Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A915A15E/7AE1328038A111ED86A56A0BC4F9AE02/EA813D021FFC11F0A17B9441C4F9AE02.roa
File:                     EA813D021FFC11F0A17B9441C4F9AE02.roa (raw, json)
Hash identifier:          yKsH6HpvVtjhTQFrfTZTpYvl4BY01lpay1ETEnbArEo=
Subject key identifier:   23:3A:3C:54:16:CE:19:D8:64:6C:C2:D5:EE:02:AA:0D:11:46:9D:15
Certificate issuer:       /CN=A915A15E/serialNumber=F6696E5DBB122DA08537EA52306EEF0CAE936F93
Certificate serial:       0201
Authority key identifier: F6:69:6E:5D:BB:12:2D:A0:85:37:EA:52:30:6E:EF:0C:AE:93:6F:93
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9mluXbsSLaCFN-pSMG7vDK6Tb5M.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A915A15E/7AE1328038A111ED86A56A0BC4F9AE02/EA813D021FFC11F0A17B9441C4F9AE02.roa
Signing time:             Thu 15 May 2025 22:35:34 +0000
ROA not before:           Thu 15 May 2025 22:35:34 +0000
ROA not after:            Tue 30 Dec 2025 00:00:00 +0000
asID:                     7635
IP address blocks:        203.24.70.0/24 maxlen: 24
                          203.24.71.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A915A15E/7AE1328038A111ED86A56A0BC4F9AE02/9mluXbsSLaCFN-pSMG7vDK6Tb5M.crl
                          rsync://rpki.apnic.net/member_repository/A915A15E/7AE1328038A111ED86A56A0BC4F9AE02/9mluXbsSLaCFN-pSMG7vDK6Tb5M.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9mluXbsSLaCFN-pSMG7vDK6Tb5M.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 10 Jun 2025 02:16:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 513 (0x201)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A915A15E, serialNumber=F6696E5DBB122DA08537EA52306EEF0CAE936F93
        Validity
            Not Before: May 15 22:35:34 2025 GMT
            Not After : Dec 30 00:00:00 2025 GMT
        Subject: CN=68266c35-56fd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:c4:ad:9d:79:47:e0:39:84:cd:02:78:6a:31:
                    a6:70:7a:15:4f:7c:9f:c5:b9:ad:0f:f4:38:f3:d7:
                    da:95:df:73:a7:0b:7c:ab:60:85:ac:a7:c1:4c:83:
                    73:84:a2:2e:4e:b1:8b:77:71:a5:61:2a:62:62:e8:
                    75:38:37:81:b2:d4:67:63:bc:3d:6f:ff:a3:b4:8d:
                    00:1f:69:b6:a1:99:e3:ca:c4:ae:34:81:72:69:fb:
                    40:03:3c:66:3f:30:94:f7:1f:41:ab:3a:a7:b2:99:
                    1f:90:08:3d:8a:5a:9f:83:29:ea:7a:ad:30:d8:c0:
                    66:2a:7f:75:f8:65:eb:db:2b:9e:d8:c5:65:23:9d:
                    d3:a2:e1:69:bf:2f:72:8c:1d:5f:2f:02:df:9f:19:
                    d9:99:f2:cf:ec:75:01:09:8e:e4:f9:d2:a9:12:09:
                    de:20:33:19:ab:93:8d:8c:46:4f:eb:76:b3:23:d9:
                    cb:48:bd:67:21:df:69:d0:db:d9:b8:b0:19:43:ee:
                    75:ce:ec:2e:9c:6f:e7:8e:92:71:3a:e4:0a:b6:70:
                    5e:77:af:80:7e:ee:03:0f:a8:77:c9:cd:15:77:78:
                    33:e0:c8:c6:fd:92:b3:37:0e:a8:e3:56:b0:56:00:
                    3f:70:8d:27:e8:ab:e4:5f:6b:33:53:66:cc:e0:08:
                    5e:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                23:3A:3C:54:16:CE:19:D8:64:6C:C2:D5:EE:02:AA:0D:11:46:9D:15
