Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9197277/43A7E894B56011EE911C5D4FC4F9AE02/6F5F30B8B56111EE91C72951C4F9AE02.roa
File:                     6F5F30B8B56111EE91C72951C4F9AE02.roa (raw, json)
Hash identifier:          qU2HEK0KuHPcd+bkaqKMrT7d6Vs+VdewAZ/yYmeUM7M=
Subject key identifier:   88:0E:FC:33:6D:C0:F0:E1:01:84:1F:55:79:3E:4F:13:29:5C:A9:49
Certificate issuer:       /CN=A9197277/serialNumber=D83B93E31E939937D8CB15FE39CA5E6E8FEAFA9B
Certificate serial:       0129
Authority key identifier: D8:3B:93:E3:1E:93:99:37:D8:CB:15:FE:39:CA:5E:6E:8F:EA:FA:9B
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/2DuT4x6TmTfYyxX-Ocpebo_q-ps.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9197277/43A7E894B56011EE911C5D4FC4F9AE02/6F5F30B8B56111EE91C72951C4F9AE02.roa
Signing time:             Fri 01 Aug 2025 06:12:58 +0000
ROA not before:           Fri 01 Aug 2025 06:12:58 +0000
ROA not after:            Mon 01 Dec 2025 00:00:00 +0000
asID:                     13517
IP address blocks:        64.124.189.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9197277/43A7E894B56011EE911C5D4FC4F9AE02/2DuT4x6TmTfYyxX-Ocpebo_q-ps.crl
                          rsync://rpki.apnic.net/member_repository/A9197277/43A7E894B56011EE911C5D4FC4F9AE02/2DuT4x6TmTfYyxX-Ocpebo_q-ps.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/2DuT4x6TmTfYyxX-Ocpebo_q-ps.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 14 Aug 2025 05:57:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 297 (0x129)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9197277, serialNumber=D83B93E31E939937D8CB15FE39CA5E6E8FEAFA9B
        Validity
            Not Before: Aug  1 06:12:58 2025 GMT
            Not After : Dec  1 00:00:00 2025 GMT
        Subject: CN=688c5aea-4cd1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:3a:2d:24:5e:c7:62:a7:30:23:d2:ee:d9:c5:
                    66:2c:89:31:35:88:1c:39:0d:1c:34:6a:ae:ad:2b:
                    c2:95:88:a0:68:7e:f9:8f:6b:e7:4d:92:0c:47:32:
                    02:f4:c2:2d:d8:8a:06:2c:c0:a7:e0:94:ff:c2:71:
                    e8:9f:0d:cf:e9:bd:a9:e9:c2:e0:3b:4c:68:c5:2c:
                    85:43:4b:47:39:62:51:d0:62:e8:03:72:bf:d1:92:
                    8f:f9:a3:0d:33:ef:a8:dd:4d:e1:94:9e:9a:19:db:
                    7a:09:ea:01:f4:0e:0e:67:ff:b0:c7:3e:56:8f:69:
                    15:8c:82:7d:69:b5:26:9d:91:c8:99:2d:76:95:f4:
                    60:40:fc:ee:2e:d3:9f:2f:71:a9:3d:10:db:25:3d:
                    26:aa:83:90:9d:e7:44:23:b8:a3:72:eb:02:81:86:
                    76:e8:a3:5a:8e:a7:e5:15:15:9b:6f:59:e2:e2:98:
                    0e:80:68:cc:86:01:57:e9:f5:da:03:b1:22:a7:c6:
                    9f:15:a6:a1:65:5b:10:f2:06:94:f1:5b:15:f9:3e:
                    7f:b3:b7:38:e6:5f:51:71:f4:00:ae:b2:b3:c1:36:
                    74:75:b5:0d:e1:82:1b:ca:3d:72:94:02:d9:ae:0d:
                    21:80:b0:8d:77:34:ce:ee:6f:42:bd:8d:da:03:04:
                    d9:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                88:0E:FC:33:6D:C0:F0:E1:01:84:1F:55:79:3E:4F:13:29:5C:A9:49
            X509v3 Authority Key Identifier:
