Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A919089B/1BCD43B6B11111EF8E23056FC4F9AE02/8284033420CD11F0BCFE4A70C4F9AE02.roa
File:                     8284033420CD11F0BCFE4A70C4F9AE02.roa (raw, json)
Hash identifier:          VRnXPjHcpYrC4h2blRdJhGhCl3ndeqDoavQMjgsusDc=
Subject key identifier:   48:BF:29:62:2A:38:BB:BE:2B:0F:E2:26:38:6A:89:CF:2B:9D:F9:29
Certificate issuer:       /CN=A919089B/serialNumber=3C768F0C2323D46D321E8AC993E75B0B1B821E54
Certificate serial:       4C
Authority key identifier: 3C:76:8F:0C:23:23:D4:6D:32:1E:8A:C9:93:E7:5B:0B:1B:82:1E:54
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PHaPDCMj1G0yHorJk-dbCxuCHlQ.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A919089B/1BCD43B6B11111EF8E23056FC4F9AE02/8284033420CD11F0BCFE4A70C4F9AE02.roa
Signing time:             Thu 24 Apr 2025 05:32:28 +0000
ROA not before:           Thu 24 Apr 2025 05:32:28 +0000
ROA not after:            Tue 31 Mar 2026 00:00:00 +0000
asID:                     7545
IP address blocks:        203.30.75.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A919089B/1BCD43B6B11111EF8E23056FC4F9AE02/PHaPDCMj1G0yHorJk-dbCxuCHlQ.crl
                          rsync://rpki.apnic.net/member_repository/A919089B/1BCD43B6B11111EF8E23056FC4F9AE02/PHaPDCMj1G0yHorJk-dbCxuCHlQ.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PHaPDCMj1G0yHorJk-dbCxuCHlQ.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 02 May 2025 06:19:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 76 (0x4c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A919089B, serialNumber=3C768F0C2323D46D321E8AC993E75B0B1B821E54
        Validity
            Not Before: Apr 24 05:32:28 2025 GMT
            Not After : Mar 31 00:00:00 2026 GMT
        Subject: CN=6809ccec-d676
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:db:d1:f3:8c:c5:0b:c9:34:44:ec:0a:5f:ac:
                    ad:11:df:d0:a8:c9:31:18:af:38:e7:09:b2:4c:50:
                    29:21:5b:00:39:ea:d4:e8:a7:1d:25:bb:74:71:0d:
                    ff:02:a7:3c:03:be:08:44:ee:e2:fe:93:ce:5d:6e:
                    7e:68:cb:b9:aa:92:d7:18:92:af:8c:30:97:e0:3f:
                    a6:a3:9b:62:37:50:bc:1d:4c:07:65:de:97:88:78:
                    a3:92:2b:39:bf:ac:9f:6e:f1:e5:6b:1d:92:c0:f4:
                    f7:c9:c3:04:7e:78:83:68:91:79:5b:3a:15:55:57:
                    2c:fe:35:aa:30:de:f9:04:bb:0c:3f:0c:9c:a1:f1:
                    ed:cc:90:0c:4d:53:39:b4:e4:04:45:d2:b6:78:a3:
                    10:bc:bd:e3:c8:1c:d3:43:a7:96:67:3b:61:db:83:
                    df:79:55:30:76:88:5a:85:98:84:ac:cf:c0:99:6d:
                    43:1b:ef:8b:d0:c4:73:1f:89:8e:20:88:15:c2:df:
                    1a:02:e1:7c:8d:aa:9a:11:d2:90:8f:a8:01:e4:3b:
                    cc:47:30:3a:b4:02:11:08:f5:95:9d:78:65:fc:cd:
                    a1:5a:e8:8f:a2:cc:6b:5d:dd:47:56:7b:9c:5d:4a:
                    a0:cb:a0:98:94:0f:46:85:43:98:f4:c8:b3:18:70:
                    0c:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                48:BF:29:62:2A:38:BB:BE:2B:0F:E2:26:38:6A:89:CF:2B:9D:F9:29
            X509v3 Authority Key Identifier:
                keyid:3C:76:8F:0C:23:23:D4:6D:32:1E:8A:C9:93:E7:5B:0B:1B:82:1E:54

