Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9115F15/FFED27943A9311EBABDE232FC4F9AE02/574E0B4810E111F09B0FF441C4F9AE02.roa
File:                     574E0B4810E111F09B0FF441C4F9AE02.roa (raw, json)
Hash identifier:          R7FrPdkL1ySrHNC5nrqzQKSqKbGci3RcVPsSdrI/vVo=
Subject key identifier:   20:E8:E4:E9:4F:39:34:EF:09:38:24:13:9A:E7:F2:7D:60:79:5D:32
Certificate issuer:       /CN=A9115F15/serialNumber=AB535E132884BCA345F7AF6913AB0A397765E7A9
Certificate serial:       0719
Authority key identifier: AB:53:5E:13:28:84:BC:A3:45:F7:AF:69:13:AB:0A:39:77:65:E7:A9
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/q1NeEyiEvKNF969pE6sKOXdl56k.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9115F15/FFED27943A9311EBABDE232FC4F9AE02/574E0B4810E111F09B0FF441C4F9AE02.roa
Signing time:             Thu 03 Apr 2025 23:15:28 +0000
ROA not before:           Thu 03 Apr 2025 23:15:28 +0000
ROA not after:            Tue 31 Mar 2026 00:00:00 +0000
asID:                     396982
IP address blocks:        202.87.132.0/24 maxlen: 24
                          2404:2200:11::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9115F15/FFED27943A9311EBABDE232FC4F9AE02/q1NeEyiEvKNF969pE6sKOXdl56k.crl
                          rsync://rpki.apnic.net/member_repository/A9115F15/FFED27943A9311EBABDE232FC4F9AE02/q1NeEyiEvKNF969pE6sKOXdl56k.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/q1NeEyiEvKNF969pE6sKOXdl56k.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 01 May 2025 21:43:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1817 (0x719)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9115F15, serialNumber=AB535E132884BCA345F7AF6913AB0A397765E7A9
        Validity
            Not Before: Apr  3 23:15:28 2025 GMT
            Not After : Mar 31 00:00:00 2026 GMT
        Subject: CN=67ef168f-8171
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:85:72:44:ce:db:6c:fa:10:e0:92:5a:3f:c9:
                    1e:51:fa:86:4d:26:35:82:9e:89:2d:7b:a3:06:df:
                    42:28:43:ba:8d:cf:84:81:fc:a0:54:eb:8f:bd:d5:
                    f9:14:b9:35:82:8c:34:3b:2e:2a:66:b7:6b:ef:57:
                    00:a1:a3:47:a0:bf:ec:94:c5:63:a7:66:f0:31:5a:
                    24:d0:fd:eb:18:75:50:01:82:f8:5e:bb:6a:0e:31:
                    48:4f:fd:a6:f3:3d:2f:05:cd:06:e2:04:c7:80:e1:
                    ac:c6:58:8d:6d:b3:34:f0:6f:de:58:49:63:7e:0a:
                    6f:ca:4a:62:22:30:b5:01:f5:c6:05:d8:9e:3f:36:
                    6a:8e:15:f3:d2:b7:f0:85:b7:06:3a:6c:36:cf:f4:
                    9b:e8:e8:20:d2:17:1c:4c:c2:2c:52:02:ab:4f:13:
                    b7:14:5c:dc:6f:02:2f:84:4c:c4:34:d3:29:28:09:
                    a0:16:b5:2b:79:6b:72:09:00:ab:f0:30:81:24:21:
                    af:5a:a4:f2:87:5c:34:d7:b8:a4:42:ef:03:68:b7:
                    e9:5e:e2:ae:05:c9:87:62:0a:fa:71:94:1d:05:88:
                    dc:9d:81:ac:4d:d0:b9:3b:80:95:17:a5:84:16:a5:
                    a3:b5:e8:00:26:43:d7:4c:5f:06:20:02:78:97:2c:
                    08:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                20:E8:E4:E9:4F:39:34:EF:09:38:24:13:9A:E7:F2:7D:60:79:5D:32
            X509v3 Authority Key Identifier:
                keyid:AB:53:5E:13:28:84:BC:A3:45:F7:AF:69:13:AB:0A:39:77:65:E7:A9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9115F15/FFED27943A9311EBABDE232FC4F9AE02/q1NeEyiEvKNF969pE6sKOXdl56k.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/q1NeEyiEvKNF969pE6sKOXdl56k.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9115F15/FFED27943A9311EBABDE232FC4F9AE02/574E0B4810E111F09B0FF441C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  202.87.132.0/24
                IPv6:
                  2404:2200:11::/48

    Signature Algorithm: sha256WithRSAEncryption
         63:53:b3:82:fd:44:51:6a:24:46:4a:97:bf:65:e0:05:67:6d:
         f1:d6:fc:aa:bc:d7:b0:57:d9:b1:92:2d:64:75:f2:54:16:6a:
         c6:11:8b:d7:65:30:c2:e2:18:4d:1a:25:0d:6f:fe:fb:2f:cd:
         25:e6:60:32:e5:ed:d0:56:aa:bd:fd:46:64:a3:e6:91:ef:bb:
         f2:a8:2a:ca:b3:88:af:20:ea:4c:a0:57:2a:38:87:61:4d:63:
         9b:18:65:91:61:da:30:22:b5:91:21:da:d1:55:3b:19:86:e4:
         94:db:ad:20:7e:fb:10:85:df:1d:66:dc:ea:fe:16:a5:0c:bf:
         37:b8:9e:11:ab:f4:61:1e:60:ad:14:c1:28:ab:f5:7c:d3:58:
         49:a3:44:78:6b:b5:c4:c5:48:5d:f7:6b:b3:ba:b7:59:51:ae:
         d0:57:91:45:aa:86:2c:18:69:d8:66:08:6a:28:d7:fe:3f:6b:
         c0:de:ed:62:1b:5c:0e:0b:28:db:2e:57:4e:c6:b6:48:2f:a2:
         78:6a:2d:3a:4f:7d:c8:ae:fe:62:15:0b:57:5a:82:51:cd:70:
         4c:ab:48:7e:b8:55:06:75:ef:dd:58:b6:42:c8:c8:a7:da:02:
         ae:9d:3c:da:65:47:12:ea:2b:ec:dd:94:21:46:7f:9f:86:7a:
         3c:4b:21:2a
-----BEGIN CERTIFICATE-----
MIIFgjCCBGqgAwIBAgICBxkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MTVGMTUxMTAvBgNVBAUTKEFCNTM1RTEzMjg4NEJDQTM0NUY3QUY2OTEzQUIwQTM5
Nzc2NUU3QTkwHhcNMjUwNDAzMjMxNTI4WhcNMjYwMzMxMDAwMDAwWjAYMRYwFAYD
VQQDEw02N2VmMTY4Zi04MTcxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA0YVyRM7bbPoQ4JJaP8keUfqGTSY1gp6JLXujBt9CKEO6jc+EgfygVOuPvdX5
FLk1gow0Oy4qZrdr71cAoaNHoL/slMVjp2bwMVok0P3rGHVQAYL4XrtqDjFIT/2m
8z0vBc0G4gTHgOGsxliNbbM08G/eWEljfgpvykpiIjC1AfXGBdiePzZqjhXz0rfw
hbcGOmw2z/Sb6Ogg0hccTMIsUgKrTxO3FFzcbwIvhEzENNMpKAmgFrUreWtyCQCr
8DCBJCGvWqTyh1w017ikQu8DaLfpXuKuBcmHYgr6cZQdBYjcnYGsTdC5O4CVF6WE
FqWjtegAJkPXTF8GIAJ4lywIOwIDAQABo4ICpjCCAqIwHQYDVR0OBBYEFCDo5OlP
OTTvCTgkE5rn8n1geV0yMB8GA1UdIwQYMBaAFKtTXhMohLyjRfevaROrCjl3Zeep
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExNUYxNS9GRkVEMjc5NDNB
OTMxMUVCQUJERTIzMkZDNEY5QUUwMi9xMU5lRXlpRXZLTkY5NjlwRTZzS09YZGw1
NmsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL3ExTmVFeWlFdktORjk2OXBFNnNLT1hkbDU2ay5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
MTVGMTUvRkZFRDI3OTQzQTkzMTFFQkFCREUyMzJGQzRGOUFFMDIvNTc0RTBCNDgx
MEUxMTFGMDlCMEZGNDQxQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwMAYIKwYBBQUHAQcBAf8E
ITAfMAwEAgABMAYDBADKV4QwDwQCAAIwCQMHACQEIgAAETANBgkqhkiG9w0BAQsF
AAOCAQEAY1Ozgv1EUWokRkqXv2XgBWdt8db8qrzXsFfZsZItZHXyVBZqxhGL12Uw
wuIYTRolDW/++y/NJeZgMuXt0Faqvf1GZKPmke+78qgqyrOIryDqTKBXKjiHYU1j
mxhlkWHaMCK1kSHa0VU7GYbklNutIH77EIXfHWbc6v4WpQy/N7ieEav0YR5grRTB
KKv1fNNYSaNEeGu1xMVIXfdrs7q3WVGu0FeRRaqGLBhp2GYIaijX/j9rwN7tYhtc
Dgso2y5XTsa2SC+ieGotOk99yK7+YhULV1qCUc1wTKtIfrhVBnXv3Vi2QsjIp9oC
rp082mVHEuor7N2UIUZ/n4Z6PEshKg==
-----END CERTIFICATE-----
Generated at Sat Apr 26 17:03:03 2025 by rpki-client