Ny0z-EaSg.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914DC5D/39E7146C2A3311EB929DC07CC4F9AE02/6A0673EE2A4311EBBD69BE46C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  202.44.204.0/24

    Signature Algorithm: sha256WithRSAEncryption
         51:f1:ea:61:1c:23:36:51:22:d2:ae:ca:6f:fa:d7:ef:de:05:
         54:71:8b:7f:e8:09:7a:ee:93:a3:76:80:98:cf:29:06:86:5b:
         7d:93:f2:32:1a:50:a5:4a:1a:80:84:0f:d7:d7:08:22:b7:32:
         2e:1e:31:52:02:83:41:79:08:85:cc:31:1b:db:29:46:56:c6:
         ef:e7:e8:e9:7c:8d:ad:5f:fe:90:bf:7f:4d:5c:78:3a:89:00:
         b9:30:5c:dc:0f:ff:0b:88:ed:61:b4:bb:14:11:1d:1d:b8:04:
         56:36:8f:4d:a3:45:2b:ae:6c:9d:82:90:c3:fc:37:4f:aa:f8:
         e1:c4:3a:1d:16:ad:ef:24:36:66:80:83:3b:65:ce:32:19:d2:
         33:a8:c2:60:67:31:00:f5:c5:d7:f0:c9:f7:d5:4b:bd:fe:68:
         d9:76:e5:61:06:57:9e:a6:98:3a:db:bf:c1:4c:9e:43:05:cc:
         b5:8a:5f:82:1a:05:6c:9b:a5:0f:cb:87:bd:54:8e:93:d3:11:
         7d:de:80:a6:be:47:ec:e3:80:bb:15:87:cc:50:95:b7:4d:da:
         a8:72:47:73:83:95:cd:7a:eb:b0:5c:ca:2a:02:bf:42:6a:13:
         a9:8b:e1:ba:95:28:50:40:e6:47:8b:f3:f1:44:20:d4:0c:cf:
         66:a7:8d:7e
-----BEGIN CERTIFICATE-----
MIIFcTCCBFmgAwIBAgICCJEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NERDNUQxMTAvBgNVBAUTKDIwRjI1MzFBN0JBODIxMkQyQkIwOTAwRDU3NjM3MkQz
M0Y4NDY5MjgwHhcNMjUwNTIwMjE1MTAzWhcNMjYwOTMwMDAwMDAwWjAYMRYwFAYD
VQQDEw02ODJjZjk0Ny01N2QxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAvcuyX4U+7CHM1I27zV0YGGcLbMkj+DeggLw3MgZrU1JfWaa3RG2tohJlYXyK
6PxFjqu3EN8cxSZ1WE7kxxIDq01ZemuYGwqD75wUR7XIkHw5mXVyPbJIeltFvK1P
8kN5AMz+7OE1OV3MZibF4hC21juiVd+Q13WUjGaPOfYKbGd8zx/UVzR3YXnVKlGk
YOMRG5uI1cylGIJkMbcg346yGKad4E20EOhRyrQLXh169kt1mUqYdD8TK3b1f79k
suCAhpvDEbSO6Lou6VzgN2r6Loh8jIECk1imA1dKDsV/kj97yB9tu4VCtlEAmmH4
gWjzIvmrVBU6J3Fo62kgDs8ilwIDAQABo4IClTCCApEwHQYDVR0OBBYEFHr7mx3B
KtniIryKIAj+uro6CNZMMB8GA1UdIwQYMBaAFCDyUxp7qCEtK7CQDVdjctM/hGko
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0REM1RC8zOUU3MTQ2QzJB
MzMxMUVCOTI5REMwN0NDNEY5QUUwMi9JUEpUR251b0lTMHJzSkFOVjJOeTB6LUVh
U2cuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0lQSlRHbnVvSVMwcnNKQU5WMk55MHotRWFTZy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
NERDNUQvMzlFNzE0NkMyQTMzMTFFQjkyOURDMDdDQzRGOUFFMDIvNkEwNjczRUUy
QTQzMTFFQkJENjlCRTQ2QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E
EDAOMAwEAgABMAYDBADKLMwwDQYJKoZIhvcNAQELBQADggEBAFHx6mEcIzZRItKu
ym/61+/eBVRxi3/oCXruk6N2gJjPKQaGW32T8jIaUKVKGoCED9fXCCK3Mi4eMVIC
g0F5CIXMMRvbKUZWxu/n6Ol8ja1f/pC/f01ceDqJALkwXNwP/wuI7WG0uxQRHR24
BFY2j02jRSuubJ2CkMP8N0+q+OHEOh0Wre8kNmaAgztlzjIZ0jOowmBnMQD1xdfw
yffVS73+aNl25WEGV56mmDrbv8FMnkMFzLWKX4IaBWybpQ/Lh71UjpPTEX3egKa+
R+zjgLsVh8xQlbdN2qhyR3ODlc1667BcyioCv0JqE6mL4bqVKFBA5keL8/FEINQM
z2anjX4=
-----END CERTIFICATE-----
Generated at Tue Jun 3 23:59:26 2025 by rpki-client