Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A916807A/0263AB483E8811EDA61A9B2AC4F9AE02/0634745A36D311F091108A4EC4F9AE02.roa
File:                     0634745A36D311F091108A4EC4F9AE02.roa (raw, json)
Hash identifier:          OK7qXV40Ga+/DqfoMasVZ40xTPBivsoEX362FFQWgvA=
Subject key identifier:   D6:49:E1:94:59:D6:CA:67:CA:1A:74:96:0E:24:18:71:7F:BD:B5:74
Certificate issuer:       /CN=A916807A/serialNumber=729E2F9C1D87C214735078CFD21C638E07157B5D
Certificate serial:       0229
Authority key identifier: 72:9E:2F:9C:1D:87:C2:14:73:50:78:CF:D2:1C:63:8E:07:15:7B:5D
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cp4vnB2HwhRzUHjP0hxjjgcVe10.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A916807A/0263AB483E8811EDA61A9B2AC4F9AE02/0634745A36D311F091108A4EC4F9AE02.roa
Signing time:             Thu 22 May 2025 06:07:22 +0000
ROA not before:           Thu 22 May 2025 06:07:22 +0000
ROA not after:            Tue 30 Dec 2025 00:00:00 +0000
asID:                     36530
IP address blocks:        202.155.120.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A916807A/0263AB483E8811EDA61A9B2AC4F9AE02/cp4vnB2HwhRzUHjP0hxjjgcVe10.crl
                          rsync://rpki.apnic.net/member_repository/A916807A/0263AB483E8811EDA61A9B2AC4F9AE02/cp4vnB2HwhRzUHjP0hxjjgcVe10.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cp4vnB2HwhRzUHjP0hxjjgcVe10.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 10 Jun 2025 02:17:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 553 (0x229)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A916807A, serialNumber=729E2F9C1D87C214735078CFD21C638E07157B5D
        Validity
            Not Before: May 22 06:07:22 2025 GMT
            Not After : Dec 30 00:00:00 2025 GMT
        Subject: CN=682ebf1a-8a27
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:c1:10:c3:d3:28:3c:7c:3e:68:69:34:d6:a1:
                    ff:04:bb:a3:5f:12:61:e9:40:2a:2f:4e:af:64:00:
                    e1:18:1e:46:6d:a7:bd:08:9f:6a:ee:be:cf:03:69:
                    04:56:0f:d2:7b:88:3c:ea:d6:1d:f9:a2:4f:13:9e:
                    56:0d:65:a3:9b:6b:b4:7e:ce:1e:16:73:eb:64:48:
                    f3:61:f0:be:60:c1:ec:d4:da:5b:e1:e0:79:3b:3b:
                    f7:a7:e5:ff:3b:0a:8a:81:29:65:ed:a6:f7:6c:bb:
                    ab:87:2e:52:b0:f6:29:18:03:eb:c9:94:45:27:16:
                    02:d2:5c:85:dc:09:99:6d:4a:4c:0f:55:e1:f8:4c:
                    bf:60:86:f4:6d:ce:1c:af:84:30:ff:d4:01:d8:2a:
                    e6:aa:ba:e4:71:07:3d:1a:cc:82:ad:11:fb:14:29:
                    3c:31:d1:b1:13:a3:15:1f:e7:83:4a:26:9c:8a:75:
                    9f:78:ab:04:a7:5d:17:44:22:a9:9e:98:46:97:8c:
                    6b:a5:ef:9e:a6:5d:ce:a2:56:1e:0e:98:fd:14:0a:
                    97:91:37:da:88:94:62:09:03:10:3f:f0:cb:92:aa:
                    a5:b3:99:a7:ad:52:95:f1:01:63:d9:40:00:29:59:
                    bb:eb:cd:f6:ed:d4:4c:7c:a3:e9:80:3e:a6:4e:60:
                    42:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D6:49:E1:94:59:D6:CA:67:CA:1A:74:96:0E:24:18:71:7F:BD:B5:74
            X509v3 Authority Key Identifier:
