Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91AE108/E3B046CCD01C11ECB354AF24C4F9AE02/2DED8B66D02011ECB021972BC4F9AE02.roa
File:                     2DED8B66D02011ECB021972BC4F9AE02.roa (raw, json)
Hash identifier:          ICAm0K0jbIgavAr0EQMMjLaOL/gZji3RATFqBqpQADM=
Subject key identifier:   5E:A8:99:AD:0B:82:82:0B:76:C5:95:26:75:6C:16:E5:D2:37:10:02
Certificate issuer:       /CN=A91AE108/serialNumber=02BB97FD8B1F620E02A1E2CADB59D656F01ADA45
Certificate serial:       0318
Authority key identifier: 02:BB:97:FD:8B:1F:62:0E:02:A1:E2:CA:DB:59:D6:56:F0:1A:DA:45
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AruX_YsfYg4CoeLK21nWVvAa2kU.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91AE108/E3B046CCD01C11ECB354AF24C4F9AE02/2DED8B66D02011ECB021972BC4F9AE02.roa
Signing time:             Wed 07 May 2025 01:08:09 +0000
ROA not before:           Wed 07 May 2025 01:08:09 +0000
ROA not after:            Thu 30 Jul 2026 00:00:00 +0000
asID:                     58606
IP address blocks:        203.175.179.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91AE108/E3B046CCD01C11ECB354AF24C4F9AE02/AruX_YsfYg4CoeLK21nWVvAa2kU.crl
                          rsync://rpki.apnic.net/member_repository/A91AE108/E3B046CCD01C11ECB354AF24C4F9AE02/AruX_YsfYg4CoeLK21nWVvAa2kU.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AruX_YsfYg4CoeLK21nWVvAa2kU.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 20 May 2025 01:00:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 792 (0x318)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91AE108, serialNumber=02BB97FD8B1F620E02A1E2CADB59D656F01ADA45
        Validity
            Not Before: May  7 01:08:09 2025 GMT
            Not After : Jul 30 00:00:00 2026 GMT
        Subject: CN=681ab278-9967
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:27:18:9a:0e:4e:6a:38:23:ff:8c:0e:c1:44:
                    00:38:4b:34:bf:83:2a:13:35:00:4c:7b:9b:6b:5e:
                    f0:c4:8f:58:7d:42:aa:80:21:92:58:af:96:e6:89:
                    4c:87:8f:46:7d:2e:b3:e3:e5:9b:74:f1:a9:f9:5e:
                    e9:a7:f8:57:f4:e8:f2:76:77:5e:a1:bd:d4:a2:a3:
                    92:f2:d5:c5:cd:5f:c9:07:15:b9:61:f5:ea:51:7a:
                    36:ba:14:8f:da:1d:bd:7b:00:24:96:f8:71:e2:aa:
                    cb:7b:63:88:d3:ae:c3:ba:32:94:13:35:2d:f2:8c:
                    a5:77:db:7a:90:bb:00:10:e7:f4:6c:76:5c:9a:5d:
                    8b:07:b7:25:5c:34:cf:93:91:84:55:6e:15:96:3d:
                    76:96:8c:f5:c4:2a:6c:de:0e:aa:bb:fd:f0:7a:dd:
                    dd:51:20:3a:d6:7c:68:cd:2e:22:80:cb:a8:24:be:
                    f2:d5:fd:17:97:5f:57:74:15:05:da:d9:cb:e3:17:
                    b3:48:da:f6:25:8c:56:00:99:15:4e:5f:31:b2:57:
                    2f:c3:f8:f6:6e:c6:f5:ef:10:cb:cb:63:98:4d:e1:
                    e7:b0:44:f4:3e:57:a0:d1:5f:b5:48:fa:cf:5d:a6:
                    40:b6:98:0f:02:ec:27:af:2f:ee:26:60:37:42:ec:
                    4e:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5E:A8:99:AD:0B:82:82:0B:76:C5:95:26:75:6C:16:E5:D2:37:10:02
            X509v3 Authority Key Identifier:
