Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A911F2DF/00501FD223AE11EF9493F45CC4F9AE02/92E390AC958E11EF87A4040BC4F9AE02.roa
File:                     92E390AC958E11EF87A4040BC4F9AE02.roa (raw, json)
Hash identifier:          ziX6uRrjdN8XtvPVmk67ZGOFErPjsTpewvnUOr01Tm8=
Subject key identifier:   B4:A2:82:2F:76:81:73:53:3A:4C:62:33:F9:98:0F:8B:4E:8B:28:38
Certificate issuer:       /CN=A911F2DF/serialNumber=B84C23969ED79C0E31C13C1450012E2246D3F94D
Certificate serial:       C5
Authority key identifier: B8:4C:23:96:9E:D7:9C:0E:31:C1:3C:14:50:01:2E:22:46:D3:F9:4D
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/uEwjlp7XnA4xwTwUUAEuIkbT-U0.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A911F2DF/00501FD223AE11EF9493F45CC4F9AE02/92E390AC958E11EF87A4040BC4F9AE02.roa
Signing time:             Tue 03 Jun 2025 06:05:49 +0000
ROA not before:           Tue 03 Jun 2025 06:05:49 +0000
ROA not after:            Mon 31 Aug 2026 00:00:00 +0000
asID:                     8075
IP address blocks:        160.187.9.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A911F2DF/00501FD223AE11EF9493F45CC4F9AE02/uEwjlp7XnA4xwTwUUAEuIkbT-U0.crl
                          rsync://rpki.apnic.net/member_repository/A911F2DF/00501FD223AE11EF9493F45CC4F9AE02/uEwjlp7XnA4xwTwUUAEuIkbT-U0.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/uEwjlp7XnA4xwTwUUAEuIkbT-U0.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 26 Jun 2025 05:09:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 197 (0xc5)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A911F2DF, serialNumber=B84C23969ED79C0E31C13C1450012E2246D3F94D
        Validity
            Not Before: Jun  3 06:05:49 2025 GMT
            Not After : Aug 31 00:00:00 2026 GMT
        Subject: CN=683e90bd-b52f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e8:33:19:1d:d2:e6:9a:23:d7:40:c3:20:fa:32:
                    04:26:55:80:22:ea:14:54:b4:b2:d5:07:52:1f:99:
                    c9:83:c7:a8:8b:94:2c:53:61:02:50:9e:b3:fc:1b:
                    ba:38:c5:c2:da:90:a1:a9:c1:63:11:8e:e7:32:49:
                    cf:88:6d:ae:e5:0c:db:21:8e:f3:9b:22:ab:11:d0:
                    f5:79:96:19:ac:63:a5:ba:cf:1a:61:25:20:a7:62:
                    06:c9:75:ae:b2:1c:4b:fd:3e:ea:f2:2f:c3:2a:14:
                    23:d4:fe:5e:9d:d1:4c:1a:8b:44:a1:0f:30:4a:74:
                    8c:b2:a0:ef:6c:d5:bf:78:33:55:c3:bb:9a:9f:49:
                    d1:c7:6c:88:85:a0:28:d9:d9:c4:7d:b2:7a:17:27:
                    45:7e:58:a2:b8:fe:bc:b3:e5:29:f2:59:b2:cb:29:
                    b4:b6:17:b9:d1:8f:78:7e:1e:7c:19:c0:fc:4a:24:
                    e3:a0:cc:06:5d:40:61:4a:86:b0:d8:a5:aa:bd:82:
                    04:a7:34:1b:47:e1:cb:93:9e:c8:41:b8:ad:22:df:
                    90:6d:d2:d8:ff:b7:33:6a:40:dc:7e:18:e6:d2:8b:
                    65:fc:a9:fa:ec:13:5a:28:86:2e:7c:8c:c3:b7:85:
                    2d:f7:03:a4:36:a2:56:02:51:2e:07:3a:6a:b9:52:
                    b9:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B4:A2:82:2F:76:81:73:53:3A:4C:62:33:F9:98:0F:8B:4E:8B:28:38
            X509v3 Authority Key Identifier:
                keyid:B8:4C:23:96:9E:D7:9C:0E:31:C1:3C:14:50:01:2E:22:46:D3:F9:4D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A911F2DF/00501FD223AE11EF9493F45CC4F9AE02/uEwjlp7XnA4xwTwUUAEuIkbT-U0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/uEwjlp7XnA4xwTwUUAEuIkbT-U0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911F2DF/00501FD223AE11EF9493F45CC4F9AE02/92E390AC958E11EF87A4040BC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  160.187.9.0/24

    Signature Algorithm: sha256WithRSAEncryption
         5c:32:48:0c:63:3e:4d:e5:63:57:5f:c8:d7:0b:ad:3a:37:64:
         fb:0a:45:7b:0f:fa:47:fe:1c:e3:d5:8d:e3:dd:c3:54:ae:30:
         8d:b6:ec:e8:c1:02:89:36:c9:bf:a5:40:f4:4f:6a:33:bc:9f:
         69:d3:a2:fb:74:30:df:e1:66:ff:22:36:14:5d:79:d2:53:af:
         54:46:d4:9f:b3:61:6b:ff:4f:93:c6:c8:c4:a0:76:21:88:bd:
         38:d4:96:45:68:97:0f:da:7d:5c:b6:db:1d:bf:0b:1c:81:5a:
         db:94:8e:68:cb:98:2c:70:7e:db:00:03:21:b8:f4:13:d2:17:
         5f:a5:46:37:6f:94:18:fb:f4:d5:ae:15:5f:cb:aa:40:9d:3a:
         48:3f:67:c9:db:ae:fe:81:ed:8c:ac:c1:19:ab:01:2f:dc:ee:
         b3:be:ca:b9:aa:71:a6:34:2c:60:6b:9d:68:e6:d6:e1:3b:27:
         da:d9:3e:17:88:bb:64:2d:30:ec:86:a5:07:72:9b:b6:86:39:
         3a:28:fb:05:ce:1b:2f:f6:68:17:51:53:39:6b:59:ad:c6:cc:
         65:d2:7a:0e:f7:63:aa:db:75:cc:6a:21:ae:29:a5:f6:56:76:
         bc:84:89:0b:5a:fc:b3:8d:0d:01:4b:c7:ac:f8:2a:80:86:21:
         af:7b:16:00
-----BEGIN CERTIFICATE-----
MIIFcTCCBFmgAwIBAgICAMUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MUYyREYxMTAvBgNVBAUTKEI4NEMyMzk2OUVENzlDMEUzMUMxM0MxNDUwMDEyRTIy
NDZEM0Y5NEQwHhcNMjUwNjAzMDYwNTQ5WhcNMjYwODMxMDAwMDAwWjAYMRYwFAYD
VQQDEw02ODNlOTBiZC1iNTJmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA6DMZHdLmmiPXQMMg+jIEJlWAIuoUVLSy1QdSH5nJg8eoi5QsU2ECUJ6z/Bu6
OMXC2pChqcFjEY7nMknPiG2u5QzbIY7zmyKrEdD1eZYZrGOlus8aYSUgp2IGyXWu
shxL/T7q8i/DKhQj1P5endFMGotEoQ8wSnSMsqDvbNW/eDNVw7uan0nRx2yIhaAo
2dnEfbJ6FydFfliiuP68s+Up8lmyyym0the50Y94fh58GcD8SiTjoMwGXUBhSoaw
2KWqvYIEpzQbR+HLk57IQbitIt+QbdLY/7czakDcfhjm0otl/Kn67BNaKIYufIzD
t4Ut9wOkNqJWAlEuBzpquVK5nQIDAQABo4IClTCCApEwHQYDVR0OBBYEFLSigi92
gXNTOkxiM/mYD4tOiyg4MB8GA1UdIwQYMBaAFLhMI5ae15wOMcE8FFABLiJG0/lN
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExRjJERi8wMDUwMUZEMjIz
QUUxMUVGOTQ5M0Y0NUNDNEY5QUUwMi91RXdqbHA3WG5BNHh3VHdVVUFFdUlrYlQt
VTAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy
RkQxRkYyL3VFd2pscDdYbkE0eHdUd1VVQUV1SWtiVC1VMC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
MUYyREYvMDA1MDFGRDIyM0FFMTFFRjk0OTNGNDVDQzRGOUFFMDIvOTJFMzkwQUM5
NThFMTFFRjg3QTQwNDBCQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E
EDAOMAwEAgABMAYDBACguwkwDQYJKoZIhvcNAQELBQADggEBAFwySAxjPk3lY1df
yNcLrTo3ZPsKRXsP+kf+HOPVjePdw1SuMI227OjBAok2yb+lQPRPajO8n2nTovt0
MN/hZv8iNhRdedJTr1RG1J+zYWv/T5PGyMSgdiGIvTjUlkVolw/afVy22x2/CxyB
WtuUjmjLmCxwftsAAyG49BPSF1+lRjdvlBj79NWuFV/LqkCdOkg/Z8nbrv6B7Yys
wRmrAS/c7rO+yrmqcaY0LGBrnWjm1uE7J9rZPheIu2QtMOyGpQdym7aGOToo+wXO
Gy/2aBdRUzlrWa3GzGXSeg73Y6rbdcxqIa4ppfZWdryEiQta/LONDQFLx6z4KoCG
Ia97FgA=
-----END CERTIFICATE-----
Generated at Fri Jun 20 14:55:40 2025 by rpki-client