                keyid:72:9E:2F:9C:1D:87:C2:14:73:50:78:CF:D2:1C:63:8E:07:15:7B:5D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A916807A/0263AB483E8811EDA61A9B2AC4F9AE02/cp4vnB2HwhRzUHjP0hxjjgcVe10.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cp4vnB2HwhRzUHjP0hxjjgcVe10.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916807A/0263AB483E8811EDA61A9B2AC4F9AE02/0634745A36D311F091108A4EC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  202.155.120.0/22

    Signature Algorithm: sha256WithRSAEncryption
         1f:a5:c2:60:82:4c:5a:8b:68:70:bc:bc:98:19:26:e8:52:10:
         e5:26:92:18:6e:d1:60:81:8b:22:70:ce:b7:60:a5:44:85:56:
         df:0c:ec:91:41:8c:58:7d:5d:9b:eb:3b:1b:40:8f:25:9a:5c:
         e8:5a:a3:43:61:76:72:02:f0:0d:7d:ef:5a:81:84:7f:58:dc:
         fa:4c:56:9b:09:86:68:cb:71:28:cc:e6:cc:cf:5c:f0:04:f0:
         3a:ff:5e:89:2e:00:70:3c:72:81:c5:d3:79:c1:63:d9:fd:48:
         de:f5:42:0b:fd:e6:94:8e:c5:b3:72:05:12:cc:df:ea:2b:5d:
         f5:5f:22:57:2e:fe:d1:63:23:1a:d9:4b:be:d5:b8:6d:9c:2b:
         a7:2c:52:56:5e:53:9e:85:9f:c5:8e:a5:22:9f:5a:1d:38:64:
         54:08:c8:0e:5d:2f:04:85:30:ef:ec:00:ac:00:ab:54:3c:65:
         9e:81:52:89:36:1b:57:1f:2e:db:f4:71:c9:57:6f:d7:7c:70:
         de:82:4d:9a:c0:6a:81:cc:52:93:7e:50:7d:86:ae:11:a8:96:
         ba:87:2c:c9:32:a3:81:1b:94:58:5e:4b:24:e1:9e:34:89:a1:
         ac:67:50:79:0e:d2:3f:90:f6:e1:a4:ff:a4:68:63:ef:32:05:
         9d:fa:dc:0b
-----BEGIN CERTIFICATE-----
MIIFcTCCBFmgAwIBAgICAikwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NjgwN0ExMTAvBgNVBAUTKDcyOUUyRjlDMUQ4N0MyMTQ3MzUwNzhDRkQyMUM2MzhF
MDcxNTdCNUQwHhcNMjUwNTIyMDYwNzIyWhcNMjUxMjMwMDAwMDAwWjAYMRYwFAYD
VQQDEw02ODJlYmYxYS04YTI3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAvsEQw9MoPHw+aGk01qH/BLujXxJh6UAqL06vZADhGB5Gbae9CJ9q7r7PA2kE
Vg/Se4g86tYd+aJPE55WDWWjm2u0fs4eFnPrZEjzYfC+YMHs1Npb4eB5Ozv3p+X/
OwqKgSll7ab3bLurhy5SsPYpGAPryZRFJxYC0lyF3AmZbUpMD1Xh+Ey/YIb0bc4c
r4Qw/9QB2CrmqrrkcQc9GsyCrRH7FCk8MdGxE6MVH+eDSiacinWfeKsEp10XRCKp
nphGl4xrpe+epl3OolYeDpj9FAqXkTfaiJRiCQMQP/DLkqqls5mnrVKV8QFj2UAA
KVm768327dRMfKPpgD6mTmBCzwIDAQABo4IClTCCApEwHQYDVR0OBBYEFNZJ4ZRZ
1spnyhp0lg4kGHF/vbV0MB8GA1UdIwQYMBaAFHKeL5wdh8IUc1B4z9IcY44HFXtd
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2ODA3QS8wMjYzQUI0ODNF
ODgxMUVEQTYxQTlCMkFDNEY5QUUwMi9jcDR2bkIySHdoUnpVSGpQMGh4ampnY1Zl
MTAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2NwNHZuQjJId2hSelVIalAwaHhqamdjVmUxMC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
NjgwN0EvMDI2M0FCNDgzRTg4MTFFREE2MUE5QjJBQzRGOUFFMDIvMDYzNDc0NUEz
NkQzMTFGMDkxMTA4QTRFQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E
EDAOMAwEAgABMAYDBALKm3gwDQYJKoZIhvcNAQELBQADggEBAB+lwmCCTFqLaHC8
vJgZJuhSEOUmkhhu0WCBiyJwzrdgpUSFVt8M7JFBjFh9XZvrOxtAjyWaXOhao0Nh
dnIC8A1971qBhH9Y3PpMVpsJhmjLcSjM5szPXPAE8Dr/XokuAHA8coHF03nBY9n9
SN71Qgv95pSOxbNyBRLM3+orXfVfIlcu/tFjIxrZS77VuG2cK6csUlZeU56Fn8WO
pSKfWh04ZFQIyA5dLwSFMO/sAKwAq1Q8ZZ6BUok2G1cfLtv0cclXb9d8cN6CTZrA
aoHMUpN+UH2GrhGolrqHLMkyo4EblFheSyThnjSJoaxnUHkO0j+Q9uGk/6RoY+8y
BZ363As=
-----END CERTIFICATE-----
Generated at Wed Jun 4 00:15:13 2025 by rpki-client