                keyid:D8:3B:93:E3:1E:93:99:37:D8:CB:15:FE:39:CA:5E:6E:8F:EA:FA:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9197277/43A7E894B56011EE911C5D4FC4F9AE02/2DuT4x6TmTfYyxX-Ocpebo_q-ps.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/2DuT4x6TmTfYyxX-Ocpebo_q-ps.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9197277/43A7E894B56011EE911C5D4FC4F9AE02/6F5F30B8B56111EE91C72951C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.124.189.0/24

    Signature Algorithm: sha256WithRSAEncryption
         c9:a1:c5:11:15:74:6f:98:23:c5:81:bc:5d:66:92:c8:5a:0a:
         96:4f:e5:07:1a:b5:90:9a:01:48:fa:7e:de:37:69:22:0e:ad:
         a7:7a:83:91:74:cc:a2:62:51:8c:b2:5c:aa:f4:e0:a6:c2:91:
         75:7f:44:19:42:47:98:4e:a5:07:43:cf:88:32:ae:86:69:8a:
         a5:28:64:6f:e0:91:81:8f:26:eb:e6:b5:f5:91:95:b8:f6:34:
         ec:30:c3:3e:d6:8c:00:85:be:b8:9f:63:64:52:de:c5:9d:3f:
         cd:87:9f:49:22:49:1b:67:92:f3:c5:42:45:4a:1f:aa:94:55:
         a3:f4:10:dd:c8:90:87:60:e9:83:8d:03:5e:91:96:88:8d:46:
         73:f9:6f:0b:2d:fb:61:dd:77:79:03:82:1c:9b:66:c7:02:5e:
         19:8f:11:b8:fd:85:84:b0:ee:cf:dd:4c:db:94:1b:cb:45:97:
         ff:15:fb:f7:38:1b:07:1f:cc:d4:86:f8:f8:44:03:ac:a5:2d:
         83:10:29:8e:16:b4:ed:6b:26:70:50:c3:de:01:80:a7:52:55:
         8e:90:fb:2b:f2:7f:12:c8:e6:b8:ba:f6:42:c8:99:b6:c3:df:
         6c:57:8b:98:a3:4b:c1:16:fc:3c:c8:45:ea:93:f4:d3:5b:4a:
         85:0f:3c:07
-----BEGIN CERTIFICATE-----
MIIFcTCCBFmgAwIBAgICASkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
OTcyNzcxMTAvBgNVBAUTKEQ4M0I5M0UzMUU5Mzk5MzdEOENCMTVGRTM5Q0E1RTZF
OEZFQUZBOUIwHhcNMjUwODAxMDYxMjU4WhcNMjUxMjAxMDAwMDAwWjAYMRYwFAYD
VQQDEw02ODhjNWFlYS00Y2QxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAsTotJF7HYqcwI9Lu2cVmLIkxNYgcOQ0cNGqurSvClYigaH75j2vnTZIMRzIC
9MIt2IoGLMCn4JT/wnHonw3P6b2p6cLgO0xoxSyFQ0tHOWJR0GLoA3K/0ZKP+aMN
M++o3U3hlJ6aGdt6CeoB9A4OZ/+wxz5Wj2kVjIJ9abUmnZHImS12lfRgQPzuLtOf
L3GpPRDbJT0mqoOQnedEI7ijcusCgYZ26KNajqflFRWbb1ni4pgOgGjMhgFX6fXa
A7Eip8afFaahZVsQ8gaU8VsV+T5/s7c45l9RcfQArrKzwTZ0dbUN4YIbyj1ylALZ
rg0hgLCNdzTO7m9CvY3aAwTZkQIDAQABo4IClTCCApEwHQYDVR0OBBYEFIgO/DNt
wPDhAYQfVXk+TxMpXKlJMB8GA1UdIwQYMBaAFNg7k+Mek5k32MsV/jnKXm6P6vqb
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5NzI3Ny80M0E3RTg5NEI1
NjAxMUVFOTExQzVENEZDNEY5QUUwMi8yRHVUNHg2VG1UZll5eFgtT2NwZWJvX3Et
cHMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy
RkQxRkYyLzJEdVQ0eDZUbVRmWXl4WC1PY3BlYm9fcS1wcy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
OTcyNzcvNDNBN0U4OTRCNTYwMTFFRTkxMUM1RDRGQzRGOUFFMDIvNkY1RjMwQjhC
NTYxMTFFRTkxQzcyOTUxQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E
EDAOMAwEAgABMAYDBABAfL0wDQYJKoZIhvcNAQELBQADggEBAMmhxREVdG+YI8WB
vF1mkshaCpZP5QcatZCaAUj6ft43aSIOrad6g5F0zKJiUYyyXKr04KbCkXV/RBlC
R5hOpQdDz4gyroZpiqUoZG/gkYGPJuvmtfWRlbj2NOwwwz7WjACFvrifY2RS3sWd
P82Hn0kiSRtnkvPFQkVKH6qUVaP0EN3IkIdg6YONA16RloiNRnP5bwst+2Hdd3kD
ghybZscCXhmPEbj9hYSw7s/dTNuUG8tFl/8V+/c4GwcfzNSG+PhEA6ylLYMQKY4W
tO1rJnBQw94BgKdSVY6Q+yvyfxLI5ri69kLImbbD32xXi5ijS8EW/DzIReqT9NNb
SoUPPAc=
-----END CERTIFICATE-----
Generated at Mon Aug 11 07:35:49 2025 by rpki-client