Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91BF793/0F6BD3E00DD211EF9181113AC4F9AE02/ABF1B4E60DD211EF8903F07AC4F9AE02.roa
File:                     ABF1B4E60DD211EF8903F07AC4F9AE02.roa (raw, json)
Hash identifier:          Wf5yWE5WQZfabwwzQeNVDetWRiMN8CeR7Ab2vxrNgeg=
Subject key identifier:   A2:BE:57:82:FB:63:1E:0B:12:60:4D:FD:25:C2:7B:0C:BB:9F:63:E6
Certificate issuer:       /CN=A91BF793/serialNumber=F062F503EC9223FAF681E6A4DCD898491A26E494
Certificate serial:       B6
Authority key identifier: F0:62:F5:03:EC:92:23:FA:F6:81:E6:A4:DC:D8:98:49:1A:26:E4:94
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8GL1A-ySI_r2geak3NiYSRom5JQ.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91BF793/0F6BD3E00DD211EF9181113AC4F9AE02/ABF1B4E60DD211EF8903F07AC4F9AE02.roa
Signing time:             Wed 23 Apr 2025 05:32:06 +0000
ROA not before:           Wed 23 Apr 2025 05:32:06 +0000
ROA not after:            Thu 30 Jul 2026 00:00:00 +0000
asID:                     152733
IP address blocks:        202.50.138.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91BF793/0F6BD3E00DD211EF9181113AC4F9AE02/8GL1A-ySI_r2geak3NiYSRom5JQ.crl
                          rsync://rpki.apnic.net/member_repository/A91BF793/0F6BD3E00DD211EF9181113AC4F9AE02/8GL1A-ySI_r2geak3NiYSRom5JQ.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8GL1A-ySI_r2geak3NiYSRom5JQ.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 02 May 2025 04:59:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 182 (0xb6)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91BF793, serialNumber=F062F503EC9223FAF681E6A4DCD898491A26E494
        Validity
            Not Before: Apr 23 05:32:06 2025 GMT
            Not After : Jul 30 00:00:00 2026 GMT
        Subject: CN=68087b55-2e1c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:0f:9f:10:88:37:8a:75:b6:a1:52:ff:37:6a:
                    31:29:98:22:24:eb:6b:44:b3:f7:2a:d6:7c:77:ff:
                    da:8e:79:fb:fe:ef:1d:e0:ef:29:fc:83:6c:57:8f:
                    b2:25:e0:52:0b:8d:4e:7d:14:a2:15:4d:9f:74:93:
                    f0:c4:49:17:b1:d0:6e:d2:3e:56:f6:5d:9d:91:ca:
                    0f:2a:45:4b:03:47:e0:e6:a3:83:76:b7:e4:3b:d3:
                    52:b5:e5:7b:7b:82:d7:94:d2:f6:93:09:0c:4e:b5:
                    ed:f0:ca:dc:cd:ad:65:54:40:2a:96:11:48:e7:79:
                    cc:35:8c:54:f0:59:f6:4d:5a:d2:f6:0e:f3:f9:c3:
                    f9:82:13:b5:9d:c5:8a:cd:5c:11:94:57:72:9a:bb:
                    c0:23:e7:7d:43:e3:6b:ae:6e:19:41:26:c0:33:4f:
                    21:c9:c5:76:f1:b1:f7:2d:d5:3b:d6:e1:d7:87:49:
                    dd:b3:5c:4d:76:26:5c:e3:1b:1e:5a:1d:cf:26:e7:
                    78:70:65:22:d7:dd:ed:b8:fa:a1:3c:ad:c4:69:0d:
                    a8:74:02:af:fb:2d:e5:83:b6:3b:e1:e9:c6:d9:70:
                    6c:a6:aa:85:63:ac:eb:7e:4d:81:ae:19:d2:f5:d5:
                    36:32:16:1e:55:1c:ab:09:05:60:f3:33:53:cc:dc:
                    1b:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A2:BE:57:82:FB:63:1E:0B:12:60:4D:FD:25:C2:7B:0C:BB:9F:63:E6
            X509v3 Authority Key Identifier:
