Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A917E623/A25D489E504711EEB677365DC4F9AE02/B7FD006A50F411EEB2008729C4F9AE02.roa
File:                     B7FD006A50F411EEB2008729C4F9AE02.roa (raw, json)
Hash identifier:          HsYr8OmdjYIdRArCv8NBd7tL5J9ojAyKHb00KhjW28U=
Subject key identifier:   45:CF:EC:03:01:66:BC:9D:45:2F:09:0E:C3:B1:E8:78:40:E9:B2:66
Certificate issuer:       /CN=A917E623/serialNumber=DA7369B49722BA139B7B60F39C88B49BDBB35F3D
Certificate serial:       013E
Authority key identifier: DA:73:69:B4:97:22:BA:13:9B:7B:60:F3:9C:88:B4:9B:DB:B3:5F:3D
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2nNptJciuhObe2DznIi0m9uzXz0.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A917E623/A25D489E504711EEB677365DC4F9AE02/B7FD006A50F411EEB2008729C4F9AE02.roa
Signing time:             Thu 03 Apr 2025 04:01:33 +0000
ROA not before:           Thu 03 Apr 2025 04:01:33 +0000
ROA not after:            Wed 01 Jul 2026 00:00:00 +0000
asID:                     63956
IP address blocks:        43.239.96.0/23 maxlen: 23
                          2403:4f00:6000::/36 maxlen: 36
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A917E623/A25D489E504711EEB677365DC4F9AE02/2nNptJciuhObe2DznIi0m9uzXz0.crl
                          rsync://rpki.apnic.net/member_repository/A917E623/A25D489E504711EEB677365DC4F9AE02/2nNptJciuhObe2DznIi0m9uzXz0.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2nNptJciuhObe2DznIi0m9uzXz0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 02 May 2025 03:36:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 318 (0x13e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A917E623, serialNumber=DA7369B49722BA139B7B60F39C88B49BDBB35F3D
        Validity
            Not Before: Apr  3 04:01:33 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=67ee081c-1181
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:32:d6:e3:b7:4e:a2:61:93:0e:23:d0:25:3d:
                    b2:74:81:9c:24:67:f2:34:d4:d5:73:e5:7e:0b:11:
                    0c:20:7a:17:78:39:eb:57:1a:24:ce:55:31:8e:8e:
                    10:f0:ba:28:3f:df:18:2e:9e:21:90:81:52:21:ca:
                    b7:ac:12:39:3c:b5:a9:6e:48:63:ce:f3:40:98:7c:
                    5b:b9:45:aa:a0:1d:01:63:1a:5a:98:1c:66:c6:b2:
                    9c:21:10:f3:5d:7b:d3:83:b2:dc:f9:51:cc:b7:3e:
                    13:38:e3:af:4f:45:a5:16:8e:2c:7f:57:33:78:84:
                    41:87:d7:06:e7:97:0e:7f:87:a0:71:79:cd:23:19:
                    e9:19:33:a1:2f:53:60:f6:db:f3:b7:01:96:96:12:
                    a3:0b:44:a5:a9:18:e9:a7:ed:94:c1:9d:7a:c2:f2:
                    ea:d1:84:18:89:ca:be:52:a0:c8:b4:4d:e0:de:73:
                    d9:f3:c3:d9:22:4a:28:9a:cb:04:28:0c:ac:a9:58:
                    dd:44:52:f4:38:e9:60:f2:85:7f:5c:09:45:1e:97:
                    9b:9d:d4:0a:3d:9d:c4:ab:94:f6:09:1d:df:23:88:
                    ce:b9:39:83:2c:d1:54:eb:50:63:e7:65:65:9d:a9:
                    4e:68:6a:0e:59:61:a6:8c:77:1c:d3:12:85:ca:14:
                    df:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                45:CF:EC:03:01:66:BC:9D:45:2F:09:0E:C3:B1:E8:78:40:E9:B2:66
            X509v3 Authority Key Identifier:
