Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A915825D/E58B2268A44611EF8D58A624C4F9AE02/B035E67615D311F09BAD2971C4F9AE02.roa
File:                     B035E67615D311F09BAD2971C4F9AE02.roa (raw, json)
Hash identifier:          m6K1ejQzgZZN/JIHhR+mHfBRgRA0KhwEs/admphjKvc=
Subject key identifier:   DA:46:97:B2:14:D2:03:1E:C5:86:27:15:CC:2D:BF:E0:56:25:25:B4
Certificate issuer:       /CN=A915825D/serialNumber=B88BD5D5B9B8646D8E43E64C127B8481A418C636
Certificate serial:       55
Authority key identifier: B8:8B:D5:D5:B9:B8:64:6D:8E:43:E6:4C:12:7B:84:81:A4:18:C6:36
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uIvV1bm4ZG2OQ-ZMEnuEgaQYxjY.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A915825D/E58B2268A44611EF8D58A624C4F9AE02/B035E67615D311F09BAD2971C4F9AE02.roa
Signing time:             Thu 10 Apr 2025 06:18:59 +0000
ROA not before:           Thu 10 Apr 2025 06:18:59 +0000
ROA not after:            Mon 02 Mar 2026 00:00:00 +0000
asID:                     136396
IP address blocks:        2001:df4:8a40::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A915825D/E58B2268A44611EF8D58A624C4F9AE02/uIvV1bm4ZG2OQ-ZMEnuEgaQYxjY.crl
                          rsync://rpki.apnic.net/member_repository/A915825D/E58B2268A44611EF8D58A624C4F9AE02/uIvV1bm4ZG2OQ-ZMEnuEgaQYxjY.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uIvV1bm4ZG2OQ-ZMEnuEgaQYxjY.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 04 May 2025 02:50:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 85 (0x55)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A915825D, serialNumber=B88BD5D5B9B8646D8E43E64C127B8481A418C636
        Validity
            Not Before: Apr 10 06:18:59 2025 GMT
            Not After : Mar  2 00:00:00 2026 GMT
        Subject: CN=67f762d2-c57d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:d7:bf:a8:a1:d2:e2:74:b3:30:eb:72:0b:ce:
                    19:e1:55:d6:d7:80:c2:a5:19:fc:67:39:02:2a:60:
                    79:2a:d8:9a:73:37:97:fe:e4:05:f4:60:4c:58:c9:
                    b4:bb:96:6f:c2:8f:22:eb:64:77:5e:46:12:4f:02:
                    44:91:78:21:64:eb:27:45:8c:2e:ff:a7:61:93:66:
                    45:c5:50:70:6d:79:91:f7:cc:b8:4d:89:31:15:2e:
                    9a:f7:e6:3b:f5:8f:27:db:70:4d:7a:84:0e:44:8d:
                    14:de:0b:9f:15:22:f7:5d:24:1a:d1:b2:8c:e7:29:
                    c5:ac:2e:72:e8:5a:76:1c:6b:72:2b:31:3e:05:3c:
                    7c:54:64:d6:94:9c:05:50:ae:f6:1e:24:e2:46:e6:
                    73:b6:d7:bc:8d:a8:53:fc:3e:ca:6c:e9:99:4b:2a:
                    ff:f7:00:c1:d3:55:05:42:e8:cc:ab:9a:81:dd:b5:
                    0a:5c:23:37:1b:ae:00:bb:7c:af:b0:52:5d:57:42:
                    da:13:a0:09:cf:96:0d:02:06:bc:97:89:52:fe:43:
                    64:00:8f:63:bd:65:c4:5c:c3:04:cd:6a:36:fe:e6:
                    01:1c:68:0b:e0:17:87:77:6e:9b:f6:7e:ab:78:e1:
                    5e:88:65:53:12:43:f9:41:44:09:ed:ad:dd:c6:eb:
                    79:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DA:46:97:B2:14:D2:03:1E:C5:86:27:15:CC:2D:BF:E0:56:25:25:B4
            X509v3 Authority Key Identifier:
                keyid:B8:8B:D5:D5:B9:B8:64:6D:8E:43:E6:4C:12:7B:84:81:A4:18:C6:36

