Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91510AD/8B5E75FE1D8711E284B383DF08B02CD2/4AE8C5D45B6211F097761A3EC4F9AE02.roa
File:                     4AE8C5D45B6211F097761A3EC4F9AE02.roa (raw, json)
Hash identifier:          AXMZPAxxDRwcgBxBo+cJ6EaXUVogXGNqmcItWPjK+ac=
Subject key identifier:   83:1D:9D:A4:97:E1:B9:12:E2:5A:9F:95:95:3C:6C:6B:69:32:7D:E3
Certificate issuer:       /CN=A91510AD/serialNumber=E1E6908A16EC813DAA0BD64797AE9DBDEB092257
Certificate serial:       365F
Authority key identifier: E1:E6:90:8A:16:EC:81:3D:AA:0B:D6:47:97:AE:9D:BD:EB:09:22:57
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4eaQihbsgT2qC9ZHl66dvesJIlc.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91510AD/8B5E75FE1D8711E284B383DF08B02CD2/4AE8C5D45B6211F097761A3EC4F9AE02.roa
Signing time:             Mon 07 Jul 2025 18:43:37 +0000
ROA not before:           Mon 07 Jul 2025 18:43:37 +0000
ROA not after:            Tue 30 Dec 2025 00:00:00 +0000
asID:                     215195
IP address blocks:        175.29.17.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91510AD/8B5E75FE1D8711E284B383DF08B02CD2/4eaQihbsgT2qC9ZHl66dvesJIlc.crl
                          rsync://rpki.apnic.net/member_repository/A91510AD/8B5E75FE1D8711E284B383DF08B02CD2/4eaQihbsgT2qC9ZHl66dvesJIlc.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4eaQihbsgT2qC9ZHl66dvesJIlc.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 11 Aug 2025 14:29:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 13919 (0x365f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91510AD, serialNumber=E1E6908A16EC813DAA0BD64797AE9DBDEB092257
        Validity
            Not Before: Jul  7 18:43:37 2025 GMT
            Not After : Dec 30 00:00:00 2025 GMT
        Subject: CN=686c1559-b0fd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:01:04:fe:93:92:06:24:2c:e3:00:f3:b8:0a:
                    18:6b:4a:17:9a:30:63:5e:a7:64:c7:f9:40:a3:29:
                    0a:89:1f:7e:ef:5f:2f:ab:04:14:bd:f8:b2:18:51:
                    77:0e:f7:0e:5e:44:00:6d:98:de:9a:90:60:75:b8:
                    07:a5:dc:78:d3:d6:3c:8f:ba:93:b5:15:a6:9c:db:
                    89:ec:76:fd:f2:74:b9:de:1f:2c:57:5c:c2:2a:1f:
                    43:3a:70:3e:96:c2:3d:71:25:82:0f:79:50:ea:9c:
                    7f:a2:44:66:6b:5c:0c:29:84:c4:fe:fd:f5:b9:47:
                    cf:e6:10:14:4c:12:ec:c7:dd:4a:e6:ac:23:48:17:
                    2a:a2:81:fa:5f:a9:85:19:54:93:69:dc:34:f0:42:
                    c3:40:42:05:8f:37:38:bf:7e:0b:ba:4f:86:1d:04:
                    96:ba:69:17:5a:c3:ca:66:7b:11:4a:54:c6:f9:43:
                    e6:19:95:92:c6:f4:8b:9a:88:eb:4f:bf:0d:56:75:
                    51:25:55:f9:da:eb:7b:5d:16:7c:dc:54:14:a1:3f:
                    42:39:8e:6f:dc:16:c5:92:f0:e5:d6:4c:ff:74:a8:
                    6f:0b:0f:1a:72:ea:90:b9:9e:88:38:cb:7d:ca:3b:
                    55:e5:3d:de:3c:83:e8:b5:5b:25:1c:79:8d:2f:a8:
                    96:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                83:1D:9D:A4:97:E1:B9:12:E2:5A:9F:95:95:3C:6C:6B:69:32:7D:E3
            X509v3 Authority Key Identifier:
                keyid:E1:E6:90:8A:16:EC:81:3D:AA:0B:D6:47:97:AE:9D:BD:EB:09:22:57

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91510AD/8B5E75FE1D8711E284B383DF08B02CD2/4eaQihbsgT2qC9ZHl66dvesJIlc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4eaQihbsgT2qC9ZHl66dvesJIlc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91510AD/8B5E75FE1D8711E284B383DF08B02CD2/4AE8C5D45B6211F097761A3EC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  175.29.17.0/24

    Signature Algorithm: sha256WithRSAEncryption
         2c:75:9f:b7:91:3c:97:3c:7f:79:af:d5:62:5f:61:0f:6f:ff:
         20:0b:91:4c:68:10:d3:d0:03:42:2a:ef:e2:c9:b2:7a:e4:79:
         a0:bb:0b:6d:a4:a8:b2:e9:cd:32:8d:65:87:d6:a3:0c:62:8e:
         53:ef:fa:0d:6b:7e:37:3a:4e:44:25:25:20:ae:df:7e:76:0f:
         9a:61:4a:11:dc:96:1b:08:81:7a:4e:c8:05:4d:24:1d:8f:9c:
         82:3e:7e:c2:54:41:ac:5c:93:ab:dc:f5:d8:cc:e1:4e:f2:b4:
         7e:ef:3d:ca:91:98:79:c5:ac:99:e6:49:7d:9b:22:e7:9f:c0:
         ef:f3:df:77:a1:b0:d9:f0:57:80:3f:ec:05:62:78:8e:15:50:
         ae:8b:01:c9:f9:6f:80:1a:bd:e0:fe:85:c8:08:15:e0:bc:32:
         89:81:51:0c:36:fc:7d:fd:3d:d7:d5:41:73:a8:83:92:ee:84:
         70:50:11:27:68:1a:41:d7:ca:25:d5:31:e2:f6:57:b0:6a:90:
         4e:64:f6:34:4b:0a:45:0f:55:40:d5:cf:c2:0e:a4:a5:3c:01:
         35:59:de:07:87:ef:ec:a8:f4:62:77:28:ab:5a:e6:bb:6c:17:
         b8:7d:9c:54:6f:5d:a8:86:8c:63:5c:26:e4:e6:3f:8a:6c:e3:
         98:1a:b8:5d
-----BEGIN CERTIFICATE-----
MIIFcTCCBFmgAwIBAgICNl8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NTEwQUQxMTAvBgNVBAUTKEUxRTY5MDhBMTZFQzgxM0RBQTBCRDY0Nzk3QUU5REJE
RUIwOTIyNTcwHhcNMjUwNzA3MTg0MzM3WhcNMjUxMjMwMDAwMDAwWjAYMRYwFAYD
VQQDEw02ODZjMTU1OS1iMGZkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAwwEE/pOSBiQs4wDzuAoYa0oXmjBjXqdkx/lAoykKiR9+718vqwQUvfiyGFF3
DvcOXkQAbZjempBgdbgHpdx409Y8j7qTtRWmnNuJ7Hb98nS53h8sV1zCKh9DOnA+
lsI9cSWCD3lQ6px/okRma1wMKYTE/v31uUfP5hAUTBLsx91K5qwjSBcqooH6X6mF
GVSTadw08ELDQEIFjzc4v34Luk+GHQSWumkXWsPKZnsRSlTG+UPmGZWSxvSLmojr
T78NVnVRJVX52ut7XRZ83FQUoT9COY5v3BbFkvDl1kz/dKhvCw8acuqQuZ6IOMt9
yjtV5T3ePIPotVslHHmNL6iWXwIDAQABo4IClTCCApEwHQYDVR0OBBYEFIMdnaSX
4bkS4lqflZU8bGtpMn3jMB8GA1UdIwQYMBaAFOHmkIoW7IE9qgvWR5eunb3rCSJX
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1MTBBRC84QjVFNzVGRTFE
ODcxMUUyODRCMzgzREYwOEIwMkNEMi80ZWFRaWhic2dUMnFDOVpIbDY2ZHZlc0pJ
bGMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyLzRlYVFpaGJzZ1QycUM5WkhsNjZkdmVzSklsYy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
NTEwQUQvOEI1RTc1RkUxRDg3MTFFMjg0QjM4M0RGMDhCMDJDRDIvNEFFOEM1RDQ1
QjYyMTFGMDk3NzYxQTNFQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E
EDAOMAwEAgABMAYDBACvHREwDQYJKoZIhvcNAQELBQADggEBACx1n7eRPJc8f3mv
1WJfYQ9v/yALkUxoENPQA0Iq7+LJsnrkeaC7C22kqLLpzTKNZYfWowxijlPv+g1r
fjc6TkQlJSCu3352D5phShHclhsIgXpOyAVNJB2PnII+fsJUQaxck6vc9djM4U7y
tH7vPcqRmHnFrJnmSX2bIuefwO/z33ehsNnwV4A/7AVieI4VUK6LAcn5b4AaveD+
hcgIFeC8MomBUQw2/H39PdfVQXOog5LuhHBQESdoGkHXyiXVMeL2V7BqkE5k9jRL
CkUPVUDVz8IOpKU8ATVZ3geH7+yo9GJ3KKta5rtsF7h9nFRvXaiGjGNcJuTmP4ps
45gauF0=
-----END CERTIFICATE-----
Generated at Wed Aug 6 09:42:07 2025 by rpki-client