Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A912383B/F4BD5008E02311EA9922DE42C4F9AE02/E1582B782A6011EB8DEF2641C4F9AE02.roa
File:                     E1582B782A6011EB8DEF2641C4F9AE02.roa (raw, json)
Hash identifier:          g9vu6FJuOGiHVWjvlUrnr/lO98Du1rwPNicgo4vRrvk=
Subject key identifier:   7B:14:29:1A:C6:8F:9A:98:88:B4:5B:6D:2A:AC:CC:D1:52:F3:34:55
Certificate issuer:       /CN=A912383B/serialNumber=0727AAC5B8CF7FE68CCD6DE77F6C8B46D574FAA7
Certificate serial:       0833
Authority key identifier: 07:27:AA:C5:B8:CF:7F:E6:8C:CD:6D:E7:7F:6C:8B:46:D5:74:FA:A7
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ByeqxbjPf-aMzW3nf2yLRtV0-qc.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A912383B/F4BD5008E02311EA9922DE42C4F9AE02/E1582B782A6011EB8DEF2641C4F9AE02.roa
Signing time:             Fri 02 May 2025 21:32:39 +0000
ROA not before:           Fri 02 May 2025 21:32:39 +0000
ROA not after:            Wed 01 Jul 2026 00:00:00 +0000
asID:                     140610
IP address blocks:        149.234.132.0/24 maxlen: 24
                          149.234.134.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A912383B/F4BD5008E02311EA9922DE42C4F9AE02/ByeqxbjPf-aMzW3nf2yLRtV0-qc.crl
                          rsync://rpki.apnic.net/member_repository/A912383B/F4BD5008E02311EA9922DE42C4F9AE02/ByeqxbjPf-aMzW3nf2yLRtV0-qc.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ByeqxbjPf-aMzW3nf2yLRtV0-qc.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 23 May 2025 21:15:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2099 (0x833)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A912383B, serialNumber=0727AAC5B8CF7FE68CCD6DE77F6C8B46D574FAA7
        Validity
            Not Before: May  2 21:32:39 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=681539f7-8bf1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e3:bc:ae:1a:87:36:41:1f:f7:bc:23:38:12:14:
                    f6:39:71:e0:0f:51:41:af:5f:92:d6:0b:8b:2f:6a:
                    68:aa:83:16:23:60:54:e4:51:be:f8:15:a7:9f:25:
                    52:ff:ab:43:87:b8:f2:64:cc:2a:ef:6d:3d:5e:ac:
                    3e:dd:11:92:b2:99:c1:51:23:74:46:a3:91:a2:4c:
                    11:7f:fa:17:63:0b:05:ce:5e:1b:50:a1:34:b4:00:
                    4d:c2:25:78:82:d0:54:e8:64:c0:ed:3c:92:0c:83:
                    51:f2:cb:a6:b2:46:26:17:5e:de:cd:ea:9f:f8:6b:
                    a6:d2:c7:cd:ee:e6:47:fc:ef:54:7c:68:c7:c9:70:
                    cf:2f:30:aa:d7:94:70:06:6a:6c:ff:5c:e6:68:3f:
                    b1:10:12:c4:24:6e:82:46:e7:f7:2d:79:0a:87:e7:
                    54:20:3e:a9:40:f9:f2:09:c4:1b:e7:b4:a9:26:98:
                    5a:87:a1:1d:bb:f8:40:18:64:c0:2b:e9:29:9b:d8:
                    03:db:d6:2d:4d:99:4c:b5:a1:63:df:5e:fd:da:38:
                    f6:56:a6:56:63:c0:00:9e:bf:7e:e2:87:b5:66:34:
                    ca:db:b4:01:11:59:fa:13:43:7e:4d:00:f9:af:fb:
                    6e:5d:c5:01:88:79:9a:90:c2:68:02:94:11:c7:47:
                    91:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7B:14:29:1A:C6:8F:9A:98:88:B4:5B:6D:2A:AC:CC:D1:52:F3:34:55
            X509v3 Authority Key Identifier:
                keyid:07:27:AA:C5:B8:CF:7F:E6:8C:CD:6D:E7:7F:6C:8B:46:D5:74:FA:A7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A912383B/F4BD5008E02311EA9922DE42C4F9AE02/ByeqxbjPf-aMzW3nf2yLRtV0-qc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ByeqxbjPf-aMzW3nf2yLRtV0-qc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912383B/F4BD5008E02311EA9922DE42C4F9AE02/E1582B782A6011EB8DEF2641C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  149.234.132.0/24
                  149.234.134.0/24

    Signature Algorithm: sha256WithRSAEncryption
         12:b7:fd:02:b0:a8:e7:ae:d5:89:04:14:74:21:3d:52:cf:c2:
         4f:e9:9d:55:30:7f:f9:dc:ac:25:f3:6a:b9:e6:48:d3:fa:9b:
         0c:00:7e:31:84:17:a3:d9:31:a2:ea:e0:d8:9b:ea:f7:17:f1:
         06:cf:86:ea:da:1a:e6:68:2f:bc:c8:47:64:53:a0:d2:f1:4d:
         4e:ff:27:fc:d0:ac:7a:b2:1c:4b:97:a5:c8:f3:e9:b9:a6:e2:
         18:3f:66:33:38:cf:c6:cd:30:ba:16:d6:22:b9:9b:a5:1b:ce:
         74:68:de:30:27:84:55:9c:33:a9:f7:9f:18:be:f5:98:77:c0:
         c1:6a:ce:30:f0:0f:70:9d:80:70:26:e9:54:ab:77:89:d8:16:
         cd:c9:ae:d4:0a:ce:1d:ef:6d:fb:34:00:ac:89:7e:02:dd:a1:
         d3:18:e4:56:74:91:a9:11:cc:0e:84:ca:b5:2d:2c:fe:65:06:
         6e:63:c4:01:77:f6:c8:e6:10:9b:9e:2f:2d:c9:d6:ce:28:e9:
         ed:ea:9f:77:d4:97:11:70:46:67:1e:b0:ca:c8:3f:b3:91:44:
         9e:81:d3:a9:95:41:3a:22:44:79:b5:00:58:bb:12:b7:72:db:
         ad:a6:bf:78:c7:89:72:79:d4:e6:23:b9:21:10:bf:c5:93:a7:
         e7:38:a2:23
-----BEGIN CERTIFICATE-----
MIIFdzCCBF+gAwIBAgICCDMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MjM4M0IxMTAvBgNVBAUTKDA3MjdBQUM1QjhDRjdGRTY4Q0NENkRFNzdGNkM4QjQ2
RDU3NEZBQTcwHhcNMjUwNTAyMjEzMjM5WhcNMjYwNzAxMDAwMDAwWjAYMRYwFAYD
VQQDEw02ODE1MzlmNy04YmYxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA47yuGoc2QR/3vCM4EhT2OXHgD1FBr1+S1guLL2poqoMWI2BU5FG++BWnnyVS
/6tDh7jyZMwq7209Xqw+3RGSspnBUSN0RqORokwRf/oXYwsFzl4bUKE0tABNwiV4
gtBU6GTA7TySDINR8sumskYmF17ezeqf+Gum0sfN7uZH/O9UfGjHyXDPLzCq15Rw
Bmps/1zmaD+xEBLEJG6CRuf3LXkKh+dUID6pQPnyCcQb57SpJphah6Edu/hAGGTA
K+kpm9gD29YtTZlMtaFj31792jj2VqZWY8AAnr9+4oe1ZjTK27QBEVn6E0N+TQD5
r/tuXcUBiHmakMJoApQRx0eRdQIDAQABo4ICmzCCApcwHQYDVR0OBBYEFHsUKRrG
j5qYiLRbbSqszNFS8zRVMB8GA1UdIwQYMBaAFAcnqsW4z3/mjM1t539si0bVdPqn
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyMzgzQi9GNEJENTAwOEUw
MjMxMUVBOTkyMkRFNDJDNEY5QUUwMi9CeWVxeGJqUGYtYU16VzNuZjJ5TFJ0VjAt
cWMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy
RkQxRkYyL0J5ZXF4YmpQZi1hTXpXM25mMnlMUnRWMC1xYy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
MjM4M0IvRjRCRDUwMDhFMDIzMTFFQTk5MjJERTQyQzRGOUFFMDIvRTE1ODJCNzgy
QTYwMTFFQjhERUYyNjQxQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwJQYIKwYBBQUHAQcBAf8E
FjAUMBIEAgABMAwDBACV6oQDBACV6oYwDQYJKoZIhvcNAQELBQADggEBABK3/QKw
qOeu1YkEFHQhPVLPwk/pnVUwf/ncrCXzarnmSNP6mwwAfjGEF6PZMaLq4Nib6vcX
8QbPhuraGuZoL7zIR2RToNLxTU7/J/zQrHqyHEuXpcjz6bmm4hg/ZjM4z8bNMLoW
1iK5m6UbznRo3jAnhFWcM6n3nxi+9Zh3wMFqzjDwD3CdgHAm6VSrd4nYFs3JrtQK
zh3vbfs0AKyJfgLdodMY5FZ0kakRzA6EyrUtLP5lBm5jxAF39sjmEJueLy3J1s4o
6e3qn3fUlxFwRmcesMrIP7ORRJ6B06mVQToiRHm1AFi7Erdy262mv3jHiXJ51OYj
uSEQv8WTp+c4oiM=
-----END CERTIFICATE-----
Generated at Sun May 18 03:02:31 2025 by rpki-client