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A919089B/1BCD43B6B11111EF8E23056FC4F9AE02/PHaPDCMj1G0yHorJk-dbCxuCHlQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PHaPDCMj1G0yHorJk-dbCxuCHlQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919089B/1BCD43B6B11111EF8E23056FC4F9AE02/8284033420CD11F0BCFE4A70C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  203.30.75.0/24

    Signature Algorithm: sha256WithRSAEncryption
         66:f7:b2:b6:43:0a:6a:02:fb:9f:cd:bc:ed:27:81:95:ff:ee:
         b9:5f:a7:b4:87:27:b8:03:f0:6d:f3:97:b3:b7:91:5d:15:a1:
         a9:b0:fe:be:26:0c:56:75:12:84:36:b1:5f:bc:e9:04:d3:4d:
         bf:ab:11:5a:d7:a5:8a:0d:85:1d:3f:65:f0:7a:7a:d5:1a:d1:
         b3:0c:97:1a:ca:4f:84:92:52:ea:7c:ac:dc:80:24:2d:6f:e2:
         fe:08:52:98:e6:64:23:75:da:81:a7:1d:77:0b:92:e0:f3:26:
         7a:d2:01:b6:39:2e:d4:8f:ad:00:ee:34:6c:79:b4:c6:13:44:
         a2:9d:02:2d:c2:a5:17:b7:0a:ef:bc:c4:cb:e5:06:e1:b9:09:
         55:c7:16:86:bc:b6:16:3f:71:51:b7:23:6f:71:9a:62:d3:5e:
         75:a8:8c:9b:2e:d0:f6:36:a4:6e:55:2d:33:8b:68:7a:9a:bc:
         6a:be:38:d2:fb:c8:12:75:46:d4:39:3c:95:ea:e9:d7:59:e5:
         12:40:83:fb:f6:5a:b1:9c:e1:13:83:a1:1c:cd:78:ea:da:ff:
         c6:e1:75:29:91:1e:01:8c:07:4f:e8:34:8c:13:6b:14:c1:4d:
         06:f6:09:f8:79:22:0f:46:92:2e:cc:1b:2b:f0:40:aa:3a:f4:
         97:3a:51:26
-----BEGIN CERTIFICATE-----
MIIFcDCCBFigAwIBAgIBTDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE5
MDg5QjExMC8GA1UEBRMoM0M3NjhGMEMyMzIzRDQ2RDMyMUU4QUM5OTNFNzVCMEIx
QjgyMUU1NDAeFw0yNTA0MjQwNTMyMjhaFw0yNjAzMzEwMDAwMDBaMBgxFjAUBgNV
BAMTDTY4MDljY2VjLWQ2NzYwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQDE29HzjMULyTRE7ApfrK0R39CoyTEYrzjnCbJMUCkhWwA56tTopx0lu3RxDf8C
pzwDvghE7uL+k85dbn5oy7mqktcYkq+MMJfgP6ajm2I3ULwdTAdl3peIeKOSKzm/
rJ9u8eVrHZLA9PfJwwR+eINokXlbOhVVVyz+Naow3vkEuww/DJyh8e3MkAxNUzm0
5ARF0rZ4oxC8vePIHNNDp5ZnO2Hbg995VTB2iFqFmISsz8CZbUMb74vQxHMfiY4g
iBXC3xoC4XyNqpoR0pCPqAHkO8xHMDq0AhEI9ZWdeGX8zaFa6I+izGtd3UdWe5xd
SqDLoJiUD0aFQ5j0yLMYcAyTAgMBAAGjggKVMIICkTAdBgNVHQ4EFgQUSL8pYio4
u74rD+ImOGqJzyud+SkwHwYDVR0jBBgwFoAUPHaPDCMj1G0yHorJk+dbCxuCHlQw
DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTkwODlCLzFCQ0Q0M0I2QjEx
MTExRUY4RTIzMDU2RkM0RjlBRTAyL1BIYVBEQ01qMUcweUhvckprLWRiQ3h1Q0hs
US5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG
RDFGRjIvUEhhUERDTWoxRzB5SG9ySmstZGJDeHVDSGxRLmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwgcsGCCsGAQUFBwELBIG+MIG7MIGDBggrBgEFBQcw
C4Z3cnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5
MDg5Qi8xQkNENDNCNkIxMTExMUVGOEUyMzA1NkZDNEY5QUUwMi84Mjg0MDMzNDIw
Q0QxMUYwQkNGRTRBNzBDNEY5QUUwMi5yb2EwMwYIKwYBBQUHMA2GJ2h0dHBzOi8v
cnJkcC5hcG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAfBggrBgEFBQcBBwEB/wQQ
MA4wDAQCAAEwBgMEAMseSzANBgkqhkiG9w0BAQsFAAOCAQEAZveytkMKagL7n828
7SeBlf/uuV+ntIcnuAPwbfOXs7eRXRWhqbD+viYMVnUShDaxX7zpBNNNv6sRWtel
ig2FHT9l8Hp61RrRswyXGspPhJJS6nys3IAkLW/i/ghSmOZkI3XagacddwuS4PMm
etIBtjku1I+tAO40bHm0xhNEop0CLcKlF7cK77zEy+UG4bkJVccWhry2Fj9xUbcj
b3GaYtNedaiMmy7Q9jakblUtM4toepq8ar440vvIEnVG1Dk8lerp11nlEkCD+/Za
sZzhE4OhHM146tr/xuF1KZEeAYwHT+g0jBNrFMFNBvYJ+HkiD0aSLswbK/BAqjr0
lzpRJg==
-----END CERTIFICATE-----
Generated at Sat Apr 26 08:08:54 2025 by rpki-client