Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9146B76/6CA3369C09D611EBB3C3C685C4F9AE02/E4BCDFAE0CD211EFAAF8335EC4F9AE02.roa
File:                     E4BCDFAE0CD211EFAAF8335EC4F9AE02.roa (raw, json)
Hash identifier:          qJReJaaTRE38lshBw+MzbYFyUK14agtT5WHSqFZE0ko=
Subject key identifier:   02:2E:FD:90:67:43:23:1E:4C:BA:06:DC:9F:E1:34:CC:D9:13:3D:2C
Certificate issuer:       /CN=A9146B76/serialNumber=CA15C5908D072DD821714EC67E1175E3AA9112E6
Certificate serial:       078E
Authority key identifier: CA:15:C5:90:8D:07:2D:D8:21:71:4E:C6:7E:11:75:E3:AA:91:12:E6
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yhXFkI0HLdghcU7GfhF146qREuY.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9146B76/6CA3369C09D611EBB3C3C685C4F9AE02/E4BCDFAE0CD211EFAAF8335EC4F9AE02.roa
Signing time:             Mon 28 Apr 2025 22:01:30 +0000
ROA not before:           Mon 28 Apr 2025 22:01:30 +0000
ROA not after:            Wed 01 Jul 2026 00:00:00 +0000
asID:                     132825
IP address blocks:        45.116.178.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9146B76/6CA3369C09D611EBB3C3C685C4F9AE02/yhXFkI0HLdghcU7GfhF146qREuY.crl
                          rsync://rpki.apnic.net/member_repository/A9146B76/6CA3369C09D611EBB3C3C685C4F9AE02/yhXFkI0HLdghcU7GfhF146qREuY.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yhXFkI0HLdghcU7GfhF146qREuY.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 19 May 2025 21:09:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1934 (0x78e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9146B76, serialNumber=CA15C5908D072DD821714EC67E1175E3AA9112E6
        Validity
            Not Before: Apr 28 22:01:30 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=680ffaba-4ee0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:b2:d3:c8:b7:b8:fe:a3:13:21:68:1a:7f:e8:
                    87:9a:ac:24:58:f5:86:b2:b7:9a:3f:55:7b:f7:9d:
                    db:c7:ab:3d:db:88:4b:c4:19:0a:96:df:ba:87:c0:
                    45:a9:09:45:ec:31:b5:b0:67:1f:0d:cf:73:49:ec:
                    16:ec:a6:29:4d:da:1b:b1:d5:07:ee:a8:04:33:53:
                    fd:f4:f0:bb:80:6d:dc:a9:b2:cc:9c:8d:9e:04:ba:
                    5c:c2:14:b7:88:d7:40:98:1d:00:a4:45:d2:f3:f5:
                    65:e0:62:d8:f7:98:50:76:3d:3a:ca:47:ce:92:1b:
                    f8:e6:89:cb:98:31:35:04:3e:da:a7:d4:b0:50:ae:
                    1e:b5:5a:56:37:2a:07:34:51:3f:8b:7e:3e:3e:8a:
                    da:4d:b0:ea:ea:61:3f:46:dd:ac:eb:c5:3f:e7:4b:
                    40:69:af:ff:5f:66:9b:ed:31:03:a7:e4:27:76:73:
                    2e:e9:cc:1c:15:41:9d:7e:8a:ca:ff:cb:7f:4a:f2:
                    c6:9a:66:fa:af:c6:dd:1b:7a:cc:3c:79:aa:02:d2:
                    14:bf:69:8e:a4:b0:e4:3a:11:21:a6:c7:57:18:5e:
                    b2:7d:bb:cc:d5:52:5c:48:18:ab:4e:16:63:94:c0:
                    97:89:e1:3a:93:c7:3c:f8:25:c0:52:6c:f7:67:69:
                    e7:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                02:2E:FD:90:67:43:23:1E:4C:BA:06:DC:9F:E1:34:CC:D9:13:3D:2C
            X509v3 Authority Key Identifier:
                keyid:CA:15:C5:90:8D:07:2D:D8:21:71:4E:C6:7E:11:75:E3:AA:91:12:E6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9146B76/6CA3369C09D611EBB3C3C685C4F9AE02/yhXFkI0HLdghcU7GfhF146qREuY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yhXFkI0HLdghcU7GfhF146qREuY.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9146B76/6CA3369C09D611EBB3C3C685C4F9AE02/E4BCDFAE0CD211EFAAF8335EC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.116.178.0/24

    Signature Algorithm: sha256WithRSAEncryption
         8f:78:7f:39:2b:ef:54:91:f8:48:6c:fb:f3:2c:3b:43:c8:3a:
         49:3c:8b:06:ab:05:8c:6a:89:c5:aa:3e:f7:f1:e6:b6:07:ea:
         ca:63:68:ea:a8:67:35:cb:a8:9d:71:06:97:94:a6:75:55:84:
         80:02:94:3d:2f:bc:57:9c:b8:b1:65:db:5b:45:c0:c7:77:e9:
         6f:14:6a:97:3c:2f:e3:91:26:1d:74:4b:a2:97:a5:be:3a:66:
         2a:42:9f:dc:7e:63:aa:6d:f0:20:5c:7d:a1:9e:48:48:d0:6f:
         74:c8:de:ca:f1:0c:76:51:c5:68:d5:04:cd:c1:21:bd:5c:d1:
         fe:32:45:36:01:ac:d5:0a:76:b0:0d:0f:b6:41:b4:b9:28:47:
         a1:50:53:a9:91:f3:36:24:4a:0d:f5:c4:40:4c:3f:75:ff:24:
         bd:07:30:07:d2:2e:ac:44:bb:7e:26:11:47:eb:2f:ac:5a:e8:
         ae:72:f7:bc:d4:32:5c:2b:00:8d:ec:d3:15:9f:d2:de:87:22:
         98:bf:97:e0:9d:31:b6:e4:3f:6a:6e:38:f2:9e:1b:ff:4b:d9:
         e4:12:d5:96:e4:dd:e0:17:51:9b:6f:0c:75:37:47:b2:53:29:
         f1:fe:82:6e:94:94:3f:5d:1a:2a:dd:b1:ed:d1:b7:9d:b5:de:
         b9:38:09:cf
-----BEGIN CERTIFICATE-----
MIIFcTCCBFmgAwIBAgICB44wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NDZCNzYxMTAvBgNVBAUTKENBMTVDNTkwOEQwNzJERDgyMTcxNEVDNjdFMTE3NUUz
QUE5MTEyRTYwHhcNMjUwNDI4MjIwMTMwWhcNMjYwNzAxMDAwMDAwWjAYMRYwFAYD
VQQDEw02ODBmZmFiYS00ZWUwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA0bLTyLe4/qMTIWgaf+iHmqwkWPWGsreaP1V7953bx6s924hLxBkKlt+6h8BF
qQlF7DG1sGcfDc9zSewW7KYpTdobsdUH7qgEM1P99PC7gG3cqbLMnI2eBLpcwhS3
iNdAmB0ApEXS8/Vl4GLY95hQdj06ykfOkhv45onLmDE1BD7ap9SwUK4etVpWNyoH
NFE/i34+PoraTbDq6mE/Rt2s68U/50tAaa//X2ab7TEDp+QndnMu6cwcFUGdforK
/8t/SvLGmmb6r8bdG3rMPHmqAtIUv2mOpLDkOhEhpsdXGF6yfbvM1VJcSBirThZj
lMCXieE6k8c8+CXAUmz3Z2nnEwIDAQABo4IClTCCApEwHQYDVR0OBBYEFAIu/ZBn
QyMeTLoG3J/hNMzZEz0sMB8GA1UdIwQYMBaAFMoVxZCNBy3YIXFOxn4RdeOqkRLm
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0NkI3Ni82Q0EzMzY5QzA5
RDYxMUVCQjNDM0M2ODVDNEY5QUUwMi95aFhGa0kwSExkZ2hjVTdHZmhGMTQ2cVJF
dVkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL3loWEZrSTBITGRnaGNVN0dmaEYxNDZxUkV1WS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
NDZCNzYvNkNBMzM2OUMwOUQ2MTFFQkIzQzNDNjg1QzRGOUFFMDIvRTRCQ0RGQUUw
Q0QyMTFFRkFBRjgzMzVFQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E
EDAOMAwEAgABMAYDBAAtdLIwDQYJKoZIhvcNAQELBQADggEBAI94fzkr71SR+Ehs
+/MsO0PIOkk8iwarBYxqicWqPvfx5rYH6spjaOqoZzXLqJ1xBpeUpnVVhIAClD0v
vFecuLFl21tFwMd36W8Uapc8L+ORJh10S6KXpb46ZipCn9x+Y6pt8CBcfaGeSEjQ
b3TI3srxDHZRxWjVBM3BIb1c0f4yRTYBrNUKdrAND7ZBtLkoR6FQU6mR8zYkSg31
xEBMP3X/JL0HMAfSLqxEu34mEUfrL6xa6K5y97zUMlwrAI3s0xWf0t6HIpi/l+Cd
MbbkP2puOPKeG/9L2eQS1Zbk3eAXUZtvDHU3R7JTKfH+gm6UlD9dGirdse3Rt521
3rk4Cc8=
-----END CERTIFICATE-----
Generated at Wed May 14 11:30:45 2025 by rpki-client