Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9166AFF/40CD1B54E50211EE9ABF7655C4F9AE02/5605B7643B8D11F09517A40BC4F9AE02.roa
File:                     5605B7643B8D11F09517A40BC4F9AE02.roa (raw, json)
Hash identifier:          kL+wl3X9lpPDAyc9VPoNCoIe2pFYCq0K/SEYMKMr+fs=
Subject key identifier:   94:2F:65:B5:18:87:27:96:DA:21:D9:E4:0F:B6:56:83:CE:22:FF:1E
Certificate issuer:       /CN=A9166AFF/serialNumber=357A179CDD0AF9A3FB03E177D6A43FB8A57754E0
Certificate serial:       EB
Authority key identifier: 35:7A:17:9C:DD:0A:F9:A3:FB:03:E1:77:D6:A4:3F:B8:A5:77:54:E0
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NXoXnN0K-aP7A-F31qQ_uKV3VOA.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9166AFF/40CD1B54E50211EE9ABF7655C4F9AE02/5605B7643B8D11F09517A40BC4F9AE02.roa
Signing time:             Wed 28 May 2025 06:31:07 +0000
ROA not before:           Wed 28 May 2025 06:31:07 +0000
ROA not after:            Thu 28 May 2026 00:00:00 +0000
asID:                     138014
IP address blocks:        202.71.181.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9166AFF/40CD1B54E50211EE9ABF7655C4F9AE02/NXoXnN0K-aP7A-F31qQ_uKV3VOA.crl
                          rsync://rpki.apnic.net/member_repository/A9166AFF/40CD1B54E50211EE9ABF7655C4F9AE02/NXoXnN0K-aP7A-F31qQ_uKV3VOA.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NXoXnN0K-aP7A-F31qQ_uKV3VOA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 08 Jun 2025 05:07:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 235 (0xeb)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9166AFF, serialNumber=357A179CDD0AF9A3FB03E177D6A43FB8A57754E0
        Validity
            Not Before: May 28 06:31:07 2025 GMT
            Not After : May 28 00:00:00 2026 GMT
        Subject: CN=6836adab-7ce8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:67:53:82:19:20:72:e2:85:30:20:a7:97:3d:
                    6d:f6:f9:21:46:4e:71:49:83:aa:0c:0e:b3:c0:02:
                    44:6d:9c:d4:43:de:e9:64:c7:a4:d4:d4:39:9a:30:
                    12:37:38:12:d6:22:69:bb:cd:d1:1b:eb:f0:b8:cf:
                    23:49:cf:bc:6d:db:50:06:62:2d:fe:1a:da:69:e8:
                    4b:f0:d6:92:ec:da:24:65:d9:21:65:ba:12:d9:7a:
                    53:9e:ed:69:93:92:74:85:9f:35:79:59:28:98:5e:
                    68:7e:d6:35:29:ee:1d:6f:ff:d3:e8:89:3c:bc:f6:
                    6a:28:12:e8:de:3e:d6:36:8f:b3:47:49:3b:bf:e2:
                    9b:d5:39:df:61:30:4a:13:e5:f9:59:53:98:a3:f4:
                    a9:96:ff:48:f2:0d:f1:e9:b1:d0:88:2d:8d:98:bf:
                    2c:09:91:3f:71:e6:69:84:45:34:23:42:5f:92:2f:
                    4b:f3:6b:b1:0c:06:eb:6b:fc:a2:05:c1:dd:81:6c:
                    1b:54:7c:da:54:e3:a0:e3:6f:be:35:62:b0:ec:14:
                    27:98:06:65:c1:a3:75:ae:d2:5a:82:bf:41:0f:8f:
                    6c:22:13:f4:f8:36:86:28:63:95:84:1d:e2:af:28:
                    ec:44:03:55:e5:ae:52:06:59:26:a8:22:9d:c4:0c:
                    b7:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                94:2F:65:B5:18:87:27:96:DA:21:D9:E4:0F:B6:56:83:CE:22:FF:1E
            X509v3 Authority Key Identifier:
                keyid:35:7A:17:9C:DD:0A:F9:A3:FB:03:E1:77:D6:A4:3F:B8:A5:77:54:E0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9166AFF/40CD1B54E50211EE9ABF7655C4F9AE02/NXoXnN0K-aP7A-F31qQ_uKV3VOA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NXoXnN0K-aP7A-F31qQ_uKV3VOA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9166AFF/40CD1B54E50211EE9ABF7655C4F9AE02/5605B7643B8D11F09517A40BC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  202.71.181.0/24

    Signature Algorithm: sha256WithRSAEncryption
         2f:66:3b:70:ea:3e:0a:50:aa:8d:61:52:21:ab:e9:10:0b:7e:
         8b:03:1a:26:26:7c:45:67:f8:81:a7:33:a2:44:4a:9c:1c:7a:
         c6:df:e8:80:b5:f4:80:f3:f7:d5:2a:d7:71:fe:a1:2e:ad:fd:
         45:61:a0:b2:ea:af:e5:2a:16:6a:4b:df:b5:43:f0:62:22:da:
         52:d2:55:e9:ba:0b:94:06:1a:d9:53:af:0d:fe:c8:0a:56:a8:
         3b:fc:37:8f:11:4c:7f:4e:71:ed:60:bf:38:3c:46:89:db:08:
         4e:7e:3f:08:d5:ac:11:45:31:14:33:bb:15:5f:c0:2c:0d:75:
         02:09:e4:88:9e:dc:d8:4d:88:87:27:5d:db:dc:c6:2e:b5:37:
         7f:06:87:0b:18:f8:20:7c:e6:e0:b1:45:e8:e3:49:fe:d2:6f:
         87:2a:c4:b6:63:ed:b3:79:97:52:1e:e3:6a:c7:6f:9a:5d:7a:
         3b:3c:28:71:27:ad:bd:91:23:16:00:88:55:b1:e5:f9:0f:24:
         4c:2e:28:be:e2:41:f4:e8:72:07:eb:39:aa:07:74:b6:c1:94:
         9a:58:a0:48:8f:30:20:63:2c:00:2e:ad:ae:89:98:31:47:fe:
         dd:eb:98:4c:89:83:1d:69:91:a2:74:6e:ac:1e:e9:bd:1d:94:
         07:24:ca:7c
-----BEGIN CERTIFICATE-----
MIIFcTCCBFmgAwIBAgICAOswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NjZBRkYxMTAvBgNVBAUTKDM1N0ExNzlDREQwQUY5QTNGQjAzRTE3N0Q2QTQzRkI4
QTU3NzU0RTAwHhcNMjUwNTI4MDYzMTA3WhcNMjYwNTI4MDAwMDAwWjAYMRYwFAYD
VQQDEw02ODM2YWRhYi03Y2U4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA1WdTghkgcuKFMCCnlz1t9vkhRk5xSYOqDA6zwAJEbZzUQ97pZMek1NQ5mjAS
NzgS1iJpu83RG+vwuM8jSc+8bdtQBmIt/hraaehL8NaS7NokZdkhZboS2XpTnu1p
k5J0hZ81eVkomF5oftY1Ke4db//T6Ik8vPZqKBLo3j7WNo+zR0k7v+Kb1TnfYTBK
E+X5WVOYo/Splv9I8g3x6bHQiC2NmL8sCZE/ceZphEU0I0Jfki9L82uxDAbra/yi
BcHdgWwbVHzaVOOg42++NWKw7BQnmAZlwaN1rtJagr9BD49sIhP0+DaGKGOVhB3i
ryjsRANV5a5SBlkmqCKdxAy3BwIDAQABo4IClTCCApEwHQYDVR0OBBYEFJQvZbUY
hyeW2iHZ5A+2VoPOIv8eMB8GA1UdIwQYMBaAFDV6F5zdCvmj+wPhd9akP7ild1Tg
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2NkFGRi80MENEMUI1NEU1
MDIxMUVFOUFCRjc2NTVDNEY5QUUwMi9OWG9Ybk4wSy1hUDdBLUYzMXFRX3VLVjNW
T0EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL05Yb1huTjBLLWFQN0EtRjMxcVFfdUtWM1ZPQS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
NjZBRkYvNDBDRDFCNTRFNTAyMTFFRTlBQkY3NjU1QzRGOUFFMDIvNTYwNUI3NjQz
QjhEMTFGMDk1MTdBNDBCQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E
EDAOMAwEAgABMAYDBADKR7UwDQYJKoZIhvcNAQELBQADggEBAC9mO3DqPgpQqo1h
UiGr6RALfosDGiYmfEVn+IGnM6JESpwcesbf6IC19IDz99Uq13H+oS6t/UVhoLLq
r+UqFmpL37VD8GIi2lLSVem6C5QGGtlTrw3+yApWqDv8N48RTH9Oce1gvzg8Ronb
CE5+PwjVrBFFMRQzuxVfwCwNdQIJ5Iie3NhNiIcnXdvcxi61N38GhwsY+CB85uCx
RejjSf7Sb4cqxLZj7bN5l1Ie42rHb5pdejs8KHEnrb2RIxYAiFWx5fkPJEwuKL7i
QfTocgfrOaoHdLbBlJpYoEiPMCBjLAAura6JmDFH/t3rmEyJgx1pkaJ0bqwe6b0d
lAckynw=
-----END CERTIFICATE-----
Generated at Mon Jun 2 05:29:19 2025 by rpki-client