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A915825D/E58B2268A44611EF8D58A624C4F9AE02/uIvV1bm4ZG2OQ-ZMEnuEgaQYxjY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uIvV1bm4ZG2OQ-ZMEnuEgaQYxjY.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915825D/E58B2268A44611EF8D58A624C4F9AE02/B035E67615D311F09BAD2971C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:df4:8a40::/48

    Signature Algorithm: sha256WithRSAEncryption
         89:c8:cd:99:39:cf:a9:0b:28:20:cb:50:df:af:5f:98:fe:39:
         0b:a5:94:75:a7:f7:a0:38:fa:d8:6e:f7:67:3a:3c:15:99:3e:
         fd:e4:30:7e:ec:ca:77:66:b1:76:23:81:84:7d:f8:94:b1:2c:
         c6:0b:a2:9a:f5:55:57:cd:4c:d9:c1:aa:2c:cd:c5:6a:ef:94:
         22:dd:8e:a8:4e:f6:4d:b8:4a:68:bc:c3:a5:2b:c1:e7:4f:2c:
         0c:39:69:8e:1d:d2:fc:44:15:7f:67:0a:f2:fd:bc:dc:9f:8d:
         d9:a5:6a:d4:b7:d2:fb:f3:8d:c5:24:0e:fc:4e:fe:e3:cf:17:
         43:80:58:ff:34:67:c3:24:f6:ef:c6:fd:32:51:23:28:1a:dc:
         47:3b:1e:12:b6:28:34:d1:c2:4c:8e:db:fe:77:14:9e:8d:d0:
         f8:97:90:02:8e:e3:ad:c3:78:92:2b:a3:29:41:2c:36:37:bf:
         41:ba:a2:b9:cd:22:c6:e4:cf:88:a8:1a:97:8a:3e:84:9c:88:
         85:9a:4f:45:1c:42:f9:3a:32:f0:ed:fc:f3:f0:70:85:39:9c:
         15:62:8b:3e:f4:2e:11:c8:13:30:4e:23:44:22:b7:dc:71:17:
         88:4f:56:83:e6:f9:32:97:41:11:6d:5d:b4:11:03:e5:06:93:
         9c:0d:6f:f0
-----BEGIN CERTIFICATE-----
MIIFczCCBFugAwIBAgIBVTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE1
ODI1RDExMC8GA1UEBRMoQjg4QkQ1RDVCOUI4NjQ2RDhFNDNFNjRDMTI3Qjg0ODFB
NDE4QzYzNjAeFw0yNTA0MTAwNjE4NTlaFw0yNjAzMDIwMDAwMDBaMBgxFjAUBgNV
BAMTDTY3Zjc2MmQyLWM1N2QwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQCn17+oodLidLMw63ILzhnhVdbXgMKlGfxnOQIqYHkq2JpzN5f+5AX0YExYybS7
lm/CjyLrZHdeRhJPAkSReCFk6ydFjC7/p2GTZkXFUHBteZH3zLhNiTEVLpr35jv1
jyfbcE16hA5EjRTeC58VIvddJBrRsoznKcWsLnLoWnYca3IrMT4FPHxUZNaUnAVQ
rvYeJOJG5nO217yNqFP8Psps6ZlLKv/3AMHTVQVC6MyrmoHdtQpcIzcbrgC7fK+w
Ul1XQtoToAnPlg0CBryXiVL+Q2QAj2O9ZcRcwwTNajb+5gEcaAvgF4d3bpv2fqt4
4V6IZVMSQ/lBRAntrd3G63lpAgMBAAGjggKYMIIClDAdBgNVHQ4EFgQU2kaXshTS
Ax7FhicVzC2/4FYlJbQwHwYDVR0jBBgwFoAUuIvV1bm4ZG2OQ+ZMEnuEgaQYxjYw
DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTU4MjVEL0U1OEIyMjY4QTQ0
NjExRUY4RDU4QTYyNEM0RjlBRTAyL3VJdlYxYm00WkcyT1EtWk1FbnVFZ2FRWXhq
WS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG
RDFGRjIvdUl2VjFibTRaRzJPUS1aTUVudUVnYVFZeGpZLmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwgcsGCCsGAQUFBwELBIG+MIG7MIGDBggrBgEFBQcw
C4Z3cnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1
ODI1RC9FNThCMjI2OEE0NDYxMUVGOEQ1OEE2MjRDNEY5QUUwMi9CMDM1RTY3NjE1
RDMxMUYwOUJBRDI5NzFDNEY5QUUwMi5yb2EwMwYIKwYBBQUHMA2GJ2h0dHBzOi8v
cnJkcC5hcG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAiBggrBgEFBQcBBwEB/wQT
MBEwDwQCAAIwCQMHACABDfSKQDANBgkqhkiG9w0BAQsFAAOCAQEAicjNmTnPqQso
IMtQ369fmP45C6WUdaf3oDj62G73Zzo8FZk+/eQwfuzKd2axdiOBhH34lLEsxgui
mvVVV81M2cGqLM3Fau+UIt2OqE72TbhKaLzDpSvB508sDDlpjh3S/EQVf2cK8v28
3J+N2aVq1LfS+/ONxSQO/E7+488XQ4BY/zRnwyT278b9MlEjKBrcRzseErYoNNHC
TI7b/ncUno3Q+JeQAo7jrcN4kiujKUEsNje/Qbqiuc0ixuTPiKgal4o+hJyIhZpP
RRxC+Toy8O388/BwhTmcFWKLPvQuEcgTME4jRCK33HEXiE9Wg+b5MpdBEW1dtBED
5QaTnA1v8A==
-----END CERTIFICATE-----
Generated at Sun Apr 27 08:07:47 2025 by rpki-client on console.sobornost.net