Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91955C8/9CD3E8F6FF5811E2BB4B2E3F5911EA32/AF6D4D44B73311EC8392922AC4F9AE02.roa
File:                     AF6D4D44B73311EC8392922AC4F9AE02.roa (raw, json)
Hash identifier:          U9tQePLnZPrszhMNvs/YV6XDVfsxC3+GK3UJVlQgINc=
Subject key identifier:   36:CE:19:51:50:4C:B0:C6:12:E7:30:00:61:3B:73:60:90:C0:C1:A7
Certificate issuer:       /CN=A91955C8/serialNumber=C6673D3648F43F4674F5F5EBFCBFA31BB964F64B
Certificate serial:       309C
Authority key identifier: C6:67:3D:36:48:F4:3F:46:74:F5:F5:EB:FC:BF:A3:1B:B9:64:F6:4B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xmc9Nkj0P0Z09fXr_L-jG7lk9ks.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91955C8/9CD3E8F6FF5811E2BB4B2E3F5911EA32/AF6D4D44B73311EC8392922AC4F9AE02.roa
Signing time:             Wed 30 Apr 2025 15:52:53 +0000
ROA not before:           Wed 30 Apr 2025 15:52:53 +0000
ROA not after:            Wed 01 Jul 2026 00:00:00 +0000
asID:                     4780
IP address blocks:        180.87.78.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91955C8/9CD3E8F6FF5811E2BB4B2E3F5911EA32/xmc9Nkj0P0Z09fXr_L-jG7lk9ks.crl
                          rsync://rpki.apnic.net/member_repository/A91955C8/9CD3E8F6FF5811E2BB4B2E3F5911EA32/xmc9Nkj0P0Z09fXr_L-jG7lk9ks.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xmc9Nkj0P0Z09fXr_L-jG7lk9ks.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 19 May 2025 15:26:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 12444 (0x309c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91955C8, serialNumber=C6673D3648F43F4674F5F5EBFCBFA31BB964F64B
        Validity
            Not Before: Apr 30 15:52:53 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=68124754-2028
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:aa:27:fd:b5:25:5c:ac:73:73:06:cb:70:15:
                    85:6f:5a:c2:2a:7a:74:53:44:5c:7c:58:4f:17:8a:
                    9e:12:9f:d6:33:06:20:e6:74:62:96:bd:45:4c:33:
                    7a:c9:06:b1:04:68:d8:aa:95:c6:9b:72:a6:91:cd:
                    4e:71:dd:8e:e2:f4:fe:a1:8d:0a:08:3c:3d:cc:84:
                    bf:6c:68:5b:b9:2e:28:8a:e6:5a:cd:87:db:31:0c:
                    ad:81:61:d6:50:ba:a0:03:92:fe:9a:bb:04:aa:bb:
                    58:e5:e4:8c:1e:3d:6d:39:81:bb:10:d9:49:79:e7:
                    79:d0:a8:b6:f7:fe:db:23:6c:5b:bd:69:8c:71:d5:
                    69:a8:03:2e:1d:2f:e4:1d:b7:3f:d3:3f:81:09:3d:
                    c4:83:93:e5:c7:1f:05:7c:e5:46:eb:3d:1e:4b:1d:
                    a3:67:6a:4f:df:36:e9:ba:2a:34:a1:c3:0a:d7:17:
                    82:12:f8:6c:c9:84:6c:a7:d4:2a:34:78:93:a6:45:
                    80:34:ac:22:7f:f8:35:44:8c:41:07:3f:a6:cf:df:
                    4a:dd:b4:50:d0:21:a3:ed:38:1b:f1:71:cf:01:36:
                    13:58:2c:1a:11:83:02:f8:e6:7e:17:27:62:dd:42:
                    7d:8b:99:3b:de:20:c4:97:11:09:39:69:b2:64:2d:
                    1e:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                36:CE:19:51:50:4C:B0:C6:12:E7:30:00:61:3B:73:60:90:C0:C1:A7
            X509v3 Authority Key Identifier:
                keyid:C6:67:3D:36:48:F4:3F:46:74:F5:F5:EB:FC:BF:A3:1B:B9:64:F6:4B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91955C8/9CD3E8F6FF5811E2BB4B2E3F5911EA32/xmc9Nkj0P0Z09fXr_L-jG7lk9ks.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xmc9Nkj0P0Z09fXr_L-jG7lk9ks.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91955C8/9CD3E8F6FF5811E2BB4B2E3F5911EA32/AF6D4D44B73311EC8392922AC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  180.87.78.0/24

    Signature Algorithm: sha256WithRSAEncryption
         50:f7:c5:ac:54:d2:91:6d:09:44:8a:ec:60:b7:f7:97:88:46:
         59:69:39:0c:f9:46:bb:c8:99:5b:7a:3f:86:46:d9:b5:f5:ba:
         23:a1:41:77:12:3b:08:e4:ec:ae:01:5e:76:3a:9d:21:69:13:
         05:1d:60:e4:63:b9:35:9c:6a:57:f4:d7:be:bf:e1:5c:50:46:
         34:68:f2:31:c3:47:f1:42:3c:1b:22:f1:39:11:fc:0f:0e:62:
         6d:24:a6:ec:6d:6c:51:a4:d7:26:f7:97:f7:26:86:4b:0f:05:
         c4:8e:81:dd:55:24:53:80:ba:05:4d:71:68:45:7a:fc:6d:6f:
         9b:2d:3e:fc:7f:87:b2:8e:64:03:7e:2f:52:1d:36:05:8a:b4:
         c3:bf:f3:41:1b:d4:70:72:b3:d5:dd:27:87:8a:67:71:fb:ed:
         df:bb:d8:6e:1b:b1:67:92:6d:55:1b:ea:fe:7c:e3:8b:a0:03:
         11:9c:b4:ec:4b:85:11:06:34:c3:de:4f:88:ef:4b:20:5f:dc:
         1a:a7:ed:4c:99:89:87:1c:26:b0:2a:16:fc:9d:90:da:b0:60:
         f5:75:0e:76:18:37:bf:0a:a4:99:3b:38:2b:9a:41:12:bc:74:
         dd:db:b0:5e:a4:4d:90:1c:34:cf:6a:98:21:62:c0:28:d3:59:
         2f:ec:4d:5f
-----BEGIN CERTIFICATE-----
MIIFcTCCBFmgAwIBAgICMJwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
OTU1QzgxMTAvBgNVBAUTKEM2NjczRDM2NDhGNDNGNDY3NEY1RjVFQkZDQkZBMzFC
Qjk2NEY2NEIwHhcNMjUwNDMwMTU1MjUzWhcNMjYwNzAxMDAwMDAwWjAYMRYwFAYD
VQQDEw02ODEyNDc1NC0yMDI4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEArqon/bUlXKxzcwbLcBWFb1rCKnp0U0RcfFhPF4qeEp/WMwYg5nRilr1FTDN6
yQaxBGjYqpXGm3Kmkc1Ocd2O4vT+oY0KCDw9zIS/bGhbuS4oiuZazYfbMQytgWHW
ULqgA5L+mrsEqrtY5eSMHj1tOYG7ENlJeed50Ki29/7bI2xbvWmMcdVpqAMuHS/k
Hbc/0z+BCT3Eg5Plxx8FfOVG6z0eSx2jZ2pP3zbpuio0ocMK1xeCEvhsyYRsp9Qq
NHiTpkWANKwif/g1RIxBBz+mz99K3bRQ0CGj7Tgb8XHPATYTWCwaEYMC+OZ+Fydi
3UJ9i5k73iDElxEJOWmyZC0ekQIDAQABo4IClTCCApEwHQYDVR0OBBYEFDbOGVFQ
TLDGEucwAGE7c2CQwMGnMB8GA1UdIwQYMBaAFMZnPTZI9D9GdPX16/y/oxu5ZPZL
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5NTVDOC85Q0QzRThGNkZG
NTgxMUUyQkI0QjJFM0Y1OTExRUEzMi94bWM5TmtqMFAwWjA5ZlhyX0wtakc3bGs5
a3MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL3htYzlOa2owUDBaMDlmWHJfTC1qRzdsazlrcy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
OTU1QzgvOUNEM0U4RjZGRjU4MTFFMkJCNEIyRTNGNTkxMUVBMzIvQUY2RDRENDRC
NzMzMTFFQzgzOTI5MjJBQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E
EDAOMAwEAgABMAYDBAC0V04wDQYJKoZIhvcNAQELBQADggEBAFD3xaxU0pFtCUSK
7GC395eIRllpOQz5RrvImVt6P4ZG2bX1uiOhQXcSOwjk7K4BXnY6nSFpEwUdYORj
uTWcalf0176/4VxQRjRo8jHDR/FCPBsi8TkR/A8OYm0kpuxtbFGk1yb3l/cmhksP
BcSOgd1VJFOAugVNcWhFevxtb5stPvx/h7KOZAN+L1IdNgWKtMO/80Eb1HBys9Xd
J4eKZ3H77d+72G4bsWeSbVUb6v5844ugAxGctOxLhREGNMPeT4jvSyBf3Bqn7UyZ
iYccJrAqFvydkNqwYPV1DnYYN78KpJk7OCuaQRK8dN3bsF6kTZAcNM9qmCFiwCjT
WS/sTV8=
-----END CERTIFICATE-----
Generated at Tue May 13 21:41:26 2025 by rpki-client