Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91A5213/5543BCC405E511EFAB461C09C4F9AE02/E30E4FF605E511EF868E0F6DC4F9AE02.roa
File:                     E30E4FF605E511EF868E0F6DC4F9AE02.roa (raw, json)
Hash identifier:          jb52alxfqmopNXaWzE+J3NyrR4hDhCWX65ruTvYQprU=
Subject key identifier:   64:0D:27:AC:7A:E3:0F:9E:DF:F3:10:35:40:DB:BC:9E:7B:A9:1D:F1
Certificate issuer:       /CN=A91A5213/serialNumber=BA5FB8591BFC0C450A4E44D6FC3E3BC7BE865416
Certificate serial:       BD
Authority key identifier: BA:5F:B8:59:1B:FC:0C:45:0A:4E:44:D6:FC:3E:3B:C7:BE:86:54:16
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ul-4WRv8DEUKTkTW_D47x76GVBY.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91A5213/5543BCC405E511EFAB461C09C4F9AE02/E30E4FF605E511EF868E0F6DC4F9AE02.roa
Signing time:             Sat 19 Apr 2025 05:31:22 +0000
ROA not before:           Sat 19 Apr 2025 05:31:22 +0000
ROA not after:            Wed 01 Jul 2026 00:00:00 +0000
asID:                     152650
IP address blocks:        202.6.86.0/24 maxlen: 24
                          2001:df3:8ec0::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91A5213/5543BCC405E511EFAB461C09C4F9AE02/ul-4WRv8DEUKTkTW_D47x76GVBY.crl
                          rsync://rpki.apnic.net/member_repository/A91A5213/5543BCC405E511EFAB461C09C4F9AE02/ul-4WRv8DEUKTkTW_D47x76GVBY.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ul-4WRv8DEUKTkTW_D47x76GVBY.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 08 Jun 2025 05:23:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 189 (0xbd)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A5213, serialNumber=BA5FB8591BFC0C450A4E44D6FC3E3BC7BE865416
        Validity
            Not Before: Apr 19 05:31:22 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=6803352a-05fa
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:95:94:65:6b:66:cc:fd:e7:73:ad:54:c0:b3:
                    f7:82:c5:b6:c2:35:e6:6b:0e:d0:0a:e8:ff:d5:cb:
                    6b:53:99:67:ba:94:a8:4b:d9:44:75:e3:7d:d0:4c:
                    a4:ff:76:70:31:28:e0:14:80:b5:02:d4:53:6d:7d:
                    b9:d1:66:cd:b7:1a:f3:b5:c1:fe:f7:2c:6c:8d:81:
                    17:a0:d0:cd:46:b3:02:b6:e3:b3:20:4b:ce:be:f8:
                    43:ae:c3:f2:d2:24:db:ce:77:ea:bd:2e:a4:3c:20:
                    77:b1:92:c1:cc:f4:cf:31:4a:df:ad:80:3f:2f:f3:
                    8c:4c:07:89:20:f3:b2:a1:7f:74:38:7a:64:f8:49:
                    d5:31:88:35:08:80:64:00:e9:3d:d6:6b:24:75:a0:
                    0d:10:e9:1f:0b:14:c2:4f:e5:84:44:7c:f4:3d:1b:
                    06:98:53:4c:88:f3:c2:c5:0e:fc:80:35:4d:f5:4b:
                    8a:30:c7:72:62:89:d4:70:48:23:ef:03:3e:df:98:
                    8d:bb:c9:aa:4f:67:01:78:d6:5d:84:56:d3:23:30:
                    04:ec:8f:d3:ea:f9:02:99:4d:1d:00:14:a6:18:5a:
                    2f:06:07:9d:a6:d4:0d:0a:3e:11:55:05:d9:72:7c:
                    fd:fa:7f:97:c0:d6:b2:0b:34:c2:b5:f5:7e:76:ca:
                    10:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                64:0D:27:AC:7A:E3:0F:9E:DF:F3:10:35:40:DB:BC:9E:7B:A9:1D:F1
            X509v3 Authority Key Identifier:
                keyid:BA:5F:B8:59:1B:FC:0C:45:0A:4E:44:D6:FC:3E:3B:C7:BE:86:54:16

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91A5213/5543BCC405E511EFAB461C09C4F9AE02/ul-4WRv8DEUKTkTW_D47x76GVBY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ul-4WRv8DEUKTkTW_D47x76GVBY.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A5213/5543BCC405E511EFAB461C09C4F9AE02/E30E4FF605E511EF868E0F6DC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  202.6.86.0/24
                IPv6:
                  2001:df3:8ec0::/48

    Signature Algorithm: sha256WithRSAEncryption
         51:69:fe:37:57:6c:c2:a0:4a:e2:68:4a:30:ba:1d:eb:95:76:
         c9:72:e2:d9:21:8e:05:31:ec:67:6f:aa:3e:da:c9:3e:16:cc:
         dd:b2:1d:7d:aa:f5:a8:c3:99:9e:f9:2c:27:65:eb:a2:e9:6f:
         61:49:44:2c:8c:d6:3f:a7:d3:5c:eb:7a:fa:c4:d6:5b:5d:09:
         6b:af:1b:ea:0e:92:d5:0d:d3:7d:90:a8:f1:22:10:75:55:2b:
         99:e4:21:07:80:b8:b1:e7:2d:05:6b:54:ba:ff:84:a8:52:99:
         f8:b6:86:f1:5f:9a:0b:35:18:68:ec:18:76:96:5d:d9:0f:dc:
         10:8a:4f:38:6e:f8:ac:d7:cd:47:66:c5:f6:1d:38:7d:5e:0b:
         99:b6:af:bb:d5:ce:9a:7d:31:bf:92:69:f2:ae:64:35:b6:7a:
         2b:e2:45:f9:77:f0:db:2d:68:7e:84:8a:60:79:99:d2:ce:a3:
         ab:b4:61:f1:76:b3:85:6e:0e:16:26:e5:3d:f6:64:16:38:b6:
         2a:e7:78:97:23:56:55:0d:d2:db:ec:d9:5d:9c:9a:f1:80:ab:
         51:f7:c9:15:4b:c9:e9:3b:1b:96:3b:b6:19:dd:66:30:8d:60:
         51:85:2c:ed:bc:0c:66:f2:04:2b:a5:11:30:55:4c:a8:e7:5f:
         b9:86:2c:5e
-----BEGIN CERTIFICATE-----
MIIFgjCCBGqgAwIBAgICAL0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QTUyMTMxMTAvBgNVBAUTKEJBNUZCODU5MUJGQzBDNDUwQTRFNDRENkZDM0UzQkM3
QkU4NjU0MTYwHhcNMjUwNDE5MDUzMTIyWhcNMjYwNzAxMDAwMDAwWjAYMRYwFAYD
VQQDEw02ODAzMzUyYS0wNWZhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAy5WUZWtmzP3nc61UwLP3gsW2wjXmaw7QCuj/1ctrU5lnupSoS9lEdeN90Eyk
/3ZwMSjgFIC1AtRTbX250WbNtxrztcH+9yxsjYEXoNDNRrMCtuOzIEvOvvhDrsPy
0iTbznfqvS6kPCB3sZLBzPTPMUrfrYA/L/OMTAeJIPOyoX90OHpk+EnVMYg1CIBk
AOk91mskdaANEOkfCxTCT+WERHz0PRsGmFNMiPPCxQ78gDVN9UuKMMdyYonUcEgj
7wM+35iNu8mqT2cBeNZdhFbTIzAE7I/T6vkCmU0dABSmGFovBgedptQNCj4RVQXZ
cnz9+n+XwNayCzTCtfV+dsoQpwIDAQABo4ICpjCCAqIwHQYDVR0OBBYEFGQNJ6x6
4w+e3/MQNUDbvJ57qR3xMB8GA1UdIwQYMBaAFLpfuFkb/AxFCk5E1vw+O8e+hlQW
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBNTIxMy81NTQzQkNDNDA1
RTUxMUVGQUI0NjFDMDlDNEY5QUUwMi91bC00V1J2OERFVUtUa1RXX0Q0N3g3NkdW
QlkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL3VsLTRXUnY4REVVS1RrVFdfRDQ3eDc2R1ZCWS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
QTUyMTMvNTU0M0JDQzQwNUU1MTFFRkFCNDYxQzA5QzRGOUFFMDIvRTMwRTRGRjYw
NUU1MTFFRjg2OEUwRjZEQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwMAYIKwYBBQUHAQcBAf8E
ITAfMAwEAgABMAYDBADKBlYwDwQCAAIwCQMHACABDfOOwDANBgkqhkiG9w0BAQsF
AAOCAQEAUWn+N1dswqBK4mhKMLod65V2yXLi2SGOBTHsZ2+qPtrJPhbM3bIdfar1
qMOZnvksJ2XroulvYUlELIzWP6fTXOt6+sTWW10Ja68b6g6S1Q3TfZCo8SIQdVUr
meQhB4C4sectBWtUuv+EqFKZ+LaG8V+aCzUYaOwYdpZd2Q/cEIpPOG74rNfNR2bF
9h04fV4Lmbavu9XOmn0xv5Jp8q5kNbZ6K+JF+Xfw2y1ofoSKYHmZ0s6jq7Rh8Xaz
hW4OFiblPfZkFji2Kud4lyNWVQ3S2+zZXZya8YCrUffJFUvJ6Tsblju2Gd1mMI1g
UYUs7bwMZvIEK6URMFVMqOdfuYYsXg==
-----END CERTIFICATE-----
Generated at Mon Jun 2 07:11:33 2025 by rpki-client