                keyid:DA:73:69:B4:97:22:BA:13:9B:7B:60:F3:9C:88:B4:9B:DB:B3:5F:3D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A917E623/A25D489E504711EEB677365DC4F9AE02/2nNptJciuhObe2DznIi0m9uzXz0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2nNptJciuhObe2DznIi0m9uzXz0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917E623/A25D489E504711EEB677365DC4F9AE02/B7FD006A50F411EEB2008729C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  43.239.96.0/23
                IPv6:
                  2403:4f00:6000::/36

    Signature Algorithm: sha256WithRSAEncryption
         a5:1a:10:66:79:9d:02:f3:49:33:ab:7c:8f:e7:da:a9:e8:1a:
         86:c0:ad:1e:59:2b:cf:b7:be:30:c2:6f:6d:ec:9f:0b:03:4d:
         64:d2:85:08:00:45:35:90:53:95:df:d8:76:23:d1:54:97:ed:
         a2:ed:57:61:eb:aa:d9:ed:ff:a5:fa:25:f8:d7:96:86:42:02:
         88:73:fd:20:96:04:5d:de:e5:fd:a9:7e:eb:b1:73:ff:33:5e:
         5a:49:2b:74:74:0a:60:ae:fe:9a:f2:ce:71:e7:06:d9:4c:41:
         3a:ae:98:41:f3:fc:f8:a9:38:0f:1b:76:46:31:93:0a:bb:bf:
         ec:20:b4:e3:de:0a:53:9d:d2:16:41:cc:19:ee:63:1a:2e:65:
         a8:04:d7:d4:eb:eb:46:39:13:77:a9:00:6f:39:9e:e7:00:73:
         63:94:96:ef:24:0e:be:a4:88:54:a4:ea:be:4a:99:1c:98:89:
         2d:5e:09:5f:a8:43:06:6c:a3:9e:a6:7e:18:84:6b:92:a2:5a:
         29:99:c6:81:5e:36:e7:c9:ac:fc:76:83:ee:23:1e:c7:0e:bb:
         1b:40:2a:71:1c:9c:19:1d:7c:37:6e:01:83:14:28:57:0b:93:
         7e:82:dd:a8:87:5f:46:0f:e3:c6:76:6e:96:32:65:13:db:e6:
         51:0b:64:27
-----BEGIN CERTIFICATE-----
MIIFgTCCBGmgAwIBAgICAT4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
N0U2MjMxMTAvBgNVBAUTKERBNzM2OUI0OTcyMkJBMTM5QjdCNjBGMzlDODhCNDlC
REJCMzVGM0QwHhcNMjUwNDAzMDQwMTMzWhcNMjYwNzAxMDAwMDAwWjAYMRYwFAYD
VQQDEw02N2VlMDgxYy0xMTgxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAszLW47dOomGTDiPQJT2ydIGcJGfyNNTVc+V+CxEMIHoXeDnrVxokzlUxjo4Q
8LooP98YLp4hkIFSIcq3rBI5PLWpbkhjzvNAmHxbuUWqoB0BYxpamBxmxrKcIRDz
XXvTg7Lc+VHMtz4TOOOvT0WlFo4sf1czeIRBh9cG55cOf4egcXnNIxnpGTOhL1Ng
9tvztwGWlhKjC0SlqRjpp+2UwZ16wvLq0YQYicq+UqDItE3g3nPZ88PZIkoomssE
KAysqVjdRFL0OOlg8oV/XAlFHpebndQKPZ3Eq5T2CR3fI4jOuTmDLNFU61Bj52Vl
nalOaGoOWWGmjHcc0xKFyhTflQIDAQABo4ICpTCCAqEwHQYDVR0OBBYEFEXP7AMB
ZrydRS8JDsOx6HhA6bJmMB8GA1UdIwQYMBaAFNpzabSXIroTm3tg85yItJvbs189
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3RTYyMy9BMjVENDg5RTUw
NDcxMUVFQjY3NzM2NURDNEY5QUUwMi8ybk5wdEpjaXVoT2JlMkR6bklpMG05dXpY
ejAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyLzJuTnB0SmNpdWhPYmUyRHpuSWkwbTl1elh6MC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
N0U2MjMvQTI1RDQ4OUU1MDQ3MTFFRUI2NzczNjVEQzRGOUFFMDIvQjdGRDAwNkE1
MEY0MTFFRUIyMDA4NzI5QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwLwYIKwYBBQUHAQcBAf8E
IDAeMAwEAgABMAYDBAEr72AwDgQCAAIwCAMGBCQDTwBgMA0GCSqGSIb3DQEBCwUA
A4IBAQClGhBmeZ0C80kzq3yP59qp6BqGwK0eWSvPt74wwm9t7J8LA01k0oUIAEU1
kFOV39h2I9FUl+2i7Vdh66rZ7f+l+iX415aGQgKIc/0glgRd3uX9qX7rsXP/M15a
SSt0dApgrv6a8s5x5wbZTEE6rphB8/z4qTgPG3ZGMZMKu7/sILTj3gpTndIWQcwZ
7mMaLmWoBNfU6+tGORN3qQBvOZ7nAHNjlJbvJA6+pIhUpOq+SpkcmIktXglfqEMG
bKOepn4YhGuSolopmcaBXjbnyaz8doPuIx7HDrsbQCpxHJwZHXw3bgGDFChXC5N+
gt2oh19GD+PGdm6WMmUT2+ZRC2Qn
-----END CERTIFICATE-----
Generated at Sat Apr 26 12:30:58 2025 by rpki-client