            X509v3 Authority Key Identifier:
                keyid:F6:69:6E:5D:BB:12:2D:A0:85:37:EA:52:30:6E:EF:0C:AE:93:6F:93

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A915A15E/7AE1328038A111ED86A56A0BC4F9AE02/9mluXbsSLaCFN-pSMG7vDK6Tb5M.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9mluXbsSLaCFN-pSMG7vDK6Tb5M.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915A15E/7AE1328038A111ED86A56A0BC4F9AE02/EA813D021FFC11F0A17B9441C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  203.24.70.0/23

    Signature Algorithm: sha256WithRSAEncryption
         47:b7:d0:d6:ab:bf:0b:d3:ab:cb:e8:91:30:c1:a4:7b:6c:91:
         47:93:90:25:08:e7:0d:83:6c:41:27:c3:0b:b4:ce:e2:6c:45:
         66:ed:6e:a4:0c:12:71:6e:c6:b0:55:5b:9a:f7:f6:58:92:55:
         78:c6:ca:96:42:84:c4:41:18:b4:5f:b7:0c:5c:a6:44:29:d7:
         0a:42:c3:2e:cb:8d:76:11:c7:73:0a:5b:37:ac:3c:08:7d:8e:
         87:b8:30:05:0b:2e:83:ab:01:e5:f2:41:91:68:9e:e7:4d:ee:
         a4:09:48:ee:34:66:ed:56:2f:c4:df:75:1c:fa:65:5b:c2:84:
         4b:e4:db:93:fc:8f:ef:47:4e:0a:78:f7:06:09:4e:fb:ea:22:
         7e:5f:90:e6:c0:bf:45:e1:be:b7:e8:af:69:10:24:e7:69:59:
         b9:b4:49:87:f6:0e:1a:de:51:a8:5e:98:7a:44:42:b0:2c:d5:
         67:91:03:51:37:b1:12:1e:71:70:2e:ad:cc:f6:22:5f:d6:c4:
         03:eb:ea:15:74:d8:a5:2f:49:ed:9e:71:07:c2:32:5b:0d:2a:
         39:76:45:63:7d:6e:03:5d:cc:6e:de:77:1a:00:fb:b6:82:fb:
         c2:7b:11:83:51:45:d1:68:35:a5:84:2c:54:f2:0c:fd:b1:1d:
         98:7e:de:7c
-----BEGIN CERTIFICATE-----
MIIFcTCCBFmgAwIBAgICAgEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NUExNUUxMTAvBgNVBAUTKEY2Njk2RTVEQkIxMjJEQTA4NTM3RUE1MjMwNkVFRjBD
QUU5MzZGOTMwHhcNMjUwNTE1MjIzNTM0WhcNMjUxMjMwMDAwMDAwWjAYMRYwFAYD
VQQDEw02ODI2NmMzNS01NmZkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAwsStnXlH4DmEzQJ4ajGmcHoVT3yfxbmtD/Q489fald9zpwt8q2CFrKfBTINz
hKIuTrGLd3GlYSpiYuh1ODeBstRnY7w9b/+jtI0AH2m2oZnjysSuNIFyaftAAzxm
PzCU9x9BqzqnspkfkAg9ilqfgynqeq0w2MBmKn91+GXr2yue2MVlI53TouFpvy9y
jB1fLwLfnxnZmfLP7HUBCY7k+dKpEgneIDMZq5ONjEZP63azI9nLSL1nId9p0NvZ
uLAZQ+51zuwunG/njpJxOuQKtnBed6+Afu4DD6h3yc0Vd3gz4MjG/ZKzNw6o41aw
VgA/cI0n6KvkX2szU2bM4AhezQIDAQABo4IClTCCApEwHQYDVR0OBBYEFCM6PFQW
zhnYZGzC1e4Cqg0RRp0VMB8GA1UdIwQYMBaAFPZpbl27Ei2ghTfqUjBu7wyuk2+T
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1QTE1RS83QUUxMzI4MDM4
QTExMUVEODZBNTZBMEJDNEY5QUUwMi85bWx1WGJzU0xhQ0ZOLXBTTUc3dkRLNlRi
NU0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyLzltbHVYYnNTTGFDRk4tcFNNRzd2REs2VGI1TS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
NUExNUUvN0FFMTMyODAzOEExMTFFRDg2QTU2QTBCQzRGOUFFMDIvRUE4MTNEMDIx
RkZDMTFGMEExN0I5NDQxQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E
EDAOMAwEAgABMAYDBAHLGEYwDQYJKoZIhvcNAQELBQADggEBAEe30NarvwvTq8vo
kTDBpHtskUeTkCUI5w2DbEEnwwu0zuJsRWbtbqQMEnFuxrBVW5r39liSVXjGypZC
hMRBGLRftwxcpkQp1wpCwy7LjXYRx3MKWzesPAh9joe4MAULLoOrAeXyQZFonudN
7qQJSO40Zu1WL8TfdRz6ZVvChEvk25P8j+9HTgp49wYJTvvqIn5fkObAv0Xhvrfo
r2kQJOdpWbm0SYf2DhreUahemHpEQrAs1WeRA1E3sRIecXAurcz2Il/WxAPr6hV0
2KUvSe2ecQfCMlsNKjl2RWN9bgNdzG7edxoA+7aC+8J7EYNRRdFoNaWELFTyDP2x
HZh+3nw=
-----END CERTIFICATE-----
Generated at Wed Jun 4 00:14:09 2025 by rpki-client