Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9147016/2D791D4C563D11EC95F3DC16C4F9AE02/94FA2A66174B11EF84A2715AC4F9AE02.roa
File:                     94FA2A66174B11EF84A2715AC4F9AE02.roa (raw, json)
Hash identifier:          eatKOCejKXvfU8SPSsA1QwT7IjJRshkBsQk4DWD5N0U=
Subject key identifier:   6B:C9:0C:55:B3:C2:48:73:F8:2A:7A:6A:36:0F:C3:34:36:8A:87:5F
Certificate issuer:       /CN=A9147016/serialNumber=595759D17F8ACF44CC54D906046C02F4B1D9DAA2
Certificate serial:       03F0
Authority key identifier: 59:57:59:D1:7F:8A:CF:44:CC:54:D9:06:04:6C:02:F4:B1:D9:DA:A2
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/WVdZ0X-Kz0TMVNkGBGwC9LHZ2qI.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9147016/2D791D4C563D11EC95F3DC16C4F9AE02/94FA2A66174B11EF84A2715AC4F9AE02.roa
Signing time:             Thu 05 Dec 2024 00:33:07 +0000
ROA not before:           Thu 05 Dec 2024 00:33:07 +0000
ROA not after:            Sat 31 Jan 2026 00:00:00 +0000
asID:                     45946
IP address blocks:        162.112.25.0/24 maxlen: 24
                          162.112.39.0/24 maxlen: 24
                          162.112.40.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9147016/2D791D4C563D11EC95F3DC16C4F9AE02/WVdZ0X-Kz0TMVNkGBGwC9LHZ2qI.crl
                          rsync://rpki.apnic.net/member_repository/A9147016/2D791D4C563D11EC95F3DC16C4F9AE02/WVdZ0X-Kz0TMVNkGBGwC9LHZ2qI.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/WVdZ0X-Kz0TMVNkGBGwC9LHZ2qI.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 02 May 2025 00:02:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1008 (0x3f0)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9147016, serialNumber=595759D17F8ACF44CC54D906046C02F4B1D9DAA2
        Validity
            Not Before: Dec  5 00:33:07 2024 GMT
            Not After : Jan 31 00:00:00 2026 GMT
        Subject: CN=6750f4c3-5ce7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:42:dc:d8:7e:c3:82:b0:5f:49:f1:33:0e:24:
                    92:94:63:86:49:c4:0e:4a:23:bd:a0:d9:35:f9:00:
                    91:ef:89:61:97:c0:59:66:86:ab:24:2e:d4:9a:9a:
                    a5:be:ba:b2:ba:de:27:1b:f1:47:38:04:cd:a1:47:
                    f4:8c:32:27:3d:c2:2e:93:9b:fb:46:fe:95:6d:94:
                    58:50:d1:08:5a:50:74:21:0f:9d:ec:eb:27:60:a1:
                    57:00:11:1d:9d:8e:1a:44:3e:ec:e2:16:aa:da:b7:
                    6d:8e:65:ad:79:30:d3:9b:66:27:03:f8:51:da:ff:
                    f6:97:a3:f5:e4:ac:ba:50:fe:46:dc:2f:c6:3e:b2:
                    f7:0d:d0:2a:4e:90:94:f3:5b:26:64:17:e4:90:3f:
                    ce:59:69:f3:48:77:ee:91:3e:2f:72:a6:e7:f1:4e:
                    e8:e7:42:c4:25:ec:e9:b6:ed:d6:1a:20:5d:10:42:
                    2b:27:18:1d:17:56:25:ff:b4:8f:ac:f5:d8:6c:05:
                    95:0b:6a:e1:14:05:71:74:82:77:5f:df:ca:05:98:
                    fc:b6:60:3e:e0:ac:e9:7b:a2:0b:21:85:a7:8a:0f:
                    46:0f:84:63:69:eb:bd:bb:07:19:71:24:80:30:90:
                    20:97:42:29:bc:25:bd:f6:6d:9c:df:03:5a:fb:55:
                    7a:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6B:C9:0C:55:B3:C2:48:73:F8:2A:7A:6A:36:0F:C3:34:36:8A:87:5F
            X509v3 Authority Key Identifier:
