Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91C6550/8400954ACEC411ED8A83FB11C4F9AE02/6B95D6A4739311EE8FDD5549C4F9AE02.roa
File:                     6B95D6A4739311EE8FDD5549C4F9AE02.roa (raw, json)
Hash identifier:          IyfqGEP+yJeBSIvB0K7+tpsiptQXQxTq9nFV+jeCCyk=
Subject key identifier:   CB:C5:25:74:FE:12:BE:E7:BA:74:F2:6C:33:7F:18:33:AA:35:7A:30
Certificate issuer:       /CN=A91C6550/serialNumber=456EEA0692C6A4F26F53D2D237D1CB4DCD783305
Certificate serial:       0250
Authority key identifier: 45:6E:EA:06:92:C6:A4:F2:6F:53:D2:D2:37:D1:CB:4D:CD:78:33:05
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RW7qBpLGpPJvU9LSN9HLTc14MwU.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91C6550/8400954ACEC411ED8A83FB11C4F9AE02/6B95D6A4739311EE8FDD5549C4F9AE02.roa
Signing time:             Thu 05 Jun 2025 03:10:38 +0000
ROA not before:           Thu 05 Jun 2025 03:10:38 +0000
ROA not after:            Thu 30 Jul 2026 00:00:00 +0000
asID:                     135983
IP address blocks:        125.62.77.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91C6550/8400954ACEC411ED8A83FB11C4F9AE02/RW7qBpLGpPJvU9LSN9HLTc14MwU.crl
                          rsync://rpki.apnic.net/member_repository/A91C6550/8400954ACEC411ED8A83FB11C4F9AE02/RW7qBpLGpPJvU9LSN9HLTc14MwU.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RW7qBpLGpPJvU9LSN9HLTc14MwU.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 26 Jun 2025 02:46:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 592 (0x250)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91C6550, serialNumber=456EEA0692C6A4F26F53D2D237D1CB4DCD783305
        Validity
            Not Before: Jun  5 03:10:38 2025 GMT
            Not After : Jul 30 00:00:00 2026 GMT
        Subject: CN=68410aad-9c02
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ea:a2:c2:71:04:2b:54:ef:0c:b5:66:f7:48:2f:
                    eb:c6:bd:25:92:e4:bf:b1:0a:32:42:82:05:d9:55:
                    a6:d3:b1:5c:58:34:99:90:39:ce:f8:2d:de:d9:b3:
                    00:95:12:dc:56:90:9d:4c:c6:e4:a4:1e:60:e8:21:
                    fe:f1:71:52:89:24:9c:3b:1a:89:d4:06:d9:09:10:
                    45:0e:c8:2d:e6:53:0d:df:e5:1f:87:e5:7f:34:64:
                    73:72:7c:4c:81:dc:bd:d3:86:22:d2:c9:b0:4a:f9:
                    58:f6:fa:1d:a1:16:df:89:b4:8e:5f:c5:50:2f:e8:
                    16:80:70:fa:85:22:7d:c2:a7:71:5a:4c:89:09:8e:
                    e1:2b:80:e7:cb:fd:d2:28:78:dc:f5:7d:d8:f6:09:
                    22:7f:25:1e:7a:3d:61:8d:95:c9:32:31:c5:df:5d:
                    5e:e8:71:33:af:55:d5:74:a1:ed:48:bf:e6:69:a0:
                    5c:4b:1e:23:d0:ef:1d:f4:16:ef:90:05:b5:38:71:
                    db:4d:40:c4:8f:93:c4:f2:56:92:25:1b:b7:a8:0e:
                    4d:22:28:75:53:bb:35:3e:e1:75:5b:42:b9:db:a6:
                    ef:e2:9b:b5:6e:d7:f8:c3:ee:21:e3:4b:a6:30:64:
                    b9:94:59:b6:46:1b:40:eb:df:ba:07:f9:fa:66:b3:
                    55:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CB:C5:25:74:FE:12:BE:E7:BA:74:F2:6C:33:7F:18:33:AA:35:7A:30
            X509v3 Authority Key Identifier:
                keyid:45:6E:EA:06:92:C6:A4:F2:6F:53:D2:D2:37:D1:CB:4D:CD:78:33:05

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91C6550/8400954ACEC411ED8A83FB11C4F9AE02/RW7qBpLGpPJvU9LSN9HLTc14MwU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RW7qBpLGpPJvU9LSN9HLTc14MwU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C6550/8400954ACEC411ED8A83FB11C4F9AE02/6B95D6A4739311EE8FDD5549C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  125.62.77.0/24

    Signature Algorithm: sha256WithRSAEncryption
         a5:cd:9c:68:9f:69:58:ed:51:1c:47:1a:bf:a4:38:9c:f2:9a:
         40:99:0a:b2:04:90:a0:33:a2:c6:9f:c6:83:d9:50:2b:40:48:
         9f:eb:40:23:b5:40:1a:ba:a6:6b:99:f2:39:15:ab:21:97:96:
         fe:35:02:54:77:ec:2f:43:c0:33:52:bd:fa:52:21:0b:bd:34:
         38:3e:3c:e0:bb:88:cd:78:32:65:e1:ec:e9:c7:f5:06:c2:ae:
         b2:fd:26:fa:d5:11:cc:9f:f8:5b:99:af:b9:e6:63:51:ee:c4:
         2b:0a:bb:aa:8f:fd:d9:d3:e8:a0:cc:2b:49:c3:08:46:b6:e9:
         89:08:41:2b:c0:16:af:13:21:41:16:b8:18:b7:5e:2c:8e:14:
         56:f2:64:b4:4d:bb:62:e9:7b:2c:f6:65:ca:a9:cb:32:b9:97:
         aa:85:8e:cd:6a:52:74:db:1a:4c:2e:b0:c3:c3:d5:8c:8f:46:
         dd:eb:eb:b9:d9:65:ad:54:ee:95:d4:b7:58:0a:9d:5c:06:88:
         f1:6d:1e:a5:a0:26:f6:cd:b5:75:6b:a4:56:bd:b6:99:8d:4e:
         5c:78:6e:1f:a6:1e:8a:23:09:af:f5:c4:f2:6b:52:b1:51:f8:
         61:b3:46:2d:44:af:f6:82:f5:a6:d8:6a:82:31:08:fb:e3:18:
         4c:38:2a:9a
-----BEGIN CERTIFICATE-----
MIIFcTCCBFmgAwIBAgICAlAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QzY1NTAxMTAvBgNVBAUTKDQ1NkVFQTA2OTJDNkE0RjI2RjUzRDJEMjM3RDFDQjRE
Q0Q3ODMzMDUwHhcNMjUwNjA1MDMxMDM4WhcNMjYwNzMwMDAwMDAwWjAYMRYwFAYD
VQQDEw02ODQxMGFhZC05YzAyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA6qLCcQQrVO8MtWb3SC/rxr0lkuS/sQoyQoIF2VWm07FcWDSZkDnO+C3e2bMA
lRLcVpCdTMbkpB5g6CH+8XFSiSScOxqJ1AbZCRBFDsgt5lMN3+Ufh+V/NGRzcnxM
gdy904Yi0smwSvlY9vodoRbfibSOX8VQL+gWgHD6hSJ9wqdxWkyJCY7hK4Dny/3S
KHjc9X3Y9gkifyUeej1hjZXJMjHF311e6HEzr1XVdKHtSL/maaBcSx4j0O8d9Bbv
kAW1OHHbTUDEj5PE8laSJRu3qA5NIih1U7s1PuF1W0K526bv4pu1btf4w+4h40um
MGS5lFm2RhtA69+6B/n6ZrNVKQIDAQABo4IClTCCApEwHQYDVR0OBBYEFMvFJXT+
Er7nunTybDN/GDOqNXowMB8GA1UdIwQYMBaAFEVu6gaSxqTyb1PS0jfRy03NeDMF
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDNjU1MC84NDAwOTU0QUNF
QzQxMUVEOEE4M0ZCMTFDNEY5QUUwMi9SVzdxQnBMR3BQSnZVOUxTTjlITFRjMTRN
d1UuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL1JXN3FCcExHcFBKdlU5TFNOOUhMVGMxNE13VS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
QzY1NTAvODQwMDk1NEFDRUM0MTFFRDhBODNGQjExQzRGOUFFMDIvNkI5NUQ2QTQ3
MzkzMTFFRThGREQ1NTQ5QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E
EDAOMAwEAgABMAYDBAB9Pk0wDQYJKoZIhvcNAQELBQADggEBAKXNnGifaVjtURxH
Gr+kOJzymkCZCrIEkKAzosafxoPZUCtASJ/rQCO1QBq6pmuZ8jkVqyGXlv41AlR3
7C9DwDNSvfpSIQu9NDg+POC7iM14MmXh7OnH9QbCrrL9JvrVEcyf+FuZr7nmY1Hu
xCsKu6qP/dnT6KDMK0nDCEa26YkIQSvAFq8TIUEWuBi3XiyOFFbyZLRNu2Lpeyz2
ZcqpyzK5l6qFjs1qUnTbGkwusMPD1YyPRt3r67nZZa1U7pXUt1gKnVwGiPFtHqWg
JvbNtXVrpFa9tpmNTlx4bh+mHoojCa/1xPJrUrFR+GGzRi1Er/aC9abYaoIxCPvj
GEw4Kpo=
-----END CERTIFICATE-----
Generated at Thu Jun 19 18:58:35 2025 by rpki-client