Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9192C18/9A5EEA8C3DF411ED8041F930C4F9AE02/0B93EA661FD111F091F95F82C4F9AE02.roa
File:                     0B93EA661FD111F091F95F82C4F9AE02.roa (raw, json)
Hash identifier:          S8S/PVnEFdzRmwECm2IPzs3uiE5PL2ImPJmjhxClCr8=
Subject key identifier:   5A:D9:11:A4:30:09:9F:98:81:28:5E:78:A1:D4:5A:72:15:42:92:22
Certificate issuer:       /CN=A9192C18/serialNumber=F1FE0C327E79E5AF43E15B0E6F8CD66C0329D138
Certificate serial:       0317
Authority key identifier: F1:FE:0C:32:7E:79:E5:AF:43:E1:5B:0E:6F:8C:D6:6C:03:29:D1:38
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8f4MMn555a9D4VsOb4zWbAMp0Tg.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9192C18/9A5EEA8C3DF411ED8041F930C4F9AE02/0B93EA661FD111F091F95F82C4F9AE02.roa
Signing time:             Tue 22 Apr 2025 23:25:15 +0000
ROA not before:           Tue 22 Apr 2025 23:25:15 +0000
ROA not after:            Mon 01 Dec 2025 00:00:00 +0000
asID:                     3144
IP address blocks:        202.155.158.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9192C18/9A5EEA8C3DF411ED8041F930C4F9AE02/8f4MMn555a9D4VsOb4zWbAMp0Tg.crl
                          rsync://rpki.apnic.net/member_repository/A9192C18/9A5EEA8C3DF411ED8041F930C4F9AE02/8f4MMn555a9D4VsOb4zWbAMp0Tg.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8f4MMn555a9D4VsOb4zWbAMp0Tg.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 01 May 2025 02:50:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 791 (0x317)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9192C18, serialNumber=F1FE0C327E79E5AF43E15B0E6F8CD66C0329D138
        Validity
            Not Before: Apr 22 23:25:15 2025 GMT
            Not After : Dec  1 00:00:00 2025 GMT
        Subject: CN=6808255b-5cfb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:f6:b8:bf:26:28:9f:cc:ec:7c:ce:8b:9f:03:
                    8a:fd:15:c7:7d:e1:64:24:4c:ac:3e:f6:6a:e2:79:
                    6b:27:36:6a:17:12:28:f7:3d:c4:57:51:dc:cc:13:
                    e8:3d:90:de:d2:41:e9:17:51:f4:30:86:d3:78:03:
                    f6:79:bb:29:95:8f:28:3d:34:1e:2d:92:5f:38:02:
                    dc:eb:84:50:a1:00:b6:05:12:25:d5:52:29:a3:b4:
                    25:c2:be:7b:4e:1f:9c:cb:b1:5c:ff:fb:c6:d2:16:
                    14:d1:a4:87:15:64:ac:d1:b3:a1:2c:d3:67:d6:3b:
                    a2:ef:07:85:d1:6f:79:68:e2:07:45:55:bd:dd:e4:
                    0b:dc:29:86:9b:ff:48:78:3d:1a:32:38:a8:74:84:
                    7d:b7:d5:66:98:a9:b9:0d:03:0e:22:d7:4f:cb:35:
                    b8:0b:87:01:bc:6a:a0:f4:8a:98:54:ae:08:22:d3:
                    e1:98:9d:95:dc:31:84:70:72:1c:ff:09:7e:e7:e5:
                    aa:37:8a:d3:81:00:22:e3:f8:9f:e7:4a:d3:4b:9a:
