Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A914EAE4/6753B8AE257511E7AC0D172AC4F9AE02/E3FFB7282B1F11F09AACBB33C4F9AE02.roa
File:                     E3FFB7282B1F11F09AACBB33C4F9AE02.roa (raw, json)
Hash identifier:          k8p6iF+9IETIN5QqyzpOUfmBkPnJWBTNYqsPz6Lu4tg=
Subject key identifier:   5E:CF:FE:8F:DD:47:E5:83:04:FE:47:09:5E:26:DF:3B:1D:7C:53:9A
Certificate issuer:       /CN=A914EAE4/serialNumber=AD56B67187A98BA314084405797BD9656E8AC8BA
Certificate serial:       1EDE
Authority key identifier: AD:56:B6:71:87:A9:8B:A3:14:08:44:05:79:7B:D9:65:6E:8A:C8:BA
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rVa2cYepi6MUCEQFeXvZZW6KyLo.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A914EAE4/6753B8AE257511E7AC0D172AC4F9AE02/E3FFB7282B1F11F09AACBB33C4F9AE02.roa
Signing time:             Wed 07 May 2025 08:47:22 +0000
ROA not before:           Wed 07 May 2025 08:47:22 +0000
ROA not after:            Mon 01 Dec 2025 00:00:00 +0000
asID:                     134756
IP address blocks:        180.96.10.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A914EAE4/6753B8AE257511E7AC0D172AC4F9AE02/rVa2cYepi6MUCEQFeXvZZW6KyLo.crl
                          rsync://rpki.apnic.net/member_repository/A914EAE4/6753B8AE257511E7AC0D172AC4F9AE02/rVa2cYepi6MUCEQFeXvZZW6KyLo.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rVa2cYepi6MUCEQFeXvZZW6KyLo.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 07 Jun 2025 16:16:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 7902 (0x1ede)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A914EAE4, serialNumber=AD56B67187A98BA314084405797BD9656E8AC8BA
        Validity
            Not Before: May  7 08:47:22 2025 GMT
            Not After : Dec  1 00:00:00 2025 GMT
        Subject: CN=681b1e1a-b732
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:3e:d8:fa:af:eb:f8:12:9a:04:07:f2:92:d6:
                    7e:35:02:6b:1b:a0:1a:71:a2:df:12:d5:da:41:45:
                    4e:6c:2c:f6:0d:d3:69:ae:0b:7c:a0:a2:71:a8:39:
                    68:cd:ad:21:30:c1:78:d8:21:6e:9a:f1:05:11:0f:
                    cc:78:76:ba:c4:c4:1e:10:4e:a0:67:01:a0:6e:27:
                    81:80:20:6f:e5:6b:ca:7f:87:16:68:cd:ea:c5:29:
                    23:7b:a0:cb:4a:e6:83:d0:39:e3:73:e1:40:d6:83:
                    8d:ef:50:0a:ea:f7:4c:5d:ef:bc:c9:7a:7f:76:33:
                    d8:16:af:36:dd:be:9c:52:32:5a:12:ad:05:92:8a:
                    ed:03:14:0f:ef:00:de:0c:45:cf:00:a8:b2:98:7f:
                    b6:f3:b2:91:f9:80:d2:6e:c0:3c:01:70:84:ce:79:
                    17:7c:ff:cd:33:af:25:21:ef:0f:4f:86:67:e6:8e:
                    96:27:4a:50:8b:63:22:a8:17:74:f0:6a:a0:00:72:
                    b4:75:50:41:66:77:ab:18:e1:d7:66:08:19:05:90:
                    ef:a6:91:df:5e:c0:0b:86:95:68:a1:b3:8d:72:45:
                    23:d1:d1:cc:b4:47:8e:60:b9:e8:d4:66:09:94:4a:
                    a0:3a:f4:26:67:8c:2d:cd:b0:4b:4a:d4:d5:4a:43:
                    11:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5E:CF:FE:8F:DD:47:E5:83:04:FE:47:09:5E:26:DF:3B:1D:7C:53:9A
            X509v3 Authority Key Identifier:
                keyid:AD:56:B6:71:87:A9:8B:A3:14:08:44:05:79:7B:D9:65:6E:8A:C8:BA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A914EAE4/6753B8AE257511E7AC0D172AC4F9AE02/rVa2cYepi6MUCEQFeXvZZW6KyLo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rVa2cYepi6MUCEQFeXvZZW6KyLo.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914EAE4/6753B8AE257511E7AC0D172AC4F9AE02/E3FFB7282B1F11F09AACBB33C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  180.96.10.0/24

    Signature Algorithm: sha256WithRSAEncryption
         51:95:cb:c3:e4:81:75:21:18:c3:09:f1:06:99:a0:44:88:2c:
         db:f6:1c:4a:19:d4:6b:ec:af:3b:58:3a:46:29:aa:d4:d7:53:
         9e:2e:ac:89:aa:f6:c9:78:66:76:c0:ed:f0:58:e7:19:a7:8a:
         64:1b:12:01:33:8f:4c:3b:3e:db:1b:eb:f7:09:c1:18:0f:36:
         dd:79:b1:12:b9:47:ea:b4:af:be:03:e7:d8:10:95:ba:06:6e:
         31:82:ce:43:ab:69:09:ef:ce:1e:5d:50:6a:d2:8a:84:94:0e:
         0a:30:77:26:35:77:71:9d:ae:8d:16:ac:e2:9d:47:aa:44:9e:
         62:90:f1:69:cf:17:bb:34:35:99:8f:5d:a6:a8:f5:13:14:d3:
         8c:83:e9:d5:58:02:68:18:8f:08:e5:df:e1:f8:47:f9:12:29:
         25:c9:68:f6:1a:08:54:f5:74:e7:d7:bb:e3:39:d1:c4:bf:fd:
         15:22:bf:e4:ec:a0:74:0f:67:97:53:d5:17:6b:d9:1e:cd:c4:
         bb:a8:f2:2e:6e:98:e0:28:c8:47:18:af:f6:7b:db:8f:18:70:
         29:ec:b3:9f:e9:10:a3:f7:1f:46:dc:c1:05:09:a2:79:bd:33:
         0b:e0:b7:c9:36:4a:4b:dd:46:e0:6b:12:b7:8e:3d:f6:b9:09:
         6a:3a:32:15
-----BEGIN CERTIFICATE-----
MIIFcTCCBFmgAwIBAgICHt4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NEVBRTQxMTAvBgNVBAUTKEFENTZCNjcxODdBOThCQTMxNDA4NDQwNTc5N0JEOTY1
NkU4QUM4QkEwHhcNMjUwNTA3MDg0NzIyWhcNMjUxMjAxMDAwMDAwWjAYMRYwFAYD
VQQDEw02ODFiMWUxYS1iNzMyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA3D7Y+q/r+BKaBAfyktZ+NQJrG6AacaLfEtXaQUVObCz2DdNprgt8oKJxqDlo
za0hMMF42CFumvEFEQ/MeHa6xMQeEE6gZwGgbieBgCBv5WvKf4cWaM3qxSkje6DL
SuaD0Dnjc+FA1oON71AK6vdMXe+8yXp/djPYFq823b6cUjJaEq0FkortAxQP7wDe
DEXPAKiymH+287KR+YDSbsA8AXCEznkXfP/NM68lIe8PT4Zn5o6WJ0pQi2MiqBd0
8GqgAHK0dVBBZnerGOHXZggZBZDvppHfXsALhpVoobONckUj0dHMtEeOYLno1GYJ
lEqgOvQmZ4wtzbBLStTVSkMRMwIDAQABo4IClTCCApEwHQYDVR0OBBYEFF7P/o/d
R+WDBP5HCV4m3zsdfFOaMB8GA1UdIwQYMBaAFK1WtnGHqYujFAhEBXl72WVuisi6
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0RUFFNC82NzUzQjhBRTI1
NzUxMUU3QUMwRDE3MkFDNEY5QUUwMi9yVmEyY1llcGk2TVVDRVFGZVh2WlpXNkt5
TG8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL3JWYTJjWWVwaTZNVUNFUUZlWHZaWlc2S3lMby5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
NEVBRTQvNjc1M0I4QUUyNTc1MTFFN0FDMEQxNzJBQzRGOUFFMDIvRTNGRkI3Mjgy
QjFGMTFGMDlBQUNCQjMzQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E
EDAOMAwEAgABMAYDBAC0YAowDQYJKoZIhvcNAQELBQADggEBAFGVy8PkgXUhGMMJ
8QaZoESILNv2HEoZ1GvsrztYOkYpqtTXU54urImq9sl4ZnbA7fBY5xmnimQbEgEz
j0w7Ptsb6/cJwRgPNt15sRK5R+q0r74D59gQlboGbjGCzkOraQnvzh5dUGrSioSU
DgowdyY1d3Gdro0WrOKdR6pEnmKQ8WnPF7s0NZmPXaao9RMU04yD6dVYAmgYjwjl
3+H4R/kSKSXJaPYaCFT1dOfXu+M50cS//RUiv+TsoHQPZ5dT1Rdr2R7NxLuo8i5u
mOAoyEcYr/Z7248YcCnss5/pEKP3H0bcwQUJonm9Mwvgt8k2SkvdRuBrEreOPfa5
CWo6MhU=
-----END CERTIFICATE-----
Generated at Mon Jun 2 07:04:52 2025 by rpki-client