                keyid:F0:62:F5:03:EC:92:23:FA:F6:81:E6:A4:DC:D8:98:49:1A:26:E4:94

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91BF793/0F6BD3E00DD211EF9181113AC4F9AE02/8GL1A-ySI_r2geak3NiYSRom5JQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8GL1A-ySI_r2geak3NiYSRom5JQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BF793/0F6BD3E00DD211EF9181113AC4F9AE02/ABF1B4E60DD211EF8903F07AC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  202.50.138.0/24

    Signature Algorithm: sha256WithRSAEncryption
         9b:64:50:dd:1b:c3:f7:1b:75:f2:14:a8:6e:15:e1:3b:1c:50:
         19:bd:41:1c:cd:34:a2:34:aa:b4:9e:ca:0f:aa:8f:52:ff:71:
         a1:c6:ae:81:9e:59:2d:c9:65:11:02:af:94:dc:19:51:6f:e6:
         a4:d7:a0:d0:1b:51:a3:8e:d2:f2:e6:70:22:40:d1:57:ef:a3:
         15:17:a8:97:58:f0:0a:94:6b:e6:77:c3:3c:bd:9f:95:c4:f7:
         ad:23:03:46:15:98:72:60:e1:8a:13:55:e7:d5:93:0f:72:2c:
         24:40:64:e9:78:1b:47:01:b2:72:ac:f9:64:f1:e5:42:da:b8:
         81:53:90:10:b2:31:e4:74:4b:98:fc:2f:36:46:51:c8:ce:cf:
         ea:45:22:da:9d:a7:ed:46:3c:1a:f9:20:4d:ea:d9:7b:c9:43:
         a1:af:cf:6e:09:22:41:24:89:7e:45:4c:48:2b:5d:73:cc:a1:
         a9:09:fe:14:64:2d:03:3b:6d:5d:32:e7:27:6c:1c:d7:6a:02:
         df:27:18:46:db:14:8b:c6:aa:65:3f:21:eb:b7:55:61:f3:79:
         5b:7c:92:31:d2:ff:e1:8c:14:56:81:b5:a6:ef:1c:00:f1:34:
         81:8e:92:28:3a:8f:64:e9:86:76:5c:22:31:9d:c0:a1:e6:32:
         fe:90:b8:64
-----BEGIN CERTIFICATE-----
MIIFcTCCBFmgAwIBAgICALYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QkY3OTMxMTAvBgNVBAUTKEYwNjJGNTAzRUM5MjIzRkFGNjgxRTZBNERDRDg5ODQ5
MUEyNkU0OTQwHhcNMjUwNDIzMDUzMjA2WhcNMjYwNzMwMDAwMDAwWjAYMRYwFAYD
VQQDEw02ODA4N2I1NS0yZTFjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAqA+fEIg3inW2oVL/N2oxKZgiJOtrRLP3KtZ8d//ajnn7/u8d4O8p/INsV4+y
JeBSC41OfRSiFU2fdJPwxEkXsdBu0j5W9l2dkcoPKkVLA0fg5qODdrfkO9NSteV7
e4LXlNL2kwkMTrXt8Mrcza1lVEAqlhFI53nMNYxU8Fn2TVrS9g7z+cP5ghO1ncWK
zVwRlFdymrvAI+d9Q+Nrrm4ZQSbAM08hycV28bH3LdU71uHXh0nds1xNdiZc4xse
Wh3PJud4cGUi193tuPqhPK3EaQ2odAKv+y3lg7Y74enG2XBspqqFY6zrfk2BrhnS
9dU2MhYeVRyrCQVg8zNTzNwbwQIDAQABo4IClTCCApEwHQYDVR0OBBYEFKK+V4L7
Yx4LEmBN/SXCewy7n2PmMB8GA1UdIwQYMBaAFPBi9QPskiP69oHmpNzYmEkaJuSU
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCRjc5My8wRjZCRDNFMDBE
RDIxMUVGOTE4MTExM0FDNEY5QUUwMi84R0wxQS15U0lfcjJnZWFrM05pWVNSb201
SlEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyLzhHTDFBLXlTSV9yMmdlYWszTmlZU1JvbTVKUS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
QkY3OTMvMEY2QkQzRTAwREQyMTFFRjkxODExMTNBQzRGOUFFMDIvQUJGMUI0RTYw
REQyMTFFRjg5MDNGMDdBQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E
EDAOMAwEAgABMAYDBADKMoowDQYJKoZIhvcNAQELBQADggEBAJtkUN0bw/cbdfIU
qG4V4TscUBm9QRzNNKI0qrSeyg+qj1L/caHGroGeWS3JZRECr5TcGVFv5qTXoNAb
UaOO0vLmcCJA0VfvoxUXqJdY8AqUa+Z3wzy9n5XE960jA0YVmHJg4YoTVefVkw9y
LCRAZOl4G0cBsnKs+WTx5ULauIFTkBCyMeR0S5j8LzZGUcjOz+pFItqdp+1GPBr5
IE3q2XvJQ6Gvz24JIkEkiX5FTEgrXXPMoakJ/hRkLQM7bV0y5ydsHNdqAt8nGEbb
FIvGqmU/Ieu3VWHzeVt8kjHS/+GMFFaBtabvHADxNIGOkig6j2TphnZcIjGdwKHm
Mv6QuGQ=
-----END CERTIFICATE-----
Generated at Sat Apr 26 17:11:29 2025 by rpki-client