Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A917F259/A501DEC4AEB211E994932140C4F9AE02/E47D0082AEB311E9922EDD41C4F9AE02.roa
File:                     E47D0082AEB311E9922EDD41C4F9AE02.roa (raw, json)
Hash identifier:          aiQgD71KIHf3EulghLpV7U2on7ornTtSdk1QL8F6cWM=
Subject key identifier:   F7:CB:91:30:5E:AF:F0:B4:2A:F8:B2:3F:A9:7B:31:76:98:8D:DB:26
Certificate issuer:       /CN=A917F259/serialNumber=7FC5941AC872C0A3A0DB1D2F59CFD98D21986F54
Certificate serial:       0E0F
Authority key identifier: 7F:C5:94:1A:C8:72:C0:A3:A0:DB:1D:2F:59:CF:D9:8D:21:98:6F:54
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/f8WUGshywKOg2x0vWc_ZjSGYb1Q.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A917F259/A501DEC4AEB211E994932140C4F9AE02/E47D0082AEB311E9922EDD41C4F9AE02.roa
Signing time:             Fri 20 Jun 2025 17:52:10 +0000
ROA not before:           Fri 20 Jun 2025 17:52:10 +0000
ROA not after:            Thu 30 Jul 2026 00:00:00 +0000
asID:                     135411
IP address blocks:        45.249.100.0/24 maxlen: 24
                          45.249.101.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A917F259/A501DEC4AEB211E994932140C4F9AE02/f8WUGshywKOg2x0vWc_ZjSGYb1Q.crl
                          rsync://rpki.apnic.net/member_repository/A917F259/A501DEC4AEB211E994932140C4F9AE02/f8WUGshywKOg2x0vWc_ZjSGYb1Q.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/f8WUGshywKOg2x0vWc_ZjSGYb1Q.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 09 Jul 2025 18:02:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3599 (0xe0f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A917F259, serialNumber=7FC5941AC872C0A3A0DB1D2F59CFD98D21986F54
        Validity
            Not Before: Jun 20 17:52:10 2025 GMT
            Not After : Jul 30 00:00:00 2026 GMT
        Subject: CN=68559fca-44ec
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e2:cf:c2:17:6c:ae:9c:9b:2d:58:4c:18:f4:be:
                    2f:7a:2a:d6:b1:15:71:0f:2c:ab:6d:06:88:17:f1:
                    df:30:fe:60:bb:51:7d:b4:26:f4:8a:33:77:a5:22:
                    58:c9:a2:26:4c:47:b1:91:aa:c5:ce:4b:89:82:d6:
                    19:a4:71:33:c3:6d:7d:88:7e:b1:63:1f:a7:ef:e9:
                    40:f2:83:70:a8:ff:83:40:fb:90:4f:38:64:7a:f5:
                    fb:c2:f9:08:87:8a:0f:56:4b:f3:e7:bf:92:3a:f0:
                    ae:e7:8f:aa:1d:35:2a:e6:e1:36:f7:ce:80:3a:49:
                    bc:ad:9a:76:6d:91:47:33:d2:94:e6:93:0a:54:0b:
                    29:e3:f6:55:75:14:2a:0a:c1:31:51:60:41:fa:3c:
                    17:d0:a5:97:5e:8e:42:28:7a:cc:ed:65:15:dd:63:
                    39:75:34:aa:f0:79:e2:a8:99:84:d4:33:14:3b:18:
                    a3:3e:b3:5f:a6:1b:91:66:a7:35:27:29:09:59:95:
                    e3:99:0e:15:e3:f6:d8:08:c7:16:da:f6:99:95:2b:
                    4c:ea:80:e3:f0:10:7b:1f:76:dc:e1:b9:78:49:f1:
                    90:9d:a6:ea:7e:3c:b4:1f:9e:40:2d:e2:4d:cd:29:
                    34:27:58:c5:40:94:6a:df:b9:fe:cb:ff:17:d7:77:
                    cc:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F7:CB:91:30:5E:AF:F0:B4:2A:F8:B2:3F:A9:7B:31:76:98:8D:DB:26
