Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91C6550/8400954ACEC411ED8A83FB11C4F9AE02/2562774A3A1211F08110E80BC4F9AE02.roa
File:                     2562774A3A1211F08110E80BC4F9AE02.roa (raw, json)
Hash identifier:          cGKm7AkhC0ch00z5nQoWbM13EYJlHiAu87nho38uxkk=
Subject key identifier:   CE:4E:1C:69:1B:79:35:8E:46:84:AE:A2:DE:49:87:3F:D5:81:03:E7
Certificate issuer:       /CN=A91C6550/serialNumber=456EEA0692C6A4F26F53D2D237D1CB4DCD783305
Certificate serial:       0224
Authority key identifier: 45:6E:EA:06:92:C6:A4:F2:6F:53:D2:D2:37:D1:CB:4D:CD:78:33:05
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RW7qBpLGpPJvU9LSN9HLTc14MwU.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91C6550/8400954ACEC411ED8A83FB11C4F9AE02/2562774A3A1211F08110E80BC4F9AE02.roa
Signing time:             Mon 26 May 2025 09:16:46 +0000
ROA not before:           Mon 26 May 2025 09:16:46 +0000
ROA not after:            Wed 30 Jul 2025 00:00:00 +0000
asID:                     208063
IP address blocks:        202.134.249.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91C6550/8400954ACEC411ED8A83FB11C4F9AE02/RW7qBpLGpPJvU9LSN9HLTc14MwU.crl
                          rsync://rpki.apnic.net/member_repository/A91C6550/8400954ACEC411ED8A83FB11C4F9AE02/RW7qBpLGpPJvU9LSN9HLTc14MwU.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RW7qBpLGpPJvU9LSN9HLTc14MwU.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 08 Jun 2025 03:10:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 548 (0x224)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91C6550, serialNumber=456EEA0692C6A4F26F53D2D237D1CB4DCD783305
        Validity
            Not Before: May 26 09:16:46 2025 GMT
            Not After : Jul 30 00:00:00 2025 GMT
        Subject: CN=6834317e-ae1b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:ca:3b:7d:cd:22:2f:83:03:b7:a2:c3:7e:41:
                    f6:46:02:c7:c1:91:77:f5:e4:6e:a1:25:df:07:63:
                    5b:cf:ba:ca:8a:dc:5d:b4:61:a1:91:6a:07:d5:a3:
                    3b:02:f7:39:42:e3:a6:31:84:a9:ec:3f:d6:cf:97:
                    6e:f7:8f:2f:1e:9d:2f:39:b9:ab:c4:21:c7:d4:93:
                    cc:a4:22:7d:b5:c1:96:83:15:55:47:13:3e:90:b6:
                    9f:91:28:46:54:92:13:f6:7f:53:95:b6:f4:59:49:
                    aa:0a:70:df:ce:a6:ed:54:7c:d9:65:a1:28:30:fd:
                    08:cd:b7:37:db:dc:7c:a5:79:41:cb:49:fd:d6:51:
                    65:8e:93:f8:fd:a9:f8:6d:7d:77:83:64:c7:d4:0f:
                    dd:1a:f2:a6:22:66:5f:64:a7:8b:c4:b1:15:1f:14:
                    82:e3:db:b1:6b:8b:45:31:ce:01:ca:0e:b1:af:26:
                    35:d4:78:3f:13:b1:b3:17:9e:22:e3:fa:61:a1:a6:
                    6a:46:c2:49:45:14:69:14:35:d3:40:10:c3:23:71:
                    f3:07:b1:fc:95:3e:2c:74:46:37:2f:32:96:89:66:
                    17:47:bb:9d:6d:59:6b:04:e7:84:a2:95:19:11:b0:
                    be:f5:92:88:67:25:f0:90:72:06:c2:06:dd:2a:0a:
                    5b:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CE:4E:1C:69:1B:79:35:8E:46:84:AE:A2:DE:49:87:3F:D5:81:03:E7
            X509v3 Authority Key Identifier:
