Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A916E377/8A6D10B6883C11EE9556BB6EC4F9AE02/54692EB02FB111EFAD1C6322C4F9AE02.roa
File:                     54692EB02FB111EFAD1C6322C4F9AE02.roa (raw, json)
Hash identifier:          keI95qCS2k4Lve5N7wDY/bHgpp8mJTarNaBOO1lqZJQ=
Subject key identifier:   14:0D:50:5A:42:39:FA:5E:A5:17:F4:36:0A:57:17:C6:DF:C2:A9:F3
Certificate issuer:       /CN=A916E377/serialNumber=E79493F30A3EE9F0EE40522FF19D685C8062BA6E
Certificate serial:       010D
Authority key identifier: E7:94:93:F3:0A:3E:E9:F0:EE:40:52:2F:F1:9D:68:5C:80:62:BA:6E
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/55ST8wo-6fDuQFIv8Z1oXIBium4.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A916E377/8A6D10B6883C11EE9556BB6EC4F9AE02/54692EB02FB111EFAD1C6322C4F9AE02.roa
Signing time:             Thu 03 Apr 2025 04:32:18 +0000
ROA not before:           Thu 03 Apr 2025 04:32:18 +0000
ROA not after:            Wed 01 Jul 2026 00:00:00 +0000
asID:                     16509
IP address blocks:        124.110.200.0/21 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A916E377/8A6D10B6883C11EE9556BB6EC4F9AE02/55ST8wo-6fDuQFIv8Z1oXIBium4.crl
                          rsync://rpki.apnic.net/member_repository/A916E377/8A6D10B6883C11EE9556BB6EC4F9AE02/55ST8wo-6fDuQFIv8Z1oXIBium4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/55ST8wo-6fDuQFIv8Z1oXIBium4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 30 Apr 2025 04:06:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 269 (0x10d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A916E377, serialNumber=E79493F30A3EE9F0EE40522FF19D685C8062BA6E
        Validity
            Not Before: Apr  3 04:32:18 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=67ee0f51-7dee
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:13:57:e2:af:9e:93:f9:36:d1:54:0b:76:52:
                    e2:a8:a5:94:ce:ad:84:5d:c8:ed:d0:f0:1e:e8:d4:
                    d7:52:01:f8:a0:93:d5:c4:59:69:dd:81:47:81:77:
                    ff:86:e5:91:c6:b6:0e:55:b1:e0:c9:f9:02:51:b0:
                    b9:eb:34:4b:84:76:a7:f6:9f:67:de:fa:c1:de:b3:
                    22:19:c0:4e:3b:9c:8c:41:75:70:ea:f4:fd:23:a1:
                    0d:f6:e9:ad:96:9f:33:c2:f7:ee:83:bb:37:23:78:
                    12:1d:80:26:6e:e0:ff:a4:d9:a6:1b:08:07:f2:ed:
                    9f:0e:dc:de:dc:af:d8:1a:d8:d2:d8:a2:db:7c:c3:
                    e9:81:17:66:17:6f:56:c3:00:46:8d:c0:60:0c:64:
                    c2:2e:9b:82:f1:61:eb:50:90:c4:1c:57:8e:0f:70:
                    ca:ab:aa:52:0f:7b:5c:0c:11:fa:59:b6:a4:a8:ea:
                    cd:ae:45:d6:60:e0:d4:b2:e6:6d:6b:1f:f2:e0:a2:
                    48:c9:f2:b7:90:e3:4b:ca:e6:30:f8:98:fd:9d:31:
                    b7:c0:94:09:c5:4e:98:7d:5a:50:bb:5f:22:e0:cb:
                    47:bc:62:f3:26:d3:5f:bb:02:58:22:4e:55:01:19:
                    fb:eb:5f:b6:0b:18:47:8f:99:cc:58:e5:2b:ab:4e:
                    3f:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                14:0D:50:5A:42:39:FA:5E:A5:17:F4:36:0A:57:17:C6:DF:C2:A9:F3
            X509v3 Authority Key Identifier:
                keyid:E7:94:93:F3:0A:3E:E9:F0:EE:40:52:2F:F1:9D:68:5C:80:62:BA:6E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A916E377/8A6D10B6883C11EE9556BB6EC4F9AE02/55ST8wo-6fDuQFIv8Z1oXIBium4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/55ST8wo-6fDuQFIv8Z1oXIBium4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916E377/8A6D10B6883C11EE9556BB6EC4F9AE02/54692EB02FB111EFAD1C6322C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  124.110.200.0/21

    Signature Algorithm: sha256WithRSAEncryption
         76:b4:fd:f9:16:f9:41:d1:64:47:46:27:b7:58:54:9f:bc:9d:
         59:3f:ae:3f:8b:a6:eb:3c:09:29:92:80:6f:af:16:8d:31:c1:
         c3:20:af:d5:30:20:07:18:f4:00:30:22:2b:23:5b:d1:a1:56:
         91:7a:e9:15:0c:96:d1:c2:42:7d:7e:fd:b0:f8:d6:1a:91:e3:
         d6:c4:bb:e8:e8:2e:da:72:61:f4:83:87:76:2d:cc:ce:af:87:
         c3:d7:49:d2:c7:19:70:a6:6d:9b:51:8d:54:72:01:55:1a:ca:
         b6:0f:ab:13:c7:33:17:b4:1d:ba:af:df:2f:d1:43:48:f6:3d:
         ab:93:39:fd:6e:34:51:fb:94:fe:ef:b9:47:40:25:96:2e:18:
         65:06:4e:a8:dd:5f:6a:bf:a2:7e:e9:5b:e8:bf:86:bb:bb:29:
         ab:cd:5b:48:ab:38:cf:70:cc:50:4b:03:48:d3:51:10:3e:13:
         ce:4c:08:12:a9:34:dd:99:ec:45:06:f6:c6:10:90:82:91:d8:
         e1:ff:b3:d1:25:98:44:72:4c:0b:7e:3a:53:ef:f2:0f:87:0a:
         61:84:85:1d:8e:0e:c8:a0:b3:34:e0:77:ce:58:52:e8:10:5f:
         eb:b5:bb:f1:74:7d:a2:b2:80:05:d4:c6:b1:16:86:f0:0a:ff:
         b9:57:2f:83
-----BEGIN CERTIFICATE-----
MIIFcTCCBFmgAwIBAgICAQ0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NkUzNzcxMTAvBgNVBAUTKEU3OTQ5M0YzMEEzRUU5RjBFRTQwNTIyRkYxOUQ2ODVD
ODA2MkJBNkUwHhcNMjUwNDAzMDQzMjE4WhcNMjYwNzAxMDAwMDAwWjAYMRYwFAYD
VQQDEw02N2VlMGY1MS03ZGVlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAxRNX4q+ek/k20VQLdlLiqKWUzq2EXcjt0PAe6NTXUgH4oJPVxFlp3YFHgXf/
huWRxrYOVbHgyfkCUbC56zRLhHan9p9n3vrB3rMiGcBOO5yMQXVw6vT9I6EN9umt
lp8zwvfug7s3I3gSHYAmbuD/pNmmGwgH8u2fDtze3K/YGtjS2KLbfMPpgRdmF29W
wwBGjcBgDGTCLpuC8WHrUJDEHFeOD3DKq6pSD3tcDBH6WbakqOrNrkXWYODUsuZt
ax/y4KJIyfK3kONLyuYw+Jj9nTG3wJQJxU6YfVpQu18i4MtHvGLzJtNfuwJYIk5V
ARn761+2CxhHj5nMWOUrq04/6QIDAQABo4IClTCCApEwHQYDVR0OBBYEFBQNUFpC
OfpepRf0NgpXF8bfwqnzMB8GA1UdIwQYMBaAFOeUk/MKPunw7kBSL/GdaFyAYrpu
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2RTM3Ny84QTZEMTBCNjg4
M0MxMUVFOTU1NkJCNkVDNEY5QUUwMi81NVNUOHdvLTZmRHVRRkl2OFoxb1hJQml1
bTQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyLzU1U1Q4d28tNmZEdVFGSXY4WjFvWElCaXVtNC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
NkUzNzcvOEE2RDEwQjY4ODNDMTFFRTk1NTZCQjZFQzRGOUFFMDIvNTQ2OTJFQjAy
RkIxMTFFRkFEMUM2MzIyQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E
EDAOMAwEAgABMAYDBAN8bsgwDQYJKoZIhvcNAQELBQADggEBAHa0/fkW+UHRZEdG
J7dYVJ+8nVk/rj+Lpus8CSmSgG+vFo0xwcMgr9UwIAcY9AAwIisjW9GhVpF66RUM
ltHCQn1+/bD41hqR49bEu+joLtpyYfSDh3YtzM6vh8PXSdLHGXCmbZtRjVRyAVUa
yrYPqxPHMxe0Hbqv3y/RQ0j2PauTOf1uNFH7lP7vuUdAJZYuGGUGTqjdX2q/on7p
W+i/hru7KavNW0irOM9wzFBLA0jTURA+E85MCBKpNN2Z7EUG9sYQkIKR2OH/s9El
mERyTAt+OlPv8g+HCmGEhR2ODsigszTgd85YUugQX+u1u/F0faKygAXUxrEWhvAK
/7lXL4M=
-----END CERTIFICATE-----
Generated at Wed Apr 23 06:35:41 2025 by rpki-client on console.sobornost.net