            X509v3 Authority Key Identifier:
                keyid:7F:C5:94:1A:C8:72:C0:A3:A0:DB:1D:2F:59:CF:D9:8D:21:98:6F:54

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A917F259/A501DEC4AEB211E994932140C4F9AE02/f8WUGshywKOg2x0vWc_ZjSGYb1Q.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/f8WUGshywKOg2x0vWc_ZjSGYb1Q.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917F259/A501DEC4AEB211E994932140C4F9AE02/E47D0082AEB311E9922EDD41C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.249.100.0/23

    Signature Algorithm: sha256WithRSAEncryption
         44:37:c5:8d:2b:26:f3:78:db:62:31:37:f0:4d:74:37:20:df:
         11:fb:7d:71:4e:d5:08:58:ab:1f:fd:e7:e9:88:28:11:85:c4:
         83:8b:47:ce:ba:44:c0:a4:18:88:f4:6c:dc:63:40:4e:b7:e3:
         14:92:96:26:41:1d:49:27:dd:c9:32:72:63:05:5a:ce:e4:ba:
         f2:fe:ea:8f:69:41:f9:ce:d0:8c:99:ed:db:aa:30:67:53:91:
         77:17:bb:0b:a6:4d:6f:38:98:14:da:6d:99:31:e5:a5:e7:a6:
         d1:05:d0:da:51:7d:e7:32:d5:e2:4d:d7:ee:7b:88:a2:d4:72:
         e3:ad:06:78:35:03:be:f3:8b:e4:f4:3b:78:f7:d4:b1:85:93:
         c9:22:a8:3d:e9:b8:34:47:8a:b4:c9:1b:03:ec:4f:9d:56:c1:
         b7:96:2d:27:47:5b:d4:18:d2:0a:29:3e:27:83:6c:51:10:c5:
         7c:53:5c:65:a9:64:e1:29:cd:73:f1:3a:1f:54:ac:da:12:5e:
         b8:19:65:2a:4b:f4:f1:1e:61:65:0f:79:24:8e:c7:ab:cf:27:
         83:61:85:0a:ac:ff:b9:64:cd:73:35:d6:e8:65:16:a7:5c:52:
         50:56:99:10:d0:9e:67:26:07:ea:3b:8c:d5:66:ec:cc:46:db:
         e6:bc:a1:21
-----BEGIN CERTIFICATE-----
MIIFcTCCBFmgAwIBAgICDg8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
N0YyNTkxMTAvBgNVBAUTKDdGQzU5NDFBQzg3MkMwQTNBMERCMUQyRjU5Q0ZEOThE
MjE5ODZGNTQwHhcNMjUwNjIwMTc1MjEwWhcNMjYwNzMwMDAwMDAwWjAYMRYwFAYD
VQQDEw02ODU1OWZjYS00NGVjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA4s/CF2yunJstWEwY9L4veirWsRVxDyyrbQaIF/HfMP5gu1F9tCb0ijN3pSJY
yaImTEexkarFzkuJgtYZpHEzw219iH6xYx+n7+lA8oNwqP+DQPuQTzhkevX7wvkI
h4oPVkvz57+SOvCu54+qHTUq5uE2986AOkm8rZp2bZFHM9KU5pMKVAsp4/ZVdRQq
CsExUWBB+jwX0KWXXo5CKHrM7WUV3WM5dTSq8HniqJmE1DMUOxijPrNfphuRZqc1
JykJWZXjmQ4V4/bYCMcW2vaZlStM6oDj8BB7H3bc4bl4SfGQnabqfjy0H55ALeJN
zSk0J1jFQJRq37n+y/8X13fM4wIDAQABo4IClTCCApEwHQYDVR0OBBYEFPfLkTBe
r/C0KviyP6l7MXaYjdsmMB8GA1UdIwQYMBaAFH/FlBrIcsCjoNsdL1nP2Y0hmG9U
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3RjI1OS9BNTAxREVDNEFF
QjIxMUU5OTQ5MzIxNDBDNEY5QUUwMi9mOFdVR3NoeXdLT2cyeDB2V2NfWmpTR1li
MVEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2Y4V1VHc2h5d0tPZzJ4MHZXY19aalNHWWIxUS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
N0YyNTkvQTUwMURFQzRBRUIyMTFFOTk0OTMyMTQwQzRGOUFFMDIvRTQ3RDAwODJB
RUIzMTFFOTkyMkVERDQxQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E
EDAOMAwEAgABMAYDBAEt+WQwDQYJKoZIhvcNAQELBQADggEBAEQ3xY0rJvN422Ix
N/BNdDcg3xH7fXFO1QhYqx/95+mIKBGFxIOLR866RMCkGIj0bNxjQE634xSSliZB
HUkn3ckycmMFWs7kuvL+6o9pQfnO0IyZ7duqMGdTkXcXuwumTW84mBTabZkx5aXn
ptEF0NpRfecy1eJN1+57iKLUcuOtBng1A77zi+T0O3j31LGFk8kiqD3puDRHirTJ
GwPsT51WwbeWLSdHW9QY0gopPieDbFEQxXxTXGWpZOEpzXPxOh9UrNoSXrgZZSpL
9PEeYWUPeSSOx6vPJ4NhhQqs/7lkzXM11uhlFqdcUlBWmRDQnmcmB+o7jNVm7MxG
2+a8oSE=
-----END CERTIFICATE-----
Generated at Thu Jul 3 10:21:18 2025 by rpki-client