Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A915370F/7346E8A2604911E2A307578D2979BB20/60DB91E48BEB11ED9A3CD825C4F9AE02.roa
File:                     60DB91E48BEB11ED9A3CD825C4F9AE02.roa (raw, json)
Hash identifier:          cHqxUZqTQHQkS9uClycnmDqyKizAF8Nm5ODi8+cgf8M=
Subject key identifier:   B8:4F:CB:4E:B3:24:96:06:1B:C3:C9:30:61:40:1E:F6:F1:08:02:7C
Certificate issuer:       /CN=A915370F/serialNumber=BB5B8156B037E5D22263EAC7F6A11C052FDF633F
Certificate serial:       3490
Authority key identifier: BB:5B:81:56:B0:37:E5:D2:22:63:EA:C7:F6:A1:1C:05:2F:DF:63:3F
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/u1uBVrA35dIiY-rH9qEcBS_fYz8.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A915370F/7346E8A2604911E2A307578D2979BB20/60DB91E48BEB11ED9A3CD825C4F9AE02.roa
Signing time:             Thu 20 Mar 2025 15:21:12 +0000
ROA not before:           Thu 20 Mar 2025 15:21:12 +0000
ROA not after:            Thu 28 May 2026 00:00:00 +0000
asID:                     4837
IP address blocks:        118.193.240.0/21 maxlen: 21

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A915370F/7346E8A2604911E2A307578D2979BB20/u1uBVrA35dIiY-rH9qEcBS_fYz8.crl
                          rsync://rpki.apnic.net/member_repository/A915370F/7346E8A2604911E2A307578D2979BB20/u1uBVrA35dIiY-rH9qEcBS_fYz8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/u1uBVrA35dIiY-rH9qEcBS_fYz8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 05 May 2025 15:27:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 13456 (0x3490)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A915370F, serialNumber=BB5B8156B037E5D22263EAC7F6A11C052FDF633F
        Validity
            Not Before: Mar 20 15:21:12 2025 GMT
            Not After : May 28 00:00:00 2026 GMT
        Subject: CN=67dc3267-2c01
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:0e:e0:8d:d2:50:60:f2:2f:e9:7b:cc:a6:cb:
                    6b:8d:1d:3e:53:ac:32:b6:fc:c6:4a:b2:c7:b5:9d:
                    69:ec:40:cc:c0:56:39:eb:df:92:0e:82:61:eb:a8:
                    87:05:28:ab:2d:78:cc:d4:dd:f6:7c:23:b1:b6:68:
                    37:20:ef:0b:33:82:30:6c:8b:fb:a8:5c:90:04:fd:
                    1a:2d:26:bf:33:b7:37:1e:2a:28:11:5c:53:b7:91:
                    02:97:b9:f0:1f:1e:88:b9:cb:7a:4c:3a:10:1f:65:
                    0d:a3:d8:10:b3:48:d9:e5:ec:6b:73:76:be:cd:cc:
                    63:00:ba:11:c0:ce:44:3e:f0:3e:0e:1b:57:24:79:
                    ef:8c:84:e8:f1:75:b8:4a:36:73:f0:68:fd:e1:77:
                    c1:2c:85:7b:72:1f:23:b5:a1:bf:9d:8e:c4:3d:c7:
                    86:9d:84:9b:78:10:69:7f:9c:64:40:d9:70:68:b8:
                    b6:75:91:df:a5:bb:43:48:2f:c6:68:f6:a8:5b:06:
                    4f:11:61:e2:94:f8:cf:89:94:29:95:93:dd:58:9c:
                    f4:e0:61:80:17:31:00:b9:ce:41:95:ad:73:09:53:
                    1d:64:d4:89:ba:53:29:00:94:42:2e:87:94:4d:92:
                    39:ca:89:d9:cf:b9:09:76:15:63:40:53:d1:24:a4:
                    2a:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B8:4F:CB:4E:B3:24:96:06:1B:C3:C9:30:61:40:1E:F6:F1:08:02:7C
            X509v3 Authority Key Identifier:
                keyid:BB:5B:81:56:B0:37:E5:D2:22:63:EA:C7:F6:A1:1C:05:2F:DF:63:3F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A915370F/7346E8A2604911E2A307578D2979BB20/u1uBVrA35dIiY-rH9qEcBS_fYz8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/u1uBVrA35dIiY-rH9qEcBS_fYz8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915370F/7346E8A2604911E2A307578D2979BB20/60DB91E48BEB11ED9A3CD825C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  118.193.240.0/21

    Signature Algorithm: sha256WithRSAEncryption
         44:3d:7e:9e:b7:1f:bd:37:ec:07:04:87:fd:e7:fe:84:6b:6a:
         65:3d:cf:e2:5d:5e:e0:4c:f8:2d:fa:e0:51:c8:3b:21:a0:cc:
         da:12:8f:7e:99:3f:f2:8e:2d:da:66:d5:9f:2f:6a:27:c7:b0:
         4a:4e:92:b5:1c:5f:87:41:f4:79:67:22:6d:91:a1:a8:4a:ef:
         93:d2:db:09:75:81:a4:42:5d:66:66:ff:c7:3d:dc:ed:99:0b:
         75:55:1f:d5:5c:76:b8:d9:79:03:46:a1:f3:78:f2:e7:d4:45:
         45:39:e3:59:e4:8e:75:00:22:61:7b:eb:08:a3:ec:a2:48:af:
         6e:bf:81:3d:b8:49:07:27:bb:16:89:b4:33:21:8e:e2:16:63:
         d9:e5:c0:17:24:8d:b2:b8:3b:f6:42:41:4b:40:40:66:54:bb:
         8b:a5:48:4f:3c:50:67:6e:9d:eb:18:2f:45:1f:a1:97:97:ba:
         47:4e:ca:30:07:a0:d6:00:fe:79:a9:cf:dd:a6:96:f8:88:cc:
         33:de:6e:f0:98:b9:d2:b7:82:8a:f3:b0:1b:e7:80:65:70:06:
         9f:01:48:21:32:4b:50:4a:6d:8f:dd:c8:ee:3d:56:02:c1:ac:
         b4:4f:0a:1b:eb:5a:c7:0f:55:a8:3e:11:f7:6a:82:17:53:99:
         81:45:ea:21
-----BEGIN CERTIFICATE-----
MIIFcTCCBFmgAwIBAgICNJAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NTM3MEYxMTAvBgNVBAUTKEJCNUI4MTU2QjAzN0U1RDIyMjYzRUFDN0Y2QTExQzA1
MkZERjYzM0YwHhcNMjUwMzIwMTUyMTEyWhcNMjYwNTI4MDAwMDAwWjAYMRYwFAYD
VQQDEw02N2RjMzI2Ny0yYzAxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA1Q7gjdJQYPIv6XvMpstrjR0+U6wytvzGSrLHtZ1p7EDMwFY569+SDoJh66iH
BSirLXjM1N32fCOxtmg3IO8LM4IwbIv7qFyQBP0aLSa/M7c3HiooEVxTt5ECl7nw
Hx6Iuct6TDoQH2UNo9gQs0jZ5exrc3a+zcxjALoRwM5EPvA+DhtXJHnvjITo8XW4
SjZz8Gj94XfBLIV7ch8jtaG/nY7EPceGnYSbeBBpf5xkQNlwaLi2dZHfpbtDSC/G
aPaoWwZPEWHilPjPiZQplZPdWJz04GGAFzEAuc5Bla1zCVMdZNSJulMpAJRCLoeU
TZI5yonZz7kJdhVjQFPRJKQqLQIDAQABo4IClTCCApEwHQYDVR0OBBYEFLhPy06z
JJYGG8PJMGFAHvbxCAJ8MB8GA1UdIwQYMBaAFLtbgVawN+XSImPqx/ahHAUv32M/
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1MzcwRi83MzQ2RThBMjYw
NDkxMUUyQTMwNzU3OEQyOTc5QkIyMC91MXVCVnJBMzVkSWlZLXJIOXFFY0JTX2ZZ
ejguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL3UxdUJWckEzNWRJaVktckg5cUVjQlNfZll6OC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
NTM3MEYvNzM0NkU4QTI2MDQ5MTFFMkEzMDc1NzhEMjk3OUJCMjAvNjBEQjkxRTQ4
QkVCMTFFRDlBM0NEODI1QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E
EDAOMAwEAgABMAYDBAN2wfAwDQYJKoZIhvcNAQELBQADggEBAEQ9fp63H7037AcE
h/3n/oRramU9z+JdXuBM+C364FHIOyGgzNoSj36ZP/KOLdpm1Z8vaifHsEpOkrUc
X4dB9HlnIm2RoahK75PS2wl1gaRCXWZm/8c93O2ZC3VVH9VcdrjZeQNGofN48ufU
RUU541nkjnUAImF76wij7KJIr26/gT24SQcnuxaJtDMhjuIWY9nlwBckjbK4O/ZC
QUtAQGZUu4ulSE88UGdunesYL0UfoZeXukdOyjAHoNYA/nmpz92mlviIzDPebvCY
udK3gorzsBvngGVwBp8BSCEyS1BKbY/dyO49VgLBrLRPChvrWscPVag+EfdqghdT
mYFF6iE=
-----END CERTIFICATE-----
Generated at Mon Apr 28 17:44:52 2025 by rpki-client on console.sobornost.net