Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A911DD08/9A5FBB625B1911EFBED0C47AC4F9AE02/474934DE5B1A11EFBF0E1F7CC4F9AE02.roa
File:                     474934DE5B1A11EFBF0E1F7CC4F9AE02.roa (raw, json)
Hash identifier:          Po3+3jwZqbergErT/CE07CzYXSwWNnVs3V/GDhF2/Rc=
Subject key identifier:   6F:E6:B4:80:6B:94:C3:70:34:8D:E3:2B:65:01:CB:6E:D8:1C:90:26
Certificate issuer:       /CN=A911DD08/serialNumber=62AC1BB9580A7119819E7B6B6EB2C351534787FD
Certificate serial:       B8
Authority key identifier: 62:AC:1B:B9:58:0A:71:19:81:9E:7B:6B:6E:B2:C3:51:53:47:87:FD
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YqwbuVgKcRmBnntrbrLDUVNHh_0.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A911DD08/9A5FBB625B1911EFBED0C47AC4F9AE02/474934DE5B1A11EFBF0E1F7CC4F9AE02.roa
Signing time:             Fri 25 Jul 2025 06:44:21 +0000
ROA not before:           Fri 25 Jul 2025 06:44:21 +0000
ROA not after:            Wed 30 Sep 2026 00:00:00 +0000
asID:                     137547
IP address blocks:        150.242.216.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A911DD08/9A5FBB625B1911EFBED0C47AC4F9AE02/YqwbuVgKcRmBnntrbrLDUVNHh_0.crl
                          rsync://rpki.apnic.net/member_repository/A911DD08/9A5FBB625B1911EFBED0C47AC4F9AE02/YqwbuVgKcRmBnntrbrLDUVNHh_0.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YqwbuVgKcRmBnntrbrLDUVNHh_0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 14 Aug 2025 05:57:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 184 (0xb8)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A911DD08, serialNumber=62AC1BB9580A7119819E7B6B6EB2C351534787FD
        Validity
            Not Before: Jul 25 06:44:21 2025 GMT
            Not After : Sep 30 00:00:00 2026 GMT
        Subject: CN=688327c5-a3d8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:eb:95:1b:5a:23:43:0f:c1:87:62:7a:49:06:f7:
                    07:88:db:a8:42:88:ac:fd:bb:ef:17:06:ac:ce:a3:
                    bf:58:59:c3:3f:46:57:5b:32:5b:aa:f1:d5:b0:71:
                    ca:8e:9c:3a:0b:08:2c:65:19:ae:d6:73:f9:e2:5d:
                    0a:f8:f2:20:95:a6:3c:d1:cd:58:95:0c:c9:10:49:
                    c1:cb:1a:b3:fd:8a:34:b6:56:4a:c5:76:e8:ba:51:
                    f0:51:6c:80:77:10:33:3c:0b:5e:b6:8b:8f:3e:d6:
                    8c:12:0a:45:ba:a4:66:6a:c7:d4:6c:af:dd:0c:ad:
                    37:eb:23:d6:ff:eb:04:c4:4b:e7:27:d3:5e:01:b3:
                    47:c5:d7:99:f4:66:e4:03:cd:1a:9e:c3:e4:b0:3f:
                    32:9a:c3:d2:d1:8b:25:1d:5c:25:8f:e4:d2:9a:f5:
                    a6:4e:5b:6b:c0:74:46:c6:21:3b:88:07:92:ca:3e:
                    58:26:e4:67:e0:3e:70:7f:e3:15:65:bf:49:69:d9:
                    1b:c4:da:fc:05:14:a6:92:f2:eb:7e:9d:72:47:43:
                    1f:0f:c9:31:c4:f8:e6:fd:37:b1:de:13:68:ad:ab:
                    f4:a1:e7:8e:d9:49:b7:c0:88:53:7f:73:ef:fc:aa:
                    4c:55:8c:1f:e5:f9:8c:eb:5f:30:51:d3:47:88:65:
                    07:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6F:E6:B4:80:6B:94:C3:70:34:8D:E3:2B:65:01:CB:6E:D8:1C:90:26
            X509v3 Authority Key Identifier:
                keyid:62:AC:1B:B9:58:0A:71:19:81:9E:7B:6B:6E:B2:C3:51:53:47:87:FD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A911DD08/9A5FBB625B1911EFBED0C47AC4F9AE02/YqwbuVgKcRmBnntrbrLDUVNHh_0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YqwbuVgKcRmBnntrbrLDUVNHh_0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911DD08/9A5FBB625B1911EFBED0C47AC4F9AE02/474934DE5B1A11EFBF0E1F7CC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  150.242.216.0/23

    Signature Algorithm: sha256WithRSAEncryption
         81:8d:58:ca:84:25:60:02:98:b4:72:e0:9c:0c:48:f9:78:fb:
         90:e7:48:f7:1b:29:7a:61:15:b0:e7:a7:67:de:7f:b8:3c:86:
         2a:2d:ba:55:0f:63:2a:b2:98:1a:0c:a6:7d:30:47:b8:0c:d7:
         16:b0:3f:85:7a:a4:7d:06:29:58:b0:7c:a7:ad:0a:c2:e2:85:
         61:61:ef:f8:60:34:e2:4f:86:3f:0f:42:84:d4:60:a1:f1:fd:
         05:0e:1a:c8:e9:a1:03:84:6c:64:3c:76:2c:58:9f:d1:3a:d0:
         60:ca:2a:28:bd:40:5a:fc:fa:75:8b:e2:75:b3:1a:e2:0a:a2:
         69:2f:3a:34:34:dc:5a:f9:77:76:21:87:3b:a6:33:ea:65:9d:
         cf:92:47:a2:cb:fe:b7:ab:20:fa:ff:19:a3:e2:a1:97:ff:40:
         08:5a:13:da:42:29:a4:da:2c:24:a4:7c:9d:bc:38:a0:fb:ac:
         cc:cc:09:06:4e:db:d0:5c:93:7c:6a:66:0c:e3:61:d2:ca:d1:
         af:7c:d9:50:dc:ca:31:e4:c1:c9:75:c3:2a:a7:9e:8e:ad:64:
         78:65:5d:a6:e9:eb:34:99:aa:af:51:70:88:f5:5e:88:c0:72:
         87:1e:b7:97:e4:4f:2b:77:7e:b6:50:9b:f7:76:ea:b5:23:2b:
         9f:e7:b6:35
-----BEGIN CERTIFICATE-----
MIIFcTCCBFmgAwIBAgICALgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MUREMDgxMTAvBgNVBAUTKDYyQUMxQkI5NTgwQTcxMTk4MTlFN0I2QjZFQjJDMzUx
NTM0Nzg3RkQwHhcNMjUwNzI1MDY0NDIxWhcNMjYwOTMwMDAwMDAwWjAYMRYwFAYD
VQQDEw02ODgzMjdjNS1hM2Q4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA65UbWiNDD8GHYnpJBvcHiNuoQois/bvvFwaszqO/WFnDP0ZXWzJbqvHVsHHK
jpw6CwgsZRmu1nP54l0K+PIglaY80c1YlQzJEEnByxqz/Yo0tlZKxXboulHwUWyA
dxAzPAtetouPPtaMEgpFuqRmasfUbK/dDK036yPW/+sExEvnJ9NeAbNHxdeZ9Gbk
A80ansPksD8ymsPS0YslHVwlj+TSmvWmTltrwHRGxiE7iAeSyj5YJuRn4D5wf+MV
Zb9JadkbxNr8BRSmkvLrfp1yR0MfD8kxxPjm/Tex3hNorav0oeeO2Um3wIhTf3Pv
/KpMVYwf5fmM618wUdNHiGUHgQIDAQABo4IClTCCApEwHQYDVR0OBBYEFG/mtIBr
lMNwNI3jK2UBy27YHJAmMB8GA1UdIwQYMBaAFGKsG7lYCnEZgZ57a26yw1FTR4f9
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExREQwOC85QTVGQkI2MjVC
MTkxMUVGQkVEMEM0N0FDNEY5QUUwMi9ZcXdidVZnS2NSbUJubnRyYnJMRFVWTkho
XzAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL1lxd2J1VmdLY1JtQm5udHJickxEVVZOSGhfMC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
MUREMDgvOUE1RkJCNjI1QjE5MTFFRkJFRDBDNDdBQzRGOUFFMDIvNDc0OTM0REU1
QjFBMTFFRkJGMEUxRjdDQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E
EDAOMAwEAgABMAYDBAGW8tgwDQYJKoZIhvcNAQELBQADggEBAIGNWMqEJWACmLRy
4JwMSPl4+5DnSPcbKXphFbDnp2fef7g8hiotulUPYyqymBoMpn0wR7gM1xawP4V6
pH0GKViwfKetCsLihWFh7/hgNOJPhj8PQoTUYKHx/QUOGsjpoQOEbGQ8dixYn9E6
0GDKKii9QFr8+nWL4nWzGuIKomkvOjQ03Fr5d3YhhzumM+plnc+SR6LL/rerIPr/
GaPioZf/QAhaE9pCKaTaLCSkfJ28OKD7rMzMCQZO29Bck3xqZgzjYdLK0a982VDc
yjHkwcl1wyqnno6tZHhlXabp6zSZqq9RcIj1XojAcocet5fkTyt3frZQm/d26rUj
K5/ntjU=
-----END CERTIFICATE-----
Generated at Mon Aug 11 04:42:29 2025 by rpki-client