Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91EF175/0460AA18FBFB11EEA1EEAF1FC4F9AE02/2636C6C6FBFC11EE85221046C4F9AE02.roa
File:                     2636C6C6FBFC11EE85221046C4F9AE02.roa (raw, json)
Hash identifier:          NQkxPngv0JrH8cspg2pDqvSp/RuMqfTf6Ox9XHDfB5k=
Subject key identifier:   87:C4:00:D5:87:8A:BE:6A:00:23:16:FC:2E:AE:7B:D7:08:FE:6A:7C
Certificate issuer:       /CN=A91EF175/serialNumber=EC5EF3354E4CD534AB8625B99B7312D6F4E48B15
Certificate serial:       D8
Authority key identifier: EC:5E:F3:35:4E:4C:D5:34:AB:86:25:B9:9B:73:12:D6:F4:E4:8B:15
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7F7zNU5M1TSrhiW5m3MS1vTkixU.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91EF175/0460AA18FBFB11EEA1EEAF1FC4F9AE02/2636C6C6FBFC11EE85221046C4F9AE02.roa
Signing time:             Tue 03 Jun 2025 05:25:38 +0000
ROA not before:           Tue 03 Jun 2025 05:25:38 +0000
ROA not after:            Wed 01 Oct 2025 00:00:00 +0000
asID:                     58655
IP address blocks:        203.26.241.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91EF175/0460AA18FBFB11EEA1EEAF1FC4F9AE02/7F7zNU5M1TSrhiW5m3MS1vTkixU.crl
                          rsync://rpki.apnic.net/member_repository/A91EF175/0460AA18FBFB11EEA1EEAF1FC4F9AE02/7F7zNU5M1TSrhiW5m3MS1vTkixU.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7F7zNU5M1TSrhiW5m3MS1vTkixU.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 10 Jun 2025 05:25:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 216 (0xd8)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91EF175, serialNumber=EC5EF3354E4CD534AB8625B99B7312D6F4E48B15
        Validity
            Not Before: Jun  3 05:25:38 2025 GMT
            Not After : Oct  1 00:00:00 2025 GMT
        Subject: CN=683e8752-e8f5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:46:7d:3c:81:e2:88:24:f2:26:7e:48:08:5a:
                    95:1d:93:00:0b:48:2f:cb:e8:ad:5d:c0:3f:9e:f3:
                    48:e3:e8:33:12:85:8c:a5:c6:52:a5:42:22:0b:31:
                    dd:76:ac:0e:31:55:34:fe:4b:fa:ff:5d:50:b5:a6:
                    42:eb:63:2f:85:53:3d:e0:49:9b:c7:62:8f:2d:c1:
                    87:60:79:a6:70:6c:d1:1b:31:d0:f7:1c:03:1b:79:
                    ed:e1:db:72:b6:43:94:14:5a:6a:1c:27:a0:9d:72:
                    fd:1b:98:8e:a8:23:d8:9e:1b:7d:86:72:30:1f:5c:
                    dc:7c:4e:d6:1b:4f:04:e1:d3:54:16:74:9e:fd:d4:
                    0a:0f:42:20:e3:74:9c:89:cf:97:29:f3:08:29:c5:
                    69:42:70:04:1d:ce:83:74:c2:b5:99:02:c1:56:56:
                    f7:19:72:5f:a9:87:af:c0:2f:60:13:ed:fb:25:44:
                    91:19:88:8f:6d:ed:9b:46:69:58:29:8c:67:c2:ea:
                    aa:3e:ce:24:d1:a5:4b:1b:f5:d1:ed:35:2d:c3:ce:
                    42:e7:42:98:92:1b:e4:7f:8e:ab:d1:4c:16:98:3b:
                    2c:0a:1a:67:fa:3f:0b:31:2e:dc:5d:54:10:ea:bd:
                    8a:6f:c4:bb:fe:ec:0e:1e:43:71:76:d2:6f:a2:1e:
                    68:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                87:C4:00:D5:87:8A:BE:6A:00:23:16:FC:2E:AE:7B:D7:08:FE:6A:7C
            X509v3 Authority Key Identifier:
                keyid:EC:5E:F3:35:4E:4C:D5:34:AB:86:25:B9:9B:73:12:D6:F4:E4:8B:15

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91EF175/0460AA18FBFB11EEA1EEAF1FC4F9AE02/7F7zNU5M1TSrhiW5m3MS1vTkixU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7F7zNU5M1TSrhiW5m3MS1vTkixU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EF175/0460AA18FBFB11EEA1EEAF1FC4F9AE02/2636C6C6FBFC11EE85221046C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  203.26.241.0/24

    Signature Algorithm: sha256WithRSAEncryption
         11:cc:74:28:75:98:f8:99:d8:ee:b0:3b:d3:2e:1e:d8:01:01:
         ef:fa:68:4b:0f:6d:d1:83:ef:e5:70:a0:43:bd:15:be:b4:8e:
         27:e5:e8:e4:8b:04:07:c3:5c:89:ad:f5:7d:ef:b5:73:e4:a9:
         6f:68:ea:97:15:55:eb:40:55:d8:c6:5c:04:3c:ba:a5:12:d2:
         29:6d:10:f2:1f:26:d7:1d:2a:85:87:cf:22:0a:b9:a5:ec:1a:
         32:1b:e7:37:df:c7:66:e7:5d:b7:0b:91:65:07:bc:ff:40:2b:
         48:c0:f1:03:54:bc:35:54:10:a6:fd:69:0f:86:65:b4:b5:c8:
         57:88:86:c9:90:10:4e:c8:0e:91:6c:61:8a:71:b6:9b:c5:24:
         22:8a:b1:80:77:0f:d4:6c:6d:c4:00:31:3d:d2:f1:b7:67:8a:
         64:93:96:b0:aa:08:48:8b:31:f2:05:bf:4a:59:3d:3f:c7:03:
         d9:fd:8d:55:49:8a:60:04:e8:d1:10:fb:6c:df:1e:24:c6:99:
         c8:e4:49:8c:e6:e5:66:bb:d7:b9:bd:fa:6a:17:24:32:24:14:
         18:8b:6b:dd:94:64:ad:e8:f1:db:13:cc:f1:d4:34:57:58:e5:
         fa:9b:8f:7e:e5:e3:f8:f6:b5:68:4c:d9:54:5f:04:4a:b5:36:
         83:02:bf:27
-----BEGIN CERTIFICATE-----
MIIFcTCCBFmgAwIBAgICANgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RUYxNzUxMTAvBgNVBAUTKEVDNUVGMzM1NEU0Q0Q1MzRBQjg2MjVCOTlCNzMxMkQ2
RjRFNDhCMTUwHhcNMjUwNjAzMDUyNTM4WhcNMjUxMDAxMDAwMDAwWjAYMRYwFAYD
VQQDEw02ODNlODc1Mi1lOGY1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAwEZ9PIHiiCTyJn5ICFqVHZMAC0gvy+itXcA/nvNI4+gzEoWMpcZSpUIiCzHd
dqwOMVU0/kv6/11QtaZC62MvhVM94Embx2KPLcGHYHmmcGzRGzHQ9xwDG3nt4dty
tkOUFFpqHCegnXL9G5iOqCPYnht9hnIwH1zcfE7WG08E4dNUFnSe/dQKD0Ig43Sc
ic+XKfMIKcVpQnAEHc6DdMK1mQLBVlb3GXJfqYevwC9gE+37JUSRGYiPbe2bRmlY
KYxnwuqqPs4k0aVLG/XR7TUtw85C50KYkhvkf46r0UwWmDssChpn+j8LMS7cXVQQ
6r2Kb8S7/uwOHkNxdtJvoh5oiwIDAQABo4IClTCCApEwHQYDVR0OBBYEFIfEANWH
ir5qACMW/C6ue9cI/mp8MB8GA1UdIwQYMBaAFOxe8zVOTNU0q4YluZtzEtb05IsV
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFRjE3NS8wNDYwQUExOEZC
RkIxMUVFQTFFRUFGMUZDNEY5QUUwMi83Rjd6TlU1TTFUU3JoaVc1bTNNUzF2VGtp
eFUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyLzdGN3pOVTVNMVRTcmhpVzVtM01TMXZUa2l4VS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
RUYxNzUvMDQ2MEFBMThGQkZCMTFFRUExRUVBRjFGQzRGOUFFMDIvMjYzNkM2QzZG
QkZDMTFFRTg1MjIxMDQ2QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E
EDAOMAwEAgABMAYDBADLGvEwDQYJKoZIhvcNAQELBQADggEBABHMdCh1mPiZ2O6w
O9MuHtgBAe/6aEsPbdGD7+VwoEO9Fb60jifl6OSLBAfDXImt9X3vtXPkqW9o6pcV
VetAVdjGXAQ8uqUS0iltEPIfJtcdKoWHzyIKuaXsGjIb5zffx2bnXbcLkWUHvP9A
K0jA8QNUvDVUEKb9aQ+GZbS1yFeIhsmQEE7IDpFsYYpxtpvFJCKKsYB3D9RsbcQA
MT3S8bdnimSTlrCqCEiLMfIFv0pZPT/HA9n9jVVJimAE6NEQ+2zfHiTGmcjkSYzm
5Wa717m9+moXJDIkFBiLa92UZK3o8dsTzPHUNFdY5fqbj37l4/j2tWhM2VRfBEq1
NoMCvyc=
-----END CERTIFICATE-----
Generated at Wed Jun 4 00:13:20 2025 by rpki-client