Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91CFFA0/1D66D486D8CB11E9BAE24D21C4F9AE02/54AB633219D211F09C581262C4F9AE02.roa
File:                     54AB633219D211F09C581262C4F9AE02.roa (raw, json)
Hash identifier:          TW7LWSWDjilmokwKD8PcTDpey43GdF1QSznkCaq0KaE=
Subject key identifier:   40:46:FD:FF:D5:F9:D8:3E:E9:66:98:B0:04:3D:15:33:45:B0:50:52
Certificate issuer:       /CN=A91CFFA0/serialNumber=ADD9418F0F9B55F3B7376A093DB11DBAD3AEFEC8
Certificate serial:       0EF9
Authority key identifier: AD:D9:41:8F:0F:9B:55:F3:B7:37:6A:09:3D:B1:1D:BA:D3:AE:FE:C8
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rdlBjw-bVfO3N2oJPbEdutOu_sg.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91CFFA0/1D66D486D8CB11E9BAE24D21C4F9AE02/54AB633219D211F09C581262C4F9AE02.roa
Signing time:             Tue 15 Apr 2025 08:19:20 +0000
ROA not before:           Tue 15 Apr 2025 08:19:20 +0000
ROA not after:            Tue 31 Mar 2026 00:00:00 +0000
asID:                     26344
IP address blocks:        125.252.78.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91CFFA0/1D66D486D8CB11E9BAE24D21C4F9AE02/rdlBjw-bVfO3N2oJPbEdutOu_sg.crl
                          rsync://rpki.apnic.net/member_repository/A91CFFA0/1D66D486D8CB11E9BAE24D21C4F9AE02/rdlBjw-bVfO3N2oJPbEdutOu_sg.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rdlBjw-bVfO3N2oJPbEdutOu_sg.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 01 May 2025 18:01:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3833 (0xef9)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91CFFA0, serialNumber=ADD9418F0F9B55F3B7376A093DB11DBAD3AEFEC8
        Validity
            Not Before: Apr 15 08:19:20 2025 GMT
            Not After : Mar 31 00:00:00 2026 GMT
        Subject: CN=67fe1688-a0ca
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:1e:54:55:7f:b5:0b:a7:e8:57:bf:c8:d0:bd:
                    e3:76:20:91:a1:e3:77:61:c0:23:2f:f4:d0:53:af:
                    79:fa:0a:38:18:b0:d7:3f:24:22:b0:64:e2:36:bf:
                    18:cc:e0:6f:d4:17:e0:f7:76:6b:70:c4:c3:66:2c:
                    9a:e4:ba:fe:d1:80:21:38:64:ef:b9:2a:2d:87:b7:
                    53:22:20:96:2a:6d:02:ae:4a:71:c0:d3:cd:63:a4:
                    3a:db:db:e1:37:16:7b:89:03:74:ab:e3:c3:2f:2e:
                    a9:e4:6c:cc:2b:b6:cb:d7:63:49:d5:42:4c:a3:b9:
                    dc:15:1e:f5:07:53:69:2d:a3:b6:bb:6e:87:28:52:
                    cb:5f:3d:07:d2:30:51:40:dc:df:32:91:4e:ad:3a:
                    91:16:2f:89:65:29:a9:dd:83:77:3d:fd:b6:2a:d2:
                    87:d0:f5:90:5c:99:33:5e:5f:3e:21:a6:5e:35:af:
                    31:92:6b:37:e0:be:ae:41:4e:2a:b1:f0:92:dc:fd:
                    4a:58:4a:4c:00:85:2e:dc:e9:07:26:69:af:03:be:
                    bc:7a:18:72:b5:a1:32:b7:1d:9c:f1:73:18:b5:b0:
                    9d:0c:f4:20:54:4a:c0:e4:e4:98:46:f4:37:a5:4e:
                    12:ec:18:ec:4d:e2:08:cd:28:54:56:d4:b5:73:0b:
                    20:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                40:46:FD:FF:D5:F9:D8:3E:E9:66:98:B0:04:3D:15:33:45:B0:50:52
            X509v3 Authority Key Identifier:
