Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A914CE75/D22EF3D6FF4B11E281BE06625911EA32/9C58363E8F2811ECA311FF19C4F9AE02.roa
File:                     9C58363E8F2811ECA311FF19C4F9AE02.roa (raw, json)
Hash identifier:          2SMCn/npWqcmfZg6nAHuysuldQhi1wmuZFYT9k6JumE=
Subject key identifier:   A9:7C:CB:F5:70:DE:DC:CB:25:02:82:AA:F8:02:65:92:4C:5B:5D:80
Certificate issuer:       /CN=A914CE75/serialNumber=49892537D8B2C0325B7BE081FD9286C79BEA6A85
Certificate serial:       31D7
Authority key identifier: 49:89:25:37:D8:B2:C0:32:5B:7B:E0:81:FD:92:86:C7:9B:EA:6A:85
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SYklN9iywDJbe-CB_ZKGx5vqaoU.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A914CE75/D22EF3D6FF4B11E281BE06625911EA32/9C58363E8F2811ECA311FF19C4F9AE02.roa
Signing time:             Wed 30 Apr 2025 15:52:19 +0000
ROA not before:           Wed 30 Apr 2025 15:52:19 +0000
ROA not after:            Wed 01 Jul 2026 00:00:00 +0000
asID:                     17762
IP address blocks:        115.118.72.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A914CE75/D22EF3D6FF4B11E281BE06625911EA32/SYklN9iywDJbe-CB_ZKGx5vqaoU.crl
                          rsync://rpki.apnic.net/member_repository/A914CE75/D22EF3D6FF4B11E281BE06625911EA32/SYklN9iywDJbe-CB_ZKGx5vqaoU.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SYklN9iywDJbe-CB_ZKGx5vqaoU.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 23 May 2025 15:38:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 12759 (0x31d7)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A914CE75, serialNumber=49892537D8B2C0325B7BE081FD9286C79BEA6A85
        Validity
            Not Before: Apr 30 15:52:19 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=68124733-222a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:79:3d:19:80:24:30:16:ee:77:dd:8e:67:08:
                    d1:ad:74:fe:ce:7b:2b:ec:fe:0b:ea:25:53:da:78:
                    12:6e:29:40:3e:33:49:62:b9:66:7c:c1:28:56:a7:
                    20:80:23:27:2d:0e:8b:19:bd:32:85:12:b1:4c:7f:
                    ae:31:4f:89:48:b5:56:f8:0b:a4:17:5c:95:2c:ac:
                    a9:62:f2:ef:e4:36:2b:b0:68:81:53:6b:1d:1f:95:
                    b8:bd:d5:f0:39:9d:cf:53:48:0a:1f:3f:62:f2:40:
                    f6:63:7e:2d:51:f4:2f:1c:36:41:10:62:99:a3:55:
                    43:49:05:a3:6b:96:83:93:b1:d8:91:a9:fa:d4:aa:
                    c3:bf:e3:e6:a3:22:b5:3c:98:7c:84:83:51:a2:0b:
                    8a:39:a3:fb:f8:7c:0b:9a:58:1e:ff:b3:ae:82:08:
                    90:a4:08:3c:9f:ec:cd:bb:4b:e2:d3:ae:21:ee:43:
                    62:ec:36:86:05:46:69:d1:28:a5:5a:1e:2d:1b:cf:
                    00:22:b1:6c:f2:6a:11:51:10:55:13:3d:d5:2e:55:
                    80:89:e1:72:ad:4d:14:99:f9:7d:7b:18:6a:f5:8f:
                    d8:5f:8a:25:8e:91:eb:cf:28:10:38:2e:d7:56:44:
                    72:0b:60:58:45:e8:fc:6c:ba:94:82:50:21:93:71:
                    10:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A9:7C:CB:F5:70:DE:DC:CB:25:02:82:AA:F8:02:65:92:4C:5B:5D:80
            X509v3 Authority Key Identifier:
                keyid:49:89:25:37:D8:B2:C0:32:5B:7B:E0:81:FD:92:86:C7:9B:EA:6A:85

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A914CE75/D22EF3D6FF4B11E281BE06625911EA32/SYklN9iywDJbe-CB_ZKGx5vqaoU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SYklN9iywDJbe-CB_ZKGx5vqaoU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914CE75/D22EF3D6FF4B11E281BE06625911EA32/9C58363E8F2811ECA311FF19C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  115.118.72.0/24

    Signature Algorithm: sha256WithRSAEncryption
         4b:46:cb:1a:7c:75:6e:42:a5:1b:a7:e1:1b:7a:83:50:65:02:
         39:a4:67:3f:38:0f:88:c9:d3:82:1b:b7:dc:a0:75:d8:67:17:
         8a:62:0a:b8:9a:67:c5:23:5a:e1:4b:66:fb:11:1e:a1:06:7e:
         fc:28:93:93:6c:a6:a6:59:82:dd:f4:c4:5d:6a:9f:45:b2:dc:
         6e:42:54:8f:40:c8:d3:5c:29:c8:e8:67:ca:d6:ea:2f:12:e2:
         80:d0:8c:f5:2b:27:a0:bc:0a:3e:81:33:72:80:fe:9b:fd:6b:
         73:55:2c:0e:45:37:e5:0b:b3:ed:92:90:d3:00:87:a5:a2:15:
         2b:08:de:a6:71:f4:6c:f4:2a:ba:1e:19:3e:f9:fc:fe:8f:48:
         6d:b6:a5:40:69:6a:00:67:9d:c9:fa:87:3d:5f:38:8d:bf:dd:
         ca:30:99:2d:dc:06:55:68:b5:b4:4f:c7:35:2a:19:72:9f:a1:
         f2:3e:62:94:79:48:db:bd:f1:9c:bd:10:9e:2f:c5:02:13:8c:
         71:d8:27:ef:ae:37:e9:04:08:50:d5:82:95:d8:1f:7c:cc:ab:
         01:aa:f2:51:44:62:3b:10:9d:04:d7:3c:93:5c:4f:03:96:c5:
         ab:0f:61:f6:72:73:e2:95:d9:1d:c4:f9:c9:d0:78:30:da:9c:
         68:9b:06:90
-----BEGIN CERTIFICATE-----
MIIFcTCCBFmgAwIBAgICMdcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NENFNzUxMTAvBgNVBAUTKDQ5ODkyNTM3RDhCMkMwMzI1QjdCRTA4MUZEOTI4NkM3
OUJFQTZBODUwHhcNMjUwNDMwMTU1MjE5WhcNMjYwNzAxMDAwMDAwWjAYMRYwFAYD
VQQDEw02ODEyNDczMy0yMjJhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAnHk9GYAkMBbud92OZwjRrXT+znsr7P4L6iVT2ngSbilAPjNJYrlmfMEoVqcg
gCMnLQ6LGb0yhRKxTH+uMU+JSLVW+AukF1yVLKypYvLv5DYrsGiBU2sdH5W4vdXw
OZ3PU0gKHz9i8kD2Y34tUfQvHDZBEGKZo1VDSQWja5aDk7HYkan61KrDv+PmoyK1
PJh8hINRoguKOaP7+HwLmlge/7OuggiQpAg8n+zNu0vi064h7kNi7DaGBUZp0Sil
Wh4tG88AIrFs8moRURBVEz3VLlWAieFyrU0Umfl9exhq9Y/YX4oljpHrzygQOC7X
VkRyC2BYRej8bLqUglAhk3EQeQIDAQABo4IClTCCApEwHQYDVR0OBBYEFKl8y/Vw
3tzLJQKCqvgCZZJMW12AMB8GA1UdIwQYMBaAFEmJJTfYssAyW3vggf2Shseb6mqF
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0Q0U3NS9EMjJFRjNENkZG
NEIxMUUyODFCRTA2NjI1OTExRUEzMi9TWWtsTjlpeXdESmJlLUNCX1pLR3g1dnFh
b1UuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL1NZa2xOOWl5d0RKYmUtQ0JfWktHeDV2cWFvVS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
NENFNzUvRDIyRUYzRDZGRjRCMTFFMjgxQkUwNjYyNTkxMUVBMzIvOUM1ODM2M0U4
RjI4MTFFQ0EzMTFGRjE5QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E
EDAOMAwEAgABMAYDBABzdkgwDQYJKoZIhvcNAQELBQADggEBAEtGyxp8dW5CpRun
4Rt6g1BlAjmkZz84D4jJ04Ibt9ygddhnF4piCriaZ8UjWuFLZvsRHqEGfvwok5Ns
pqZZgt30xF1qn0Wy3G5CVI9AyNNcKcjoZ8rW6i8S4oDQjPUrJ6C8Cj6BM3KA/pv9
a3NVLA5FN+ULs+2SkNMAh6WiFSsI3qZx9Gz0KroeGT75/P6PSG22pUBpagBnncn6
hz1fOI2/3cowmS3cBlVotbRPxzUqGXKfofI+YpR5SNu98Zy9EJ4vxQITjHHYJ++u
N+kECFDVgpXYH3zMqwGq8lFEYjsQnQTXPJNcTwOWxasPYfZyc+KV2R3E+cnQeDDa
nGibBpA=
-----END CERTIFICATE-----
Generated at Sat May 17 11:43:38 2025 by rpki-client