                    2c:b6:c4:12:a8:69:6f:cf:92:2e:45:22:17:76:17:
                    8d:15:df:85:a4:bc:05:a3:d3:2c:f5:7e:08:02:69:
                    2c:88:c3:bd:02:13:6f:9b:2e:38:0c:1b:80:4b:30:
                    7c:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5A:D9:11:A4:30:09:9F:98:81:28:5E:78:A1:D4:5A:72:15:42:92:22
            X509v3 Authority Key Identifier:
                keyid:F1:FE:0C:32:7E:79:E5:AF:43:E1:5B:0E:6F:8C:D6:6C:03:29:D1:38

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9192C18/9A5EEA8C3DF411ED8041F930C4F9AE02/8f4MMn555a9D4VsOb4zWbAMp0Tg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8f4MMn555a9D4VsOb4zWbAMp0Tg.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9192C18/9A5EEA8C3DF411ED8041F930C4F9AE02/0B93EA661FD111F091F95F82C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  202.155.158.0/24

    Signature Algorithm: sha256WithRSAEncryption
         71:57:6f:00:9d:c3:e3:d6:9e:31:80:d7:d8:cb:1c:d3:b9:3e:
         b3:ce:bd:fe:2c:1a:72:7d:4c:c3:dc:a2:19:e2:6e:53:da:f0:
         67:67:4d:64:fb:03:60:f7:c0:80:69:51:9b:86:10:73:43:2c:
         e8:db:ac:5a:94:98:5d:05:2d:1a:63:78:74:bc:c8:ac:98:d1:
         74:1c:c0:c1:33:c4:60:a2:2a:8d:b8:ef:6f:61:2f:9b:99:9b:
         b1:dc:07:7c:00:b5:5f:7f:4f:2f:c8:98:b1:fe:44:65:3c:49:
         20:00:80:da:e7:e9:52:e8:ff:ad:23:5f:5d:9e:f7:c0:83:07:
         e6:aa:64:c9:46:fb:9c:17:0e:63:c0:bb:71:0f:40:4f:f6:be:
         5a:00:b5:a1:06:82:37:e5:48:71:f2:d7:69:ad:d0:86:eb:fd:
         0a:8a:85:7f:7c:00:e8:0e:00:27:7a:a5:3d:a4:78:29:52:55:
         1c:de:a9:c1:6e:2e:f8:45:80:44:3b:d7:7e:8c:58:58:31:8a:
         0f:ef:bf:59:46:de:f9:22:61:94:21:e6:a9:a7:f1:95:cd:03:
         02:93:b5:93:67:7e:7c:5d:14:34:bc:3b:d1:10:e7:81:b9:2d:
         a2:3c:29:fc:23:f1:8b:e7:ff:a8:7c:eb:70:0a:57:73:d3:6e:
         bd:62:c9:40
-----BEGIN CERTIFICATE-----
MIIFcTCCBFmgAwIBAgICAxcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
OTJDMTgxMTAvBgNVBAUTKEYxRkUwQzMyN0U3OUU1QUY0M0UxNUIwRTZGOENENjZD
MDMyOUQxMzgwHhcNMjUwNDIyMjMyNTE1WhcNMjUxMjAxMDAwMDAwWjAYMRYwFAYD
VQQDEw02ODA4MjU1Yi01Y2ZiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAu/a4vyYon8zsfM6LnwOK/RXHfeFkJEysPvZq4nlrJzZqFxIo9z3EV1HczBPo
PZDe0kHpF1H0MIbTeAP2ebsplY8oPTQeLZJfOALc64RQoQC2BRIl1VIpo7Qlwr57
Th+cy7Fc//vG0hYU0aSHFWSs0bOhLNNn1jui7weF0W95aOIHRVW93eQL3CmGm/9I
eD0aMjiodIR9t9VmmKm5DQMOItdPyzW4C4cBvGqg9IqYVK4IItPhmJ2V3DGEcHIc
/wl+5+WqN4rTgQAi4/if50rTS5ostsQSqGlvz5IuRSIXdheNFd+FpLwFo9Ms9X4I
AmksiMO9AhNvmy44DBuASzB89wIDAQABo4IClTCCApEwHQYDVR0OBBYEFFrZEaQw
CZ+YgSheeKHUWnIVQpIiMB8GA1UdIwQYMBaAFPH+DDJ+eeWvQ+FbDm+M1mwDKdE4
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5MkMxOC85QTVFRUE4QzