Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A917315B/D735A3B4ED4B11ECA9553778C4F9AE02/EC6F91D234E111F0AC656B38C4F9AE02.roa
File:                     EC6F91D234E111F0AC656B38C4F9AE02.roa (raw, json)
Hash identifier:          EAsZTbmjul19M3nCnjse3lLjxyXit2KRBEjP0/M4doE=
Subject key identifier:   16:55:6D:7B:27:92:AB:0A:EE:64:DC:5B:3F:06:2A:5A:6E:C7:58:39
Certificate issuer:       /CN=A917315B/serialNumber=196F92773293E4954B4D97A5D37AC820A745C2E0
Certificate serial:       031E
Authority key identifier: 19:6F:92:77:32:93:E4:95:4B:4D:97:A5:D3:7A:C8:20:A7:45:C2:E0
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GW-SdzKT5JVLTZel03rIIKdFwuA.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A917315B/D735A3B4ED4B11ECA9553778C4F9AE02/EC6F91D234E111F0AC656B38C4F9AE02.roa
Signing time:             Mon 19 May 2025 18:48:59 +0000
ROA not before:           Mon 19 May 2025 18:48:59 +0000
ROA not after:            Tue 30 Sep 2025 00:00:00 +0000
asID:                     208171
IP address blocks:        2001:df0:d840::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A917315B/D735A3B4ED4B11ECA9553778C4F9AE02/GW-SdzKT5JVLTZel03rIIKdFwuA.crl
                          rsync://rpki.apnic.net/member_repository/A917315B/D735A3B4ED4B11ECA9553778C4F9AE02/GW-SdzKT5JVLTZel03rIIKdFwuA.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GW-SdzKT5JVLTZel03rIIKdFwuA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 08 Jun 2025 01:37:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 798 (0x31e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A917315B, serialNumber=196F92773293E4954B4D97A5D37AC820A745C2E0
        Validity
            Not Before: May 19 18:48:59 2025 GMT
            Not After : Sep 30 00:00:00 2025 GMT
        Subject: CN=682b7d1a-763b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:89:c8:9c:04:5e:e5:4e:93:a0:1e:6a:9a:64:
                    28:16:18:08:d3:79:bb:d9:27:bf:d6:31:67:fd:93:
                    c2:1f:2a:c2:54:bd:30:26:fd:55:0f:21:0c:ab:7f:
                    6f:55:2a:32:29:63:ab:a9:6b:be:e4:b4:cb:2e:03:
                    83:1d:e3:3a:bd:46:e0:ab:7b:14:b4:91:06:32:84:
                    31:0b:32:6a:c6:a6:2c:56:95:08:98:3d:b8:a1:ab:
                    2d:3d:c3:86:81:4a:44:2d:b6:fa:a0:d4:25:ec:e5:
                    bd:46:4d:cb:ae:86:88:ef:68:c0:88:7f:db:d8:a7:
                    fe:37:b2:c5:b2:f3:5d:42:20:6d:d4:4b:90:88:a2:
                    bc:94:fa:17:98:42:f9:31:6a:b2:47:be:46:f5:4a:
                    13:68:4a:4a:1a:71:cc:eb:1e:40:dc:a9:32:29:46:
                    d5:d0:d6:8b:fb:d0:cd:ab:92:34:27:24:4d:a6:c8:
                    72:14:f3:f7:de:6a:0b:f5:ca:e2:9e:04:77:ae:a3:
                    b3:cc:71:75:12:f8:95:79:ed:b8:b8:3d:60:b3:c4:
                    71:a1:43:27:59:49:6c:41:bd:56:f9:cb:ce:c0:48:
                    99:d4:5a:db:f6:4c:d3:09:a9:ae:cf:4b:2c:a3:92:
                    e0:c8:14:6b:92:5a:04:19:1a:68:34:22:48:5f:95:
                    c2:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                16:55:6D:7B:27:92:AB:0A:EE:64:DC:5B:3F:06:2A:5A:6E:C7:58:39
            X509v3 Authority Key Identifier:
                keyid:19:6F:92:77:32:93:E4:95:4B:4D:97:A5:D3:7A:C8:20:A7:45:C2:E0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A917315B/D735A3B4ED4B11ECA9553778C4F9AE02/GW-SdzKT5JVLTZel03rIIKdFwuA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GW-SdzKT5JVLTZel03rIIKdFwuA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917315B/D735A3B4ED4B11ECA9553778C4F9AE02/EC6F91D234E111F0AC656B38C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:df0:d840::/48

    Signature Algorithm: sha256WithRSAEncryption
         42:aa:4b:71:8a:e8:25:82:28:8c:cd:e4:e1:32:c5:8d:83:21:
         4a:6d:7f:d8:49:c2:3d:32:ad:58:9d:7a:e8:28:18:13:dc:69:
         64:d1:b3:61:26:df:73:41:28:08:ee:af:25:72:2c:22:5f:ce:
         cc:39:44:9b:3f:00:98:32:b3:0e:8a:46:85:b0:0f:28:9a:05:
         88:bd:bf:7c:f1:da:dd:0f:67:31:7a:f4:b6:8c:3a:7a:b1:b3:
         f3:e5:bb:54:ea:b1:9b:0e:88:6e:1a:23:b8:fb:7f:7e:82:36:
         09:ec:21:79:02:6b:9a:ca:70:34:36:31:91:1d:cf:6f:1b:65:
         68:91:23:ac:e0:99:25:ee:5c:23:64:f1:6c:14:fd:ea:28:1c:
         a7:08:f1:39:35:2f:df:fe:47:90:ac:9a:ff:9c:5d:1d:81:34:
         da:f6:89:35:6c:65:18:ff:8a:fe:00:a6:f5:aa:0b:6f:59:74:
         4b:c3:8e:8f:80:1b:03:dd:7b:e2:1f:6a:40:10:a3:18:8c:16:
         d5:ec:d4:46:bf:1f:18:3d:2a:ff:d7:0c:b9:29:77:fc:f9:10:
         a1:08:38:bf:05:47:3a:46:22:bb:88:35:9e:6a:6a:d3:f6:7c:
         3e:6d:9c:67:98:0d:69:0f:67:08:40:5d:de:13:f9:78:c9:b8:
         9f:b8:58:90
-----BEGIN CERTIFICATE-----
MIIFdDCCBFygAwIBAgICAx4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NzMxNUIxMTAvBgNVBAUTKDE5NkY5Mjc3MzI5M0U0OTU0QjREOTdBNUQzN0FDODIw
QTc0NUMyRTAwHhcNMjUwNTE5MTg0ODU5WhcNMjUwOTMwMDAwMDAwWjAYMRYwFAYD
VQQDEw02ODJiN2QxYS03NjNiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA2YnInARe5U6ToB5qmmQoFhgI03m72Se/1jFn/ZPCHyrCVL0wJv1VDyEMq39v
VSoyKWOrqWu+5LTLLgODHeM6vUbgq3sUtJEGMoQxCzJqxqYsVpUImD24oastPcOG
gUpELbb6oNQl7OW9Rk3LroaI72jAiH/b2Kf+N7LFsvNdQiBt1EuQiKK8lPoXmEL5
MWqyR75G9UoTaEpKGnHM6x5A3KkyKUbV0NaL+9DNq5I0JyRNpshyFPP33moL9cri
ngR3rqOzzHF1EviVee24uD1gs8RxoUMnWUlsQb1W+cvOwEiZ1Frb9kzTCamuz0ss
o5LgyBRrkloEGRpoNCJIX5XCSwIDAQABo4ICmDCCApQwHQYDVR0OBBYEFBZVbXsn
kqsK7mTcWz8GKlpux1g5MB8GA1UdIwQYMBaAFBlvkncyk+SVS02XpdN6yCCnRcLg
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3MzE1Qi9ENzM1QTNCNEVE
NEIxMUVDQTk1NTM3NzhDNEY5QUUwMi9HVy1TZHpLVDVKVkxUWmVsMDNySUlLZEZ3
dUEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0dXLVNkektUNUpWTFRaZWwwM3JJSUtkRnd1QS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
NzMxNUIvRDczNUEzQjRFRDRCMTFFQ0E5NTUzNzc4QzRGOUFFMDIvRUM2RjkxRDIz
NEUxMTFGMEFDNjU2QjM4QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwIgYIKwYBBQUHAQcBAf8E
EzARMA8EAgACMAkDBwAgAQ3w2EAwDQYJKoZIhvcNAQELBQADggEBAEKqS3GK6CWC
KIzN5OEyxY2DIUptf9hJwj0yrVideugoGBPcaWTRs2Em33NBKAjuryVyLCJfzsw5
RJs/AJgysw6KRoWwDyiaBYi9v3zx2t0PZzF69LaMOnqxs/Plu1TqsZsOiG4aI7j7
f36CNgnsIXkCa5rKcDQ2MZEdz28bZWiRI6zgmSXuXCNk8WwU/eooHKcI8Tk1L9/+
R5Csmv+cXR2BNNr2iTVsZRj/iv4ApvWqC29ZdEvDjo+AGwPde+IfakAQoxiMFtXs
1Ea/Hxg9Kv/XDLkpd/z5EKEIOL8FRzpGIruINZ5qatP2fD5tnGeYDWkPZwhAXd4T
+XjJuJ+4WJA=
-----END CERTIFICATE-----
Generated at Mon Jun 2 07:09:28 2025 by rpki-client