Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91757CB/459B0C64F2F811EEA3506738C4F9AE02/EE01A248F2FB11EE9AA9E24CC4F9AE02.roa
File:                     EE01A248F2FB11EE9AA9E24CC4F9AE02.roa (raw, json)
Hash identifier:          k3OjV98AN2SowkZ89FdDV3rmcUlNd8FyOaF8PHB5wqU=
Subject key identifier:   47:F3:F9:BF:64:ED:BB:A5:6D:72:82:01:8E:5D:B9:85:3C:D5:3B:61
Certificate issuer:       /CN=A91757CB/serialNumber=41213B2F5F2429FC328EC3F4E95D5886402FEB69
Certificate serial:       0105
Authority key identifier: 41:21:3B:2F:5F:24:29:FC:32:8E:C3:F4:E9:5D:58:86:40:2F:EB:69
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/QSE7L18kKfwyjsP06V1YhkAv62k.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91757CB/459B0C64F2F811EEA3506738C4F9AE02/EE01A248F2FB11EE9AA9E24CC4F9AE02.roa
Signing time:             Wed 23 Jul 2025 05:41:59 +0000
ROA not before:           Wed 23 Jul 2025 05:41:59 +0000
ROA not after:            Wed 30 Sep 2026 00:00:00 +0000
asID:                     7545
IP address blocks:        155.144.58.0/24 maxlen: 24
                          155.144.59.0/24 maxlen: 24
                          155.144.60.0/24 maxlen: 24
                          155.144.61.0/24 maxlen: 24
                          155.144.62.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91757CB/459B0C64F2F811EEA3506738C4F9AE02/QSE7L18kKfwyjsP06V1YhkAv62k.crl
                          rsync://rpki.apnic.net/member_repository/A91757CB/459B0C64F2F811EEA3506738C4F9AE02/QSE7L18kKfwyjsP06V1YhkAv62k.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/QSE7L18kKfwyjsP06V1YhkAv62k.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 14 Aug 2025 05:57:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 261 (0x105)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91757CB, serialNumber=41213B2F5F2429FC328EC3F4E95D5886402FEB69
        Validity
            Not Before: Jul 23 05:41:59 2025 GMT
            Not After : Sep 30 00:00:00 2026 GMT
        Subject: CN=68807626-6979
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:7f:2c:3e:b7:ea:97:05:25:66:49:28:0d:cb:
                    3e:e6:b5:3f:73:ac:27:e0:79:ac:6b:a0:f5:a0:56:
                    61:7d:b2:b8:bd:51:e3:98:17:42:81:17:a7:d7:ff:
                    e4:07:c2:76:c9:7d:94:47:5c:28:1b:8a:dd:99:46:
                    71:08:37:3e:0c:90:eb:97:a5:83:46:ff:ff:57:4b:
                    0a:c5:0c:22:a3:c0:e5:cd:18:0b:cd:31:d8:46:6e:
                    5f:cd:e4:c4:f3:cd:28:e5:a2:0a:1d:5d:3a:3f:94:
                    46:ee:2b:80:3d:a2:ee:98:dd:86:42:0e:0e:9b:3a:
                    73:39:fb:ef:54:35:50:96:ba:10:65:0f:4d:6e:e8:
                    70:8f:82:5b:7b:33:de:c5:25:27:b3:15:76:16:f1:
                    f5:1c:f6:08:71:fc:2f:89:53:2e:73:19:99:9e:7d:
                    5c:35:57:cc:17:10:eb:89:ba:e9:9c:76:1c:cf:8b:
                    79:51:b1:ae:25:a7:7e:2a:89:4c:ff:6e:a1:80:49:
                    34:c4:0e:ef:b9:56:ce:70:8f:61:af:a7:0d:75:5e:
                    55:4e:00:9f:d8:3b:25:6d:67:b3:e1:db:e0:f1:1b:
                    06:2c:92:b8:37:84:04:de:65:3d:69:59:5e:00:14:
                    94:28:ff:2b:0a:48:da:8b:ef:3f:b6:8b:f0:65:e8:
                    ef:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                47:F3:F9:BF:64:ED:BB:A5:6D:72:82:01:8E:5D:B9:85:3C:D5:3B:61
            X509v3 Authority Key Identifier:
                keyid:41:21:3B:2F:5F:24:29:FC:32:8E:C3:F4:E9:5D:58:86:40:2F:EB:69

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91757CB/459B0C64F2F811EEA3506738C4F9AE02/QSE7L18kKfwyjsP06V1YhkAv62k.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/QSE7L18kKfwyjsP06V1YhkAv62k.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91757CB/459B0C64F2F811EEA3506738C4F9AE02/EE01A248F2FB11EE9AA9E24CC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  155.144.58.0-155.144.62.255

    Signature Algorithm: sha256WithRSAEncryption
         06:a6:cf:9e:ab:74:43:fa:6f:44:23:a3:60:03:6b:39:fd:80:
         9d:c6:44:f7:78:38:90:e0:80:9a:c6:f3:cf:34:8f:54:fc:79:
         23:02:7e:25:8e:3c:b7:26:4e:22:f6:5d:e2:34:0b:7b:7b:a3:
         41:5a:8d:58:07:ce:96:b0:d3:57:8b:de:18:fe:f3:5c:65:b2:
         ec:5f:7d:96:5e:37:8a:cf:63:b0:20:f8:8c:0a:ea:ae:6c:b7:
         10:de:95:0d:2d:e4:91:20:23:ab:25:c5:5d:33:3a:e2:95:cc:
         30:41:a5:3b:bb:95:01:92:f9:69:40:42:fa:de:fe:98:cb:6b:
         1f:9b:6b:57:67:ee:8d:f6:e8:0f:72:1b:64:97:fb:fe:a8:30:
         fe:79:42:31:2a:e9:ca:0b:21:45:68:5d:ae:b4:69:5c:00:80:
         52:4f:3b:e2:f5:00:d4:55:a1:f2:5c:6b:c7:68:36:65:d7:6f:
         68:f8:aa:93:94:a5:74:68:5e:a7:01:8a:08:09:fd:56:68:2f:
         f9:34:94:35:b0:e7:d0:26:fe:5e:60:7c:c1:0b:ed:ae:c9:e0:
         35:0e:bb:bb:12:d2:41:bd:d7:ee:4c:13:14:1d:9c:19:2b:6f:
         2a:e8:40:10:9f:74:c2:42:7c:a8:0e:76:42:ed:c3:ad:6b:6a:
         41:31:b6:a8
-----BEGIN CERTIFICATE-----
MIIFeTCCBGGgAwIBAgICAQUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NzU3Q0IxMTAvBgNVBAUTKDQxMjEzQjJGNUYyNDI5RkMzMjhFQzNGNEU5NUQ1ODg2
NDAyRkVCNjkwHhcNMjUwNzIzMDU0MTU5WhcNMjYwOTMwMDAwMDAwWjAYMRYwFAYD
VQQDEw02ODgwNzYyNi02OTc5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAs38sPrfqlwUlZkkoDcs+5rU/c6wn4Hmsa6D1oFZhfbK4vVHjmBdCgRen1//k
B8J2yX2UR1woG4rdmUZxCDc+DJDrl6WDRv//V0sKxQwio8DlzRgLzTHYRm5fzeTE
880o5aIKHV06P5RG7iuAPaLumN2GQg4OmzpzOfvvVDVQlroQZQ9Nbuhwj4JbezPe
xSUnsxV2FvH1HPYIcfwviVMucxmZnn1cNVfMFxDribrpnHYcz4t5UbGuJad+KolM
/26hgEk0xA7vuVbOcI9hr6cNdV5VTgCf2DslbWez4dvg8RsGLJK4N4QE3mU9aVle
ABSUKP8rCkjai+8/tovwZejvIQIDAQABo4ICnTCCApkwHQYDVR0OBBYEFEfz+b9k
7bulbXKCAY5duYU81TthMB8GA1UdIwQYMBaAFEEhOy9fJCn8Mo7D9OldWIZAL+tp
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3NTdDQi80NTlCMEM2NEYy
RjgxMUVFQTM1MDY3MzhDNEY5QUUwMi9RU0U3TDE4a0tmd3lqc1AwNlYxWWhrQXY2
MmsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy
RkQxRkYyL1FTRTdMMThrS2Z3eWpzUDA2VjFZaGtBdjYyay5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
NzU3Q0IvNDU5QjBDNjRGMkY4MTFFRUEzNTA2NzM4QzRGOUFFMDIvRUUwMUEyNDhG
MkZCMTFFRTlBQTlFMjRDQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwJwYIKwYBBQUHAQcBAf8E
GDAWMBQEAgABMA4wDAMEAZuQOgMEAJuQPjANBgkqhkiG9w0BAQsFAAOCAQEABqbP
nqt0Q/pvRCOjYANrOf2AncZE93g4kOCAmsbzzzSPVPx5IwJ+JY48tyZOIvZd4jQL
e3ujQVqNWAfOlrDTV4veGP7zXGWy7F99ll43is9jsCD4jArqrmy3EN6VDS3kkSAj
qyXFXTM64pXMMEGlO7uVAZL5aUBC+t7+mMtrH5trV2fujfboD3IbZJf7/qgw/nlC
MSrpygshRWhdrrRpXACAUk874vUA1FWh8lxrx2g2ZddvaPiqk5SldGhepwGKCAn9
Vmgv+TSUNbDn0Cb+XmB8wQvtrsngNQ67uxLSQb3X7kwTFB2cGStvKuhAEJ90wkJ8
qA52Qu3DrWtqQTG2qA==
-----END CERTIFICATE-----
Generated at Mon Aug 11 01:52:44 2025 by rpki-client