                keyid:02:BB:97:FD:8B:1F:62:0E:02:A1:E2:CA:DB:59:D6:56:F0:1A:DA:45

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91AE108/E3B046CCD01C11ECB354AF24C4F9AE02/AruX_YsfYg4CoeLK21nWVvAa2kU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AruX_YsfYg4CoeLK21nWVvAa2kU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AE108/E3B046CCD01C11ECB354AF24C4F9AE02/2DED8B66D02011ECB021972BC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  203.175.179.0/24

    Signature Algorithm: sha256WithRSAEncryption
         59:b4:3f:38:12:65:a4:06:09:c1:23:a1:43:df:7f:c6:31:38:
         4a:f0:bc:10:bb:a3:ad:5b:bf:43:fa:0b:4f:b2:0e:cf:9d:05:
         79:2a:b3:33:16:d7:8c:59:94:70:95:04:23:cf:05:16:d9:ea:
         bb:24:ca:67:c3:e3:48:a1:a4:71:67:5a:e0:96:5b:3a:c5:63:
         08:05:01:e6:81:17:aa:f9:a6:7e:d6:90:1a:c1:dc:41:d1:96:
         c9:a0:48:35:a9:0a:7a:84:88:26:5c:ba:32:fa:5e:94:ef:c6:
         07:d4:12:63:4a:24:c8:e0:bc:d9:4a:74:69:e6:de:c2:3c:5e:
         00:b3:08:e6:67:f5:52:6d:f0:6e:40:5e:ce:2f:28:15:ca:c6:
         67:01:28:c7:1d:10:70:0a:04:6a:fc:d7:c8:83:3d:dc:f9:00:
         1c:e1:6f:28:87:f2:79:26:b0:d9:1d:d7:ba:df:4e:91:31:47:
         e9:fd:ec:bc:85:85:49:87:4e:39:30:90:c7:f0:83:f9:63:19:
         84:ba:17:87:41:aa:e5:89:ed:3d:62:03:8b:81:ae:c9:9b:d3:
         e6:b1:b8:c4:66:02:5a:8b:2e:75:d7:1e:57:92:b7:c7:66:5e:
         6d:78:22:0e:c7:04:3e:c9:66:49:24:e5:b8:24:57:05:87:37:
         80:b7:05:39
-----BEGIN CERTIFICATE-----
MIIFcTCCBFmgAwIBAgICAxgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QUUxMDgxMTAvBgNVBAUTKDAyQkI5N0ZEOEIxRjYyMEUwMkExRTJDQURCNTlENjU2
RjAxQURBNDUwHhcNMjUwNTA3MDEwODA5WhcNMjYwNzMwMDAwMDAwWjAYMRYwFAYD
VQQDEw02ODFhYjI3OC05OTY3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAyScYmg5Oajgj/4wOwUQAOEs0v4MqEzUATHuba17wxI9YfUKqgCGSWK+W5olM
h49GfS6z4+WbdPGp+V7pp/hX9Ojydndeob3UoqOS8tXFzV/JBxW5YfXqUXo2uhSP
2h29ewAklvhx4qrLe2OI067DujKUEzUt8oyld9t6kLsAEOf0bHZcml2LB7clXDTP
k5GEVW4Vlj12loz1xCps3g6qu/3wet3dUSA61nxozS4igMuoJL7y1f0Xl19XdBUF
2tnL4xezSNr2JYxWAJkVTl8xslcvw/j2bsb17xDLy2OYTeHnsET0Pleg0V+1SPrP
XaZAtpgPAuwnry/uJmA3QuxO1QIDAQABo4IClTCCApEwHQYDVR0OBBYEFF6oma0L
goILdsWVJnVsFuXSNxACMB8GA1UdIwQYMBaAFAK7l/2LH2IOAqHiyttZ1lbwGtpF
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBRTEwOC9FM0IwNDZDQ0Qw
MUMxMUVDQjM1NEFGMjRDNEY5QUUwMi9BcnVYX1lzZllnNENvZUxLMjFuV1Z2QWEy
a1UuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0FydVhfWXNmWWc0Q29lTEsyMW5XVnZBYTJrVS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
QUUxMDgvRTNCMDQ2Q0NEMDFDMTFFQ0IzNTRBRjI0QzRGOUFFMDIvMkRFRDhCNjZE
MDIwMTFFQ0IwMjE5NzJCQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E
EDAOMAwEAgABMAYDBADLr7MwDQYJKoZIhvcNAQELBQADggEBAFm0PzgSZaQGCcEj
oUPff8YxOErwvBC7o61bv0P6C0+yDs+dBXkqszMW14xZlHCVBCPPBRbZ6rskymfD
40ihpHFnWuCWWzrFYwgFAeaBF6r5pn7WkBrB3EHRlsmgSDWpCnqEiCZcujL6XpTv
xgfUEmNKJMjgvNlKdGnm3sI8XgCzCOZn9VJt8G5AXs4vKBXKxmcBKMcdEHAKBGr8
18iDPdz5ABzhbyiH8nkmsNkd17rfTpExR+n97LyFhUmHTjkwkMfwg/ljGYS6F4dB
quWJ7T1iA4uBrsmb0+axuMRmAlqLLnXXHleSt8dmXm14Ig7HBD7JZkkk5bgkVwWH
N4C3BTk=
-----END CERTIFICATE-----
Generated at Tue May 13 20:33:48 2025 by rpki-client