Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9178B2B/BFDD222E3C4411EAAEE6F70AC4F9AE02/EE611404E51B11EF98150C30C4F9AE02.roa
File:                     EE611404E51B11EF98150C30C4F9AE02.roa (raw, json)
Hash identifier:          CWcGppa7/X2BEWOhZeYJBrVNg4CI1Gt4TP8k9AJmrTU=
Subject key identifier:   64:B1:E8:1F:F9:DD:D7:C3:34:3A:47:78:24:B1:4B:B4:DC:00:09:94
Certificate issuer:       /CN=A9178B2B/serialNumber=202079D6C9FE07BF186221D1A99827CBF6B122AE
Certificate serial:       0B45
Authority key identifier: 20:20:79:D6:C9:FE:07:BF:18:62:21:D1:A9:98:27:CB:F6:B1:22:AE
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ICB51sn-B78YYiHRqZgny_axIq4.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9178B2B/BFDD222E3C4411EAAEE6F70AC4F9AE02/EE611404E51B11EF98150C30C4F9AE02.roa
Signing time:             Thu 08 May 2025 19:54:37 +0000
ROA not before:           Thu 08 May 2025 19:54:37 +0000
ROA not after:            Thu 30 Jul 2026 00:00:00 +0000
asID:                     212238
IP address blocks:        45.115.27.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9178B2B/BFDD222E3C4411EAAEE6F70AC4F9AE02/ICB51sn-B78YYiHRqZgny_axIq4.crl
                          rsync://rpki.apnic.net/member_repository/A9178B2B/BFDD222E3C4411EAAEE6F70AC4F9AE02/ICB51sn-B78YYiHRqZgny_axIq4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ICB51sn-B78YYiHRqZgny_axIq4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 19 May 2025 19:03:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2885 (0xb45)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9178B2B, serialNumber=202079D6C9FE07BF186221D1A99827CBF6B122AE
        Validity
            Not Before: May  8 19:54:37 2025 GMT
            Not After : Jul 30 00:00:00 2026 GMT
        Subject: CN=681d0bfc-0c30
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f4:ec:9a:e0:52:05:71:a0:5e:8b:a7:11:ae:68:
                    21:84:5e:74:04:6d:b8:71:d9:41:61:ef:1d:7e:60:
                    68:7d:d7:62:fc:b4:74:ff:2e:0b:78:c1:29:e2:dc:
                    7b:3e:c3:5e:de:d4:15:ac:66:42:42:30:92:23:12:
                    b7:47:51:2a:66:48:48:d4:5f:48:5f:1b:41:d4:05:
                    be:0c:e8:54:2c:97:1a:ec:2f:b8:28:ca:e6:7c:35:
                    b6:9b:08:64:68:7d:c0:92:ae:b0:d6:75:05:1f:f3:
                    29:bb:7f:9b:7b:38:c4:0e:7e:b4:ef:65:86:d5:80:
                    d9:93:e8:c9:da:0b:9c:6f:25:71:3c:c6:f6:77:bc:
                    e3:28:3b:de:9a:4f:d5:07:d9:4b:55:5d:79:d0:3c:
                    e4:52:fc:fb:25:84:c1:b2:9d:e7:cc:2c:cb:a3:9f:
                    ef:e3:30:f5:e6:26:bb:03:30:10:15:dc:b3:ff:e6:
                    54:00:98:9c:13:18:90:ee:62:b2:52:fb:7f:26:c0:
                    ca:eb:b3:1b:8a:cd:13:1b:a7:37:a8:25:1d:b0:b4:
                    39:ca:cc:79:f7:cf:43:11:e1:2d:e6:96:b3:aa:19:
                    e0:f2:e5:b7:d9:c8:6f:b8:16:ff:eb:f7:4f:6f:09:
                    9b:f5:09:3d:8d:bb:79:85:14:b9:c1:c2:0c:92:1a:
                    6c:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                64:B1:E8:1F:F9:DD:D7:C3:34:3A:47:78:24:B1:4B:B4:DC:00:09:94
            X509v3 Authority Key Identifier:
                keyid:20:20:79:D6:C9:FE:07:BF:18:62:21:D1:A9:98:27:CB:F6:B1:22:AE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9178B2B/BFDD222E3C4411EAAEE6F70AC4F9AE02/ICB51sn-B78YYiHRqZgny_axIq4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ICB51sn-B78YYiHRqZgny_axIq4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9178B2B/BFDD222E3C4411EAAEE6F70AC4F9AE02/EE611404E51B11EF98150C30C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.115.27.0/24

    Signature Algorithm: sha256WithRSAEncryption
         3a:10:5a:66:19:49:48:3a:79:13:fb:c4:3b:39:7f:63:fa:f2:
         87:98:fd:0d:1b:92:78:3d:79:f8:f9:ad:63:f0:4b:15:ba:e3:
         08:3e:3d:e2:8a:0a:22:ea:74:28:6c:54:53:b3:ef:48:1f:76:
         a3:bc:64:03:b3:9a:56:c5:54:86:75:3b:ca:6e:e9:ee:2a:23:
         a6:0d:ab:b4:fd:4f:f6:4d:2d:54:b6:2e:fd:0c:0c:89:f3:d0:
         da:7c:5c:47:d3:ba:83:2f:c3:5c:f8:68:19:4d:de:11:7f:c2:
         b1:be:46:26:0d:f1:cc:6f:85:02:19:4f:ca:c1:2c:0e:dc:9c:
         9e:3d:7b:40:1f:fe:81:52:d8:a6:e4:70:33:09:8d:bf:c6:86:
         76:5a:cf:4c:a6:e7:a1:50:53:fe:bb:30:ed:02:f8:8e:ae:40:
         47:fe:8c:0b:c6:29:aa:e8:e1:01:8b:6a:ab:4a:61:0d:fd:95:
         74:66:60:a4:e8:2f:de:fb:02:b0:22:96:04:cc:97:1c:f1:66:
         de:c4:7b:2e:cc:98:12:96:e1:08:1f:e9:51:66:10:04:b7:4e:
         fd:a8:0d:de:58:d1:38:fc:56:de:d4:02:34:ae:f2:53:6c:0d:
         f3:2c:91:50:c5:74:ba:72:d5:ea:a8:36:8d:83:99:87:24:24:
         0b:58:8d:57
-----BEGIN CERTIFICATE-----
MIIFcTCCBFmgAwIBAgICC0UwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NzhCMkIxMTAvBgNVBAUTKDIwMjA3OUQ2QzlGRTA3QkYxODYyMjFEMUE5OTgyN0NC
RjZCMTIyQUUwHhcNMjUwNTA4MTk1NDM3WhcNMjYwNzMwMDAwMDAwWjAYMRYwFAYD
VQQDEw02ODFkMGJmYy0wYzMwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA9Oya4FIFcaBei6cRrmghhF50BG24cdlBYe8dfmBofddi/LR0/y4LeMEp4tx7
PsNe3tQVrGZCQjCSIxK3R1EqZkhI1F9IXxtB1AW+DOhULJca7C+4KMrmfDW2mwhk
aH3Akq6w1nUFH/Mpu3+bezjEDn6072WG1YDZk+jJ2gucbyVxPMb2d7zjKDvemk/V
B9lLVV150DzkUvz7JYTBsp3nzCzLo5/v4zD15ia7AzAQFdyz/+ZUAJicExiQ7mKy
Uvt/JsDK67Mbis0TG6c3qCUdsLQ5ysx5989DEeEt5pazqhng8uW32chvuBb/6/dP
bwmb9Qk9jbt5hRS5wcIMkhpsSQIDAQABo4IClTCCApEwHQYDVR0OBBYEFGSx6B/5
3dfDNDpHeCSxS7TcAAmUMB8GA1UdIwQYMBaAFCAgedbJ/ge/GGIh0amYJ8v2sSKu
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3OEIyQi9CRkREMjIyRTND
NDQxMUVBQUVFNkY3MEFDNEY5QUUwMi9JQ0I1MXNuLUI3OFlZaUhScVpnbnlfYXhJ
cTQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0lDQjUxc24tQjc4WVlpSFJxWmdueV9heElxNC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
NzhCMkIvQkZERDIyMkUzQzQ0MTFFQUFFRTZGNzBBQzRGOUFFMDIvRUU2MTE0MDRF
NTFCMTFFRjk4MTUwQzMwQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E
EDAOMAwEAgABMAYDBAAtcxswDQYJKoZIhvcNAQELBQADggEBADoQWmYZSUg6eRP7
xDs5f2P68oeY/Q0bkng9efj5rWPwSxW64wg+PeKKCiLqdChsVFOz70gfdqO8ZAOz
mlbFVIZ1O8pu6e4qI6YNq7T9T/ZNLVS2Lv0MDInz0Np8XEfTuoMvw1z4aBlN3hF/
wrG+RiYN8cxvhQIZT8rBLA7cnJ49e0Af/oFS2KbkcDMJjb/GhnZaz0ym56FQU/67
MO0C+I6uQEf+jAvGKaro4QGLaqtKYQ39lXRmYKToL977ArAilgTMlxzxZt7Eey7M
mBKW4Qgf6VFmEAS3Tv2oDd5Y0Tj8Vt7UAjSu8lNsDfMskVDFdLpy1eqoNo2DmYck
JAtYjVc=
-----END CERTIFICATE-----
Generated at Tue May 13 23:05:44 2025 by rpki-client