Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9178B2B/BFDD222E3C4411EAAEE6F70AC4F9AE02/5E8E480C335B11ED92E25960C4F9AE02.roa
File:                     5E8E480C335B11ED92E25960C4F9AE02.roa (raw, json)
Hash identifier:          6SPV2FX7Tph5ZmideN5WrWfiO8/8Sir95YP17tl87tY=
Subject key identifier:   91:01:D0:48:36:CE:70:08:E4:1B:15:F5:AE:09:B3:7C:35:3C:C4:B0
Certificate issuer:       /CN=A9178B2B/serialNumber=202079D6C9FE07BF186221D1A99827CBF6B122AE
Certificate serial:       0B44
Authority key identifier: 20:20:79:D6:C9:FE:07:BF:18:62:21:D1:A9:98:27:CB:F6:B1:22:AE
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ICB51sn-B78YYiHRqZgny_axIq4.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9178B2B/BFDD222E3C4411EAAEE6F70AC4F9AE02/5E8E480C335B11ED92E25960C4F9AE02.roa
Signing time:             Thu 08 May 2025 19:54:36 +0000
ROA not before:           Thu 08 May 2025 19:54:36 +0000
ROA not after:            Thu 30 Jul 2026 00:00:00 +0000
asID:                     206264
IP address blocks:        45.115.25.0/24 maxlen: 24
                          103.55.8.0/24 maxlen: 24
                          103.55.10.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9178B2B/BFDD222E3C4411EAAEE6F70AC4F9AE02/ICB51sn-B78YYiHRqZgny_axIq4.crl
                          rsync://rpki.apnic.net/member_repository/A9178B2B/BFDD222E3C4411EAAEE6F70AC4F9AE02/ICB51sn-B78YYiHRqZgny_axIq4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ICB51sn-B78YYiHRqZgny_axIq4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 19 May 2025 19:03:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2884 (0xb44)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9178B2B, serialNumber=202079D6C9FE07BF186221D1A99827CBF6B122AE
        Validity
            Not Before: May  8 19:54:36 2025 GMT
            Not After : Jul 30 00:00:00 2026 GMT
        Subject: CN=681d0bfc-1f0f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:4d:36:a6:f6:b5:42:ac:7f:20:db:bf:cc:05:
                    fc:0d:50:22:60:57:ef:a2:85:48:48:94:60:b0:ad:
                    3a:01:54:52:65:48:65:3f:d1:4f:99:6d:db:3c:9c:
                    99:0c:02:b1:9f:70:6b:40:96:b0:ed:ae:28:53:12:
                    f5:fa:39:10:7b:d9:75:3d:69:6f:1b:32:fe:59:1f:
                    68:21:87:bd:e3:c4:fa:3d:01:78:5e:e8:d0:0e:8e:
                    e5:d2:dc:5c:7d:bc:1f:26:86:f5:3c:a7:79:ee:2a:
                    55:d7:6c:f0:19:4e:13:3e:84:cc:4f:1c:72:6a:2c:
                    af:46:17:19:47:45:65:52:6f:b4:4d:dc:ff:59:5d:
                    92:95:bc:99:89:7d:44:b3:d6:a1:7d:22:f3:53:ef:
                    74:47:15:88:07:33:8c:7b:49:a9:20:70:c0:d1:f0:
                    c8:8e:2e:55:c4:0c:2e:45:be:e8:ec:f0:ea:7e:0a:
                    bf:b7:22:44:9a:c4:0d:5a:c7:63:76:e7:43:fb:72:
                    44:1c:14:9c:1c:0c:1c:43:e5:30:c9:9e:b8:84:59:
                    32:7f:fd:b5:5b:77:1b:14:bc:32:f3:a8:fd:07:a4:
                    a9:a5:bd:f9:af:fc:62:43:d4:0d:d0:68:b3:e9:95:
                    0f:7d:60:92:cd:a5:e7:2e:ac:b5:01:c8:e1:da:b8:
                    aa:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                91:01:D0:48:36:CE:70:08:E4:1B:15:F5:AE:09:B3:7C:35:3C:C4:B0
            X509v3 Authority Key Identifier:
