Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91C1323/084D88D495B711EABB824F1BC4F9AE02/A7432F4E221011F09599EB53C4F9AE02.roa
File:                     A7432F4E221011F09599EB53C4F9AE02.roa (raw, json)
Hash identifier:          auiqPm29jkGyjNzGkc35NXf78w6gicJrRi/3O1ypG24=
Subject key identifier:   33:F2:59:64:48:32:2D:3F:19:30:02:74:51:C7:18:45:D9:DE:53:1B
Certificate issuer:       /CN=A91C1323/serialNumber=412A6511CFEDCFECB5590C96C8C361E2FED44857
Certificate serial:       600B
Authority key identifier: 41:2A:65:11:CF:ED:CF:EC:B5:59:0C:96:C8:C3:61:E2:FE:D4:48:57
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QSplEc_tz-y1WQyWyMNh4v7USFc.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91C1323/084D88D495B711EABB824F1BC4F9AE02/A7432F4E221011F09599EB53C4F9AE02.roa
Signing time:             Fri 25 Apr 2025 20:05:37 +0000
ROA not before:           Fri 25 Apr 2025 20:05:37 +0000
ROA not after:            Wed 30 Jul 2025 00:00:00 +0000
asID:                     23730
IP address blocks:        218.188.69.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91C1323/084D88D495B711EABB824F1BC4F9AE02/QSplEc_tz-y1WQyWyMNh4v7USFc.crl
                          rsync://rpki.apnic.net/member_repository/A91C1323/084D88D495B711EABB824F1BC4F9AE02/QSplEc_tz-y1WQyWyMNh4v7USFc.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QSplEc_tz-y1WQyWyMNh4v7USFc.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 02 May 2025 21:30:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 24587 (0x600b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91C1323, serialNumber=412A6511CFEDCFECB5590C96C8C361E2FED44857
        Validity
            Not Before: Apr 25 20:05:37 2025 GMT
            Not After : Jul 30 00:00:00 2025 GMT
        Subject: CN=680beb11-e572
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:b7:d4:2c:c0:1d:ac:c2:c1:d5:ef:08:d1:39:
                    bc:d3:b8:bf:1c:ab:27:a5:e2:bc:29:45:a8:4a:a2:
                    a0:19:1e:dd:89:76:f7:13:cb:94:8f:00:36:a4:3d:
                    46:92:24:16:04:a6:e2:6b:a2:bb:e6:ab:1e:d7:ec:
                    29:c8:1a:c6:27:83:e0:f1:6e:e7:d5:27:67:1a:f5:
                    8e:33:30:db:16:d6:55:a6:1d:4a:cf:a8:af:fd:f3:
                    7f:8f:84:53:cd:b8:0d:9a:ce:9b:a6:f3:e1:cf:d6:
                    3f:b3:fc:c2:7a:15:1a:09:43:81:fc:e9:2d:b7:05:
                    c2:12:42:b4:b5:e5:de:d3:49:37:6e:e4:fb:10:89:
                    9a:97:e0:bc:c2:07:f9:d4:51:60:b5:99:c3:b6:f7:
                    44:9c:b3:45:ba:3e:b8:3f:f3:31:66:18:7a:24:3b:
                    0a:e6:99:1a:7e:e3:0d:32:9b:ed:1f:72:64:0d:ff:
                    b3:b9:2b:93:ad:c5:fc:f7:b9:6c:2e:df:da:95:8a:
                    f3:a4:a7:a0:da:ee:bc:60:38:f3:ef:1e:bc:54:41:
                    7c:d9:b1:6f:f0:21:ab:36:5f:d4:41:7c:33:cf:c3:
                    37:4a:a4:26:e6:48:ab:af:45:1b:2a:16:01:92:9d:
                    6f:bb:8d:7b:39:d1:5e:45:d5:0b:9a:a3:77:5b:61:
                    72:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                33:F2:59:64:48:32:2D:3F:19:30:02:74:51:C7:18:45:D9:DE:53:1B
            X509v3 Authority Key Identifier:
                keyid:41:2A:65:11:CF:ED:CF:EC:B5:59:0C:96:C8:C3:61:E2:FE:D4:48:57

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91C1323/084D88D495B711EABB824F1BC4F9AE02/QSplEc_tz-y1WQyWyMNh4v7USFc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QSplEc_tz-y1WQyWyMNh4v7USFc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C1323/084D88D495B711EABB824F1BC4F9AE02/A7432F4E221011F09599EB53C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  218.188.69.0/24

    Signature Algorithm: sha256WithRSAEncryption
         23:20:20:f3:b9:1b:f7:5b:47:88:6e:ed:3c:6a:f6:30:fb:51:
         0a:c3:3c:53:f1:89:3c:4c:71:8a:48:b9:21:2d:57:f6:fc:1e:
         1c:2c:2b:d4:21:78:3c:87:f0:fd:05:c8:7d:0c:5e:d5:82:ab:
         b1:bd:60:0f:b7:52:1f:c5:88:55:8e:7b:af:5d:f6:e1:99:49:
         96:4d:c3:7f:0a:53:77:bf:12:0b:de:2d:0b:94:ce:9f:b5:b3:
         6b:6e:35:5d:54:44:f8:56:f2:83:cd:c7:a9:fd:71:90:f1:a3:
         55:f2:7f:6e:b4:f1:8f:88:bd:14:9d:6a:18:c0:4e:ef:6a:c6:
         21:03:1d:7a:67:fa:5c:b1:4f:e2:b3:ca:2c:7a:52:8c:a4:e6:
         35:50:e4:6f:9b:4b:c2:cc:ea:28:22:9e:b9:8f:d0:cd:f6:88:
         7d:42:24:f5:bc:56:d5:02:08:89:43:1a:60:78:7e:38:fb:4e:
         4f:33:f6:2a:22:ff:8c:88:be:93:8d:79:dd:04:ea:de:7a:81:
         00:f8:1f:cd:d5:37:ce:44:41:a5:a4:6b:f7:b1:36:c9:03:3a:
         b5:b2:7f:84:05:00:8e:fa:03:a0:c7:35:44:d0:a1:25:46:da:
         8f:ee:c8:f8:5c:cc:9d:a6:be:58:89:2b:b1:ec:91:bd:db:cf:
         29:22:11:ba
-----BEGIN CERTIFICATE-----
MIIFcTCCBFmgAwIBAgICYAswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QzEzMjMxMTAvBgNVBAUTKDQxMkE2NTExQ0ZFRENGRUNCNTU5MEM5NkM4QzM2MUUy
RkVENDQ4NTcwHhcNMjUwNDI1MjAwNTM3WhcNMjUwNzMwMDAwMDAwWjAYMRYwFAYD
VQQDEw02ODBiZWIxMS1lNTcyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA3rfULMAdrMLB1e8I0Tm807i/HKsnpeK8KUWoSqKgGR7diXb3E8uUjwA2pD1G
kiQWBKbia6K75qse1+wpyBrGJ4Pg8W7n1SdnGvWOMzDbFtZVph1Kz6iv/fN/j4RT
zbgNms6bpvPhz9Y/s/zCehUaCUOB/OkttwXCEkK0teXe00k3buT7EImal+C8wgf5
1FFgtZnDtvdEnLNFuj64P/MxZhh6JDsK5pkafuMNMpvtH3JkDf+zuSuTrcX897ls
Lt/alYrzpKeg2u68YDjz7x68VEF82bFv8CGrNl/UQXwzz8M3SqQm5kirr0UbKhYB
kp1vu417OdFeRdULmqN3W2FyywIDAQABo4IClTCCApEwHQYDVR0OBBYEFDPyWWRI
Mi0/GTACdFHHGEXZ3lMbMB8GA1UdIwQYMBaAFEEqZRHP7c/stVkMlsjDYeL+1EhX
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDMTMyMy8wODREODhENDk1
QjcxMUVBQkI4MjRGMUJDNEY5QUUwMi9RU3BsRWNfdHoteTFXUXlXeU1OaDR2N1VT
RmMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL1FTcGxFY190ei15MVdReVd5TU5oNHY3VVNGYy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
QzEzMjMvMDg0RDg4RDQ5NUI3MTFFQUJCODI0RjFCQzRGOUFFMDIvQTc0MzJGNEUy
MjEwMTFGMDk1OTlFQjUzQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E
EDAOMAwEAgABMAYDBADavEUwDQYJKoZIhvcNAQELBQADggEBACMgIPO5G/dbR4hu
7Txq9jD7UQrDPFPxiTxMcYpIuSEtV/b8HhwsK9QheDyH8P0FyH0MXtWCq7G9YA+3
Uh/FiFWOe69d9uGZSZZNw38KU3e/EgveLQuUzp+1s2tuNV1URPhW8oPNx6n9cZDx
o1Xyf2608Y+IvRSdahjATu9qxiEDHXpn+lyxT+Kzyix6Uoyk5jVQ5G+bS8LM6igi
nrmP0M32iH1CJPW8VtUCCIlDGmB4fjj7Tk8z9ioi/4yIvpONed0E6t56gQD4H83V
N85EQaWka/exNskDOrWyf4QFAI76A6DHNUTQoSVG2o/uyPhczJ2mvliJK7Hskb3b
zykiEbo=
-----END CERTIFICATE-----
Generated at Sat Apr 26 18:09:10 2025 by rpki-client