                keyid:59:57:59:D1:7F:8A:CF:44:CC:54:D9:06:04:6C:02:F4:B1:D9:DA:A2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9147016/2D791D4C563D11EC95F3DC16C4F9AE02/WVdZ0X-Kz0TMVNkGBGwC9LHZ2qI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/WVdZ0X-Kz0TMVNkGBGwC9LHZ2qI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9147016/2D791D4C563D11EC95F3DC16C4F9AE02/94FA2A66174B11EF84A2715AC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  162.112.25.0/24
                  162.112.39.0-162.112.40.255

    Signature Algorithm: sha256WithRSAEncryption
         80:46:3f:05:fc:df:0f:d2:8d:3d:19:fd:7d:10:c3:94:29:59:
         9d:a1:9e:86:74:93:2b:d1:cb:6c:90:ce:ba:4a:89:18:8c:a0:
         1b:6f:da:9e:35:b4:a8:22:6e:6d:c7:21:de:7b:fe:d2:86:0b:
         71:da:72:2d:8b:4d:e8:3d:28:98:98:c0:cd:e1:37:ef:1a:93:
         91:ae:a5:1c:4e:bb:ec:b5:f9:3b:9b:cf:25:ff:41:45:d3:63:
         02:3b:45:51:47:31:25:20:4f:90:4f:06:2d:58:b4:e7:0f:8b:
         0c:a9:bf:f1:ce:ed:d4:37:ac:fc:4d:2a:21:16:d5:6b:90:28:
         9d:db:03:6e:a8:6f:97:12:52:01:7e:14:3f:0c:58:fd:8e:d5:
         83:05:32:a6:81:b1:d0:d5:21:f5:68:54:84:21:c2:4f:fe:e1:
         a9:6e:35:c0:6f:00:06:03:b9:ba:95:8c:1f:a8:d3:f7:0c:7e:
         8b:f9:63:c4:09:bc:36:a3:05:f0:a6:21:ac:39:8f:a0:4b:ed:
         38:b0:07:f1:36:d7:fa:5f:04:b6:25:eb:01:b9:d4:3f:ae:22:
         3a:cb:f8:17:d0:d2:a3:ae:ed:57:c4:aa:99:03:5b:ba:d7:7f:
         d0:99:74:00:75:df:67:f0:00:9a:93:97:96:4b:a3:88:70:c5:
         4a:f2:bc:07
-----BEGIN CERTIFICATE-----
MIIFfzCCBGegAwIBAgICA/AwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NDcwMTYxMTAvBgNVBAUTKDU5NTc1OUQxN0Y4QUNGNDRDQzU0RDkwNjA0NkMwMkY0
QjFEOURBQTIwHhcNMjQxMjA1MDAzMzA3WhcNMjYwMTMxMDAwMDAwWjAYMRYwFAYD
VQQDEw02NzUwZjRjMy01Y2U3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAoULc2H7DgrBfSfEzDiSSlGOGScQOSiO9oNk1+QCR74lhl8BZZoarJC7Umpql
vrqyut4nG/FHOATNoUf0jDInPcIuk5v7Rv6VbZRYUNEIWlB0IQ+d7OsnYKFXABEd
nY4aRD7s4haq2rdtjmWteTDTm2YnA/hR2v/2l6P15Ky6UP5G3C/GPrL3DdAqTpCU
81smZBfkkD/OWWnzSHfukT4vcqbn8U7o50LEJezptu3WGiBdEEIrJxgdF1Yl/7SP
rPXYbAWVC2rhFAVxdIJ3X9/KBZj8tmA+4Kzpe6ILIYWnig9GD4Rjaeu9uwcZcSSA
MJAgl0IpvCW99m2c3wNa+1V68QIDAQABo4ICozCCAp8wHQYDVR0OBBYEFGvJDFWz
wkhz+Cp6ajYPwzQ2iodfMB8GA1UdIwQYMBaAFFlXWdF/is9EzFTZBgRsAvSx2dqi
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0NzAxNi8yRDc5MUQ0QzU2
M0QxMUVDOTVGM0RDMTZDNEY5QUUwMi9XVmRaMFgtS3owVE1WTmtHQkd3QzlMSFoy
cUkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy
RkQxRkYyL1dWZFowWC1LejBUTVZOa0dCR3dDOUxIWjJxSS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
NDcwMTYvMkQ3OTFENEM1NjNEMTFFQzk1RjNEQzE2QzRGOUFFMDIvOTRGQTJBNjYx
NzRCMTFFRjg0QTI3MTVBQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwLQYIKwYBBQUHAQcBAf8E
HjAcMBoEAgABMBQDBACicBkwDAMEAKJwJwMEAKJwKDANBgkqhkiG9w0BAQsFAAOC
AQEAgEY/BfzfD9KNPRn9fRDDlClZnaGehnSTK9HLbJDOukqJGIygG2/anjW0qCJu
bcch3nv+0oYLcdpyLYtN6D0omJjAzeE37xqTka6lHE677LX5O5vPJf9BRdNjAjtF
UUcxJSBPkE8GLVi05w+LDKm/8c7t1Des/E0qIRbVa5AondsDbqhvlxJSAX4UPwxY
/Y7VgwUypoGx0NUh9WhUhCHCT/7hqW41wG8ABgO5upWMH6jT9wx+i/ljxAm8NqMF
8KYhrDmPoEvtOLAH8TbX+l8EtiXrAbnUP64iOsv4F9DSo67tV8SqmQNbutd/0Jl0
AHXfZ/AAmpOXlkujiHDFSvK8Bw==
-----END CERTIFICATE-----
Generated at Sat Apr 26 13:08:29 2025 by rpki-client