                keyid:AD:D9:41:8F:0F:9B:55:F3:B7:37:6A:09:3D:B1:1D:BA:D3:AE:FE:C8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91CFFA0/1D66D486D8CB11E9BAE24D21C4F9AE02/rdlBjw-bVfO3N2oJPbEdutOu_sg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rdlBjw-bVfO3N2oJPbEdutOu_sg.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CFFA0/1D66D486D8CB11E9BAE24D21C4F9AE02/54AB633219D211F09C581262C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  125.252.78.0/24

    Signature Algorithm: sha256WithRSAEncryption
         95:90:5e:28:9a:8e:d7:f3:7d:7d:74:f2:cb:6b:e9:35:68:af:
         9b:7a:bd:45:b3:ee:25:d4:ea:73:fe:30:94:c7:bf:dd:11:b3:
         69:f9:e1:92:01:e2:7c:0a:52:1c:4b:6c:46:fa:aa:f8:63:4d:
         3e:e8:10:35:55:90:2d:66:3d:f8:50:dc:05:69:c3:50:65:b2:
         16:20:99:49:66:70:1a:9a:e4:97:f5:42:e5:20:3d:5d:42:6a:
         30:33:f2:d7:f2:a9:62:43:0a:15:8e:61:13:84:2f:42:91:11:
         ac:3c:83:17:80:9b:bc:a6:0b:0a:93:5d:ed:c2:96:a8:1b:e6:
         41:c1:11:d6:7b:50:c9:60:83:2c:57:f5:45:87:84:9d:82:85:
         1e:fc:ec:85:6a:f1:64:76:7e:4e:ac:58:11:ef:bc:f9:96:e6:
         b7:a5:45:1c:f2:c7:f2:b3:62:f5:36:18:37:75:0b:52:d0:2d:
         88:1e:0b:21:98:f3:fd:c3:62:49:12:31:dd:8a:21:9a:b9:2b:
         b4:32:ab:7f:fe:dd:88:e1:1d:d4:05:d5:79:68:e3:86:6d:ef:
         7d:c5:b9:52:dc:37:3a:25:ae:11:ab:38:b1:a5:20:c6:7d:8d:
         7f:13:db:70:44:3a:86:5a:6c:ab:b0:88:3d:2f:f2:90:fa:0e:
         ee:24:06:f9
-----BEGIN CERTIFICATE-----
MIIFcTCCBFmgAwIBAgICDvkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
Q0ZGQTAxMTAvBgNVBAUTKEFERDk0MThGMEY5QjU1RjNCNzM3NkEwOTNEQjExREJB
RDNBRUZFQzgwHhcNMjUwNDE1MDgxOTIwWhcNMjYwMzMxMDAwMDAwWjAYMRYwFAYD
VQQDEw02N2ZlMTY4OC1hMGNhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAzB5UVX+1C6foV7/I0L3jdiCRoeN3YcAjL/TQU695+go4GLDXPyQisGTiNr8Y
zOBv1Bfg93ZrcMTDZiya5Lr+0YAhOGTvuSoth7dTIiCWKm0CrkpxwNPNY6Q629vh
NxZ7iQN0q+PDLy6p5GzMK7bL12NJ1UJMo7ncFR71B1NpLaO2u26HKFLLXz0H0jBR
QNzfMpFOrTqRFi+JZSmp3YN3Pf22KtKH0PWQXJkzXl8+IaZeNa8xkms34L6uQU4q
sfCS3P1KWEpMAIUu3OkHJmmvA768ehhytaEytx2c8XMYtbCdDPQgVErA5OSYRvQ3
pU4S7BjsTeIIzShUVtS1cwsgNQIDAQABo4IClTCCApEwHQYDVR0OBBYEFEBG/f/V
+dg+6WaYsAQ9FTNFsFBSMB8GA1UdIwQYMBaAFK3ZQY8Pm1XztzdqCT2xHbrTrv7I
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDRkZBMC8xRDY2RDQ4NkQ4
Q0IxMUU5QkFFMjREMjFDNEY5QUUwMi9yZGxCanctYlZmTzNOMm9KUGJFZHV0T3Vf
c2cuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL3JkbEJqdy1iVmZPM04yb0pQYkVkdXRPdV9zZy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
Q0ZGQTAvMUQ2NkQ0ODZEOENCMTFFOUJBRTI0RDIxQzRGOUFFMDIvNTRBQjYzMzIx
OUQyMTFGMDlDNTgxMjYyQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E
EDAOMAwEAgABMAYDBAB9/E4wDQYJKoZIhvcNAQELBQADggEBAJWQXiiajtfzfX10
8str6TVor5t6vUWz7iXU6nP+MJTHv90Rs2n54ZIB4nwKUhxLbEb6qvhjTT7oEDVV
kC1mPfhQ3AVpw1BlshYgmUlmcBqa5Jf1QuUgPV1CajAz8tfyqWJDChWOYROEL0KR
Eaw8gxeAm7ymCwqTXe3Clqgb5kHBEdZ7UMlggyxX9UWHhJ2ChR787IVq8WR2fk6s
WBHvvPmW5relRRzyx/KzYvU2GDd1C1LQLYgeCyGY8/3DYkkSMd2KIZq5K7Qyq3/+
3YjhHdQF1Xlo44Zt733FuVLcNzolrhGrOLGlIMZ9jX8T23BEOoZabKuwiD0v8pD6
Du4kBvk=
-----END CERTIFICATE-----
Generated at Sat Apr 26 14:08:28 2025 by rpki-client