                keyid:45:6E:EA:06:92:C6:A4:F2:6F:53:D2:D2:37:D1:CB:4D:CD:78:33:05

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91C6550/8400954ACEC411ED8A83FB11C4F9AE02/RW7qBpLGpPJvU9LSN9HLTc14MwU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RW7qBpLGpPJvU9LSN9HLTc14MwU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C6550/8400954ACEC411ED8A83FB11C4F9AE02/2562774A3A1211F08110E80BC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  202.134.249.0/24

    Signature Algorithm: sha256WithRSAEncryption
         08:f3:ae:6b:0e:ed:9c:da:3d:8b:fa:2d:4d:b5:99:32:17:d9:
         d4:fa:ce:fc:12:ce:07:67:74:cd:1e:af:af:1c:71:9e:52:30:
         7d:5c:a0:91:25:34:e8:2c:c3:57:d0:ae:90:dd:0a:87:60:1e:
         1b:90:1f:60:53:61:88:d4:dd:60:47:6c:e7:9a:75:68:09:09:
         87:fe:4d:5b:9a:1b:a0:06:6f:ce:99:d3:86:66:b3:c3:38:4d:
         1a:78:a7:36:ac:e5:11:24:7a:4b:91:e6:bc:15:7b:0a:16:3f:
         82:28:16:60:bc:0b:a8:1d:6c:bd:38:0d:1c:e4:e8:d3:42:fd:
         cc:e7:29:f6:21:50:a0:dd:a7:45:d4:b1:e4:30:d9:4f:5b:b3:
         79:49:55:2d:ee:86:47:5a:76:59:cc:4d:2c:fd:78:6c:0c:14:
         31:c0:6f:ee:bf:6b:ff:a9:6b:ba:f2:12:c2:7e:e7:45:dd:2e:
         64:18:15:d7:3e:ce:ca:95:a5:ae:8f:5e:42:54:5a:da:62:39:
         9a:d3:11:63:2a:cf:f8:8f:5e:5b:f0:24:e4:21:07:72:dc:77:
         10:75:81:d9:0d:00:eb:56:98:02:3d:b2:b3:b2:b7:85:1c:8d:
         23:0a:ea:15:b6:ad:82:c5:43:9b:ac:57:10:4f:e8:73:be:f3:
         79:04:9d:b9
-----BEGIN CERTIFICATE-----
MIIFcTCCBFmgAwIBAgICAiQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QzY1NTAxMTAvBgNVBAUTKDQ1NkVFQTA2OTJDNkE0RjI2RjUzRDJEMjM3RDFDQjRE
Q0Q3ODMzMDUwHhcNMjUwNTI2MDkxNjQ2WhcNMjUwNzMwMDAwMDAwWjAYMRYwFAYD
VQQDEw02ODM0MzE3ZS1hZTFiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA1Mo7fc0iL4MDt6LDfkH2RgLHwZF39eRuoSXfB2Nbz7rKitxdtGGhkWoH1aM7
Avc5QuOmMYSp7D/Wz5du948vHp0vObmrxCHH1JPMpCJ9tcGWgxVVRxM+kLafkShG
VJIT9n9Tlbb0WUmqCnDfzqbtVHzZZaEoMP0Izbc329x8pXlBy0n91lFljpP4/an4
bX13g2TH1A/dGvKmImZfZKeLxLEVHxSC49uxa4tFMc4Byg6xryY11Hg/E7GzF54i
4/phoaZqRsJJRRRpFDXTQBDDI3HzB7H8lT4sdEY3LzKWiWYXR7udbVlrBOeEopUZ
EbC+9ZKIZyXwkHIGwgbdKgpb7QIDAQABo4IClTCCApEwHQYDVR0OBBYEFM5OHGkb
eTWORoSuot5Jhz/VgQPnMB8GA1UdIwQYMBaAFEVu6gaSxqTyb1PS0jfRy03NeDMF
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDNjU1MC84NDAwOTU0QUNF
QzQxMUVEOEE4M0ZCMTFDNEY5QUUwMi9SVzdxQnBMR3BQSnZVOUxTTjlITFRjMTRN
d1UuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL1JXN3FCcExHcFBKdlU5TFNOOUhMVGMxNE13VS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
QzY1NTAvODQwMDk1NEFDRUM0MTFFRDhBODNGQjExQzRGOUFFMDIvMjU2Mjc3NEEz
QTEyMTFGMDgxMTBFODBCQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E
EDAOMAwEAgABMAYDBADKhvkwDQYJKoZIhvcNAQELBQADggEBAAjzrmsO7ZzaPYv6
LU21mTIX2dT6zvwSzgdndM0er68ccZ5SMH1coJElNOgsw1fQrpDdCodgHhuQH2BT
YYjU3WBHbOeadWgJCYf+TVuaG6AGb86Z04Zms8M4TRp4pzas5REkekuR5rwVewoW
P4IoFmC8C6gdbL04DRzk6NNC/cznKfYhUKDdp0XUseQw2U9bs3lJVS3uhkdadlnM
TSz9eGwMFDHAb+6/a/+pa7ryEsJ+50XdLmQYFdc+zsqVpa6PXkJUWtpiOZrTEWMq
z/iPXlvwJOQhB3LcdxB1gdkNAOtWmAI9srOyt4UcjSMK6hW2rYLFQ5usVxBP6HO+
83kEnbk=
-----END CERTIFICATE-----
Generated at Mon Jun 2 07:11:34 2025 by rpki-client