Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91A4B39/95074A0AAF5611EEA655B581C4F9AE02/EA0CC00254CD11F0902CC485C4F9AE02.roa
File:                     EA0CC00254CD11F0902CC485C4F9AE02.roa (raw, json)
Hash identifier:          8AIRwy08mvaM21dUkcsyqG0ecVqcTkS8g15wAVG3r38=
Subject key identifier:   05:BA:77:EF:B9:FD:48:BA:87:D3:75:E1:23:E2:A6:D8:07:76:14:45
Certificate issuer:       /CN=A91A4B39/serialNumber=BEFFBEF8EFC5027C34DFF704C79FB2812A71331E
Certificate serial:       013B
Authority key identifier: BE:FF:BE:F8:EF:C5:02:7C:34:DF:F7:04:C7:9F:B2:81:2A:71:33:1E
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/vv---O_FAnw03_cEx5-ygSpxMx4.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91A4B39/95074A0AAF5611EEA655B581C4F9AE02/EA0CC00254CD11F0902CC485C4F9AE02.roa
Signing time:             Sun 29 Jun 2025 09:46:22 +0000
ROA not before:           Sun 29 Jun 2025 09:46:22 +0000
ROA not after:            Fri 01 May 2026 00:00:00 +0000
asID:                     147006
IP address blocks:        157.10.135.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91A4B39/95074A0AAF5611EEA655B581C4F9AE02/vv---O_FAnw03_cEx5-ygSpxMx4.crl
                          rsync://rpki.apnic.net/member_repository/A91A4B39/95074A0AAF5611EEA655B581C4F9AE02/vv---O_FAnw03_cEx5-ygSpxMx4.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/vv---O_FAnw03_cEx5-ygSpxMx4.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 08 Jul 2025 05:20:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 315 (0x13b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A4B39, serialNumber=BEFFBEF8EFC5027C34DFF704C79FB2812A71331E
        Validity
            Not Before: Jun 29 09:46:22 2025 GMT
            Not After : May  1 00:00:00 2026 GMT
        Subject: CN=68610b6e-7908
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:63:d4:a4:55:92:80:4e:0e:2e:53:01:5c:9b:
                    69:c9:20:73:11:0a:d9:b6:b1:21:17:f2:29:a4:2a:
                    32:77:a4:6b:16:8a:6f:ae:ab:fe:b2:aa:1c:68:ab:
                    4e:cc:dc:39:22:b4:13:04:28:f7:8e:e2:62:42:69:
                    9b:35:4b:65:d9:34:0f:fa:fe:49:3e:28:be:f2:6b:
                    a7:d0:87:8c:fa:fb:dd:46:da:fd:15:51:c1:c4:c9:
                    cc:3a:3a:c3:f1:f3:8b:b3:f4:63:e7:dd:0c:75:51:
                    2e:f6:a8:4e:2a:bb:9f:3a:39:ea:49:1f:75:da:c5:
                    b2:c2:b5:05:03:a4:ab:ad:c5:45:ac:27:9b:65:b5:
                    e2:c6:2b:87:03:a0:70:6f:8b:40:ef:64:8e:11:36:
                    3e:81:ce:42:1d:69:28:1e:a9:75:00:22:08:9f:d4:
                    a0:a9:23:5a:8e:36:97:ae:d0:aa:74:78:11:0c:eb:
                    97:6d:3d:a9:4a:d0:e7:c1:33:83:d7:7f:0f:f4:b1:
                    dc:0d:76:a8:6c:a5:ae:e3:52:06:29:ff:47:d3:7f:
                    20:0a:ad:ca:a6:4c:59:af:3d:a7:1e:7a:08:9f:c0:
                    ce:3a:0d:c7:d9:09:c7:0a:94:2c:c4:4a:f5:63:11:
                    ef:10:84:ec:7b:17:25:c8:44:f2:00:32:95:f8:a8:
                    6e:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                05:BA:77:EF:B9:FD:48:BA:87:D3:75:E1:23:E2:A6:D8:07:76:14:45
            X509v3 Authority Key Identifier:
                keyid:BE:FF:BE:F8:EF:C5:02:7C:34:DF:F7:04:C7:9F:B2:81:2A:71:33:1E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91A4B39/95074A0AAF5611EEA655B581C4F9AE02/vv---O_FAnw03_cEx5-ygSpxMx4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/vv---O_FAnw03_cEx5-ygSpxMx4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A4B39/95074A0AAF5611EEA655B581C4F9AE02/EA0CC00254CD11F0902CC485C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  157.10.135.0/24

    Signature Algorithm: sha256WithRSAEncryption
         c4:8b:f8:54:9d:3a:68:be:f6:c9:48:b7:4d:87:ae:52:66:e7:
         08:7d:98:0a:2a:24:c4:1b:64:9a:bc:da:97:37:d7:52:2e:12:
         70:62:c9:ae:f7:b3:f6:01:97:91:2c:e1:65:89:0b:c4:bb:63:
         80:a8:bf:fd:9a:74:1d:80:a8:c0:49:a1:05:37:8c:9a:b5:d3:
         52:7a:2b:85:75:b2:bb:1b:5b:4e:1a:d8:41:50:c2:ec:2b:5b:
         e5:4c:03:3d:dd:b9:1c:2e:75:46:c7:4e:69:f0:b4:69:dd:d3:
         6d:69:2c:93:63:9e:6c:e0:bf:0f:5d:a0:9b:bb:18:6e:88:b4:
         2e:10:10:f1:10:1b:9f:eb:4d:13:00:8a:83:fc:a9:82:66:19:
         c2:c7:c4:14:8d:0f:48:23:45:69:6b:a8:57:10:26:8e:5c:ee:
         c9:70:76:67:fe:b1:cb:d6:6f:3e:54:a5:4f:53:ba:3d:b6:c3:
         95:2f:95:50:f2:53:dd:a7:b1:54:b1:74:40:25:88:41:f2:39:
         22:29:78:d5:a4:53:25:c3:e4:06:e2:b1:66:35:ab:f6:57:7a:
         cd:08:83:f9:7b:2e:6f:00:fe:ae:2c:f2:25:41:3b:c3:9a:3e:
         88:4b:d4:d3:c5:8d:37:71:e5:80:1d:f7:4e:22:28:b5:b1:d0:
         1a:11:1c:2f
-----BEGIN CERTIFICATE-----
MIIFcTCCBFmgAwIBAgICATswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QTRCMzkxMTAvBgNVBAUTKEJFRkZCRUY4RUZDNTAyN0MzNERGRjcwNEM3OUZCMjgx
MkE3MTMzMUUwHhcNMjUwNjI5MDk0NjIyWhcNMjYwNTAxMDAwMDAwWjAYMRYwFAYD
VQQDEw02ODYxMGI2ZS03OTA4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAoWPUpFWSgE4OLlMBXJtpySBzEQrZtrEhF/IppCoyd6RrFopvrqv+sqocaKtO
zNw5IrQTBCj3juJiQmmbNUtl2TQP+v5JPii+8mun0IeM+vvdRtr9FVHBxMnMOjrD
8fOLs/Rj590MdVEu9qhOKrufOjnqSR912sWywrUFA6SrrcVFrCebZbXixiuHA6Bw
b4tA72SOETY+gc5CHWkoHql1ACIIn9SgqSNajjaXrtCqdHgRDOuXbT2pStDnwTOD
138P9LHcDXaobKWu41IGKf9H038gCq3KpkxZrz2nHnoIn8DOOg3H2QnHCpQsxEr1
YxHvEITsexclyETyADKV+KhuHQIDAQABo4IClTCCApEwHQYDVR0OBBYEFAW6d++5
/Ui6h9N14SPiptgHdhRFMB8GA1UdIwQYMBaAFL7/vvjvxQJ8NN/3BMefsoEqcTMe
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBNEIzOS85NTA3NEEwQUFG
NTYxMUVFQTY1NUI1ODFDNEY5QUUwMi92di0tLU9fRkFudzAzX2NFeDUteWdTcHhN
eDQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy
RkQxRkYyL3Z2LS0tT19GQW53MDNfY0V4NS15Z1NweE14NC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
QTRCMzkvOTUwNzRBMEFBRjU2MTFFRUE2NTVCNTgxQzRGOUFFMDIvRUEwQ0MwMDI1
NENEMTFGMDkwMkNDNDg1QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E
EDAOMAwEAgABMAYDBACdCocwDQYJKoZIhvcNAQELBQADggEBAMSL+FSdOmi+9slI
t02HrlJm5wh9mAoqJMQbZJq82pc311IuEnBiya73s/YBl5Es4WWJC8S7Y4Cov/2a
dB2AqMBJoQU3jJq101J6K4V1srsbW04a2EFQwuwrW+VMAz3duRwudUbHTmnwtGnd
021pLJNjnmzgvw9doJu7GG6ItC4QEPEQG5/rTRMAioP8qYJmGcLHxBSND0gjRWlr
qFcQJo5c7slwdmf+scvWbz5UpU9Tuj22w5UvlVDyU92nsVSxdEAliEHyOSIpeNWk
UyXD5AbisWY1q/ZXes0Ig/l7Lm8A/q4s8iVBO8OaPohL1NPFjTdx5YAd904iKLWx
0BoRHC8=
-----END CERTIFICATE-----
Generated at Thu Jul 3 06:12:34 2025 by rpki-client