                keyid:20:20:79:D6:C9:FE:07:BF:18:62:21:D1:A9:98:27:CB:F6:B1:22:AE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9178B2B/BFDD222E3C4411EAAEE6F70AC4F9AE02/ICB51sn-B78YYiHRqZgny_axIq4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ICB51sn-B78YYiHRqZgny_axIq4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9178B2B/BFDD222E3C4411EAAEE6F70AC4F9AE02/5E8E480C335B11ED92E25960C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.115.25.0/24
                  103.55.8.0/24
                  103.55.10.0/24

    Signature Algorithm: sha256WithRSAEncryption
         aa:68:e9:ed:4e:60:9b:ac:90:2e:83:79:5e:c9:4a:e1:6c:21:
         09:ba:cf:8a:83:e9:81:da:4b:33:9d:0a:26:a9:ef:c8:07:06:
         7f:fc:49:29:8b:cc:d6:d6:8e:ec:27:d6:a7:59:dc:35:66:85:
         ef:fd:b2:cc:8d:72:39:48:83:98:ef:7c:3d:db:ba:e3:ef:b3:
         47:29:52:2d:bf:3f:41:00:e7:c0:d9:99:f4:2b:ff:59:38:b8:
         b0:d9:6e:d2:7c:e0:0e:e4:bc:47:22:67:e6:c8:8c:15:aa:2d:
         9c:b1:03:10:1e:ce:74:cd:0b:db:79:81:5d:16:a4:05:7d:22:
         cd:88:14:29:d2:9e:8f:e2:19:23:f0:6f:70:ee:f6:c2:50:f5:
         ab:8f:55:f5:c4:21:1f:0d:df:02:74:37:2e:98:2f:aa:2f:b5:
         e3:ac:49:44:b0:62:14:14:91:81:cd:c9:dc:58:1c:16:92:c9:
         8a:2f:c9:f7:46:59:55:a7:16:99:8f:06:75:d1:40:f2:82:32:
         d3:46:62:4c:ff:db:ef:7d:35:af:3f:de:21:48:94:e7:58:b8:
         4d:a0:0b:75:38:12:f2:c5:03:17:75:65:dd:dc:97:12:d0:62:
         b9:10:a9:dd:07:6c:ef:9a:b9:9c:9f:e7:4c:4a:41:68:2b:3f:
         9d:db:e3:51
-----BEGIN CERTIFICATE-----
MIIFfTCCBGWgAwIBAgICC0QwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NzhCMkIxMTAvBgNVBAUTKDIwMjA3OUQ2QzlGRTA3QkYxODYyMjFEMUE5OTgyN0NC
RjZCMTIyQUUwHhcNMjUwNTA4MTk1NDM2WhcNMjYwNzMwMDAwMDAwWjAYMRYwFAYD
VQQDEw02ODFkMGJmYy0xZjBmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAxk02pva1Qqx/INu/zAX8DVAiYFfvooVISJRgsK06AVRSZUhlP9FPmW3bPJyZ
DAKxn3BrQJaw7a4oUxL1+jkQe9l1PWlvGzL+WR9oIYe948T6PQF4XujQDo7l0txc
fbwfJob1PKd57ipV12zwGU4TPoTMTxxyaiyvRhcZR0VlUm+0Tdz/WV2SlbyZiX1E
s9ahfSLzU+90RxWIBzOMe0mpIHDA0fDIji5VxAwuRb7o7PDqfgq/tyJEmsQNWsdj
dudD+3JEHBScHAwcQ+UwyZ64hFkyf/21W3cbFLwy86j9B6Sppb35r/xiQ9QN0Giz
6ZUPfWCSzaXnLqy1Acjh2riqFwIDAQABo4ICoTCCAp0wHQYDVR0OBBYEFJEB0Eg2
znAI5BsV9a4Js3w1PMSwMB8GA1UdIwQYMBaAFCAgedbJ/ge/GGIh0amYJ8v2sSKu
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3OEIyQi9CRkREMjIyRTND
NDQxMUVBQUVFNkY3MEFDNEY5QUUwMi9JQ0I1MXNuLUI3OFlZaUhScVpnbnlfYXhJ
cTQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0lDQjUxc24tQjc4WVlpSFJxWmdueV9heElxNC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
NzhCMkIvQkZERDIyMkUzQzQ0MTFFQUFFRTZGNzBBQzRGOUFFMDIvNUU4RTQ4MEMz
MzVCMTFFRDkyRTI1OTYwQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwKwYIKwYBBQUHAQcBAf8E
HDAaMBgEAgABMBIDBAAtcxkDBABnNwgDBABnNwowDQYJKoZIhvcNAQELBQADggEB
AKpo6e1OYJuskC6DeV7JSuFsIQm6z4qD6YHaSzOdCiap78gHBn/8SSmLzNbWjuwn
1qdZ3DVmhe/9ssyNcjlIg5jvfD3buuPvs0cpUi2/P0EA58DZmfQr/1k4uLDZbtJ8
4A7kvEciZ+bIjBWqLZyxAxAeznTNC9t5gV0WpAV9Is2IFCnSno/iGSPwb3Du9sJQ
9auPVfXEIR8N3wJ0Ny6YL6ovteOsSUSwYhQUkYHNydxYHBaSyYovyfdGWVWnFpmP
BnXRQPKCMtNGYkz/2+99Na8/3iFIlOdYuE2gC3U4EvLFAxd1Zd3clxLQYrkQqd0H
bO+auZyf50xKQWgrP53b41E=
-----END CERTIFICATE-----
Generated at Tue May 13 04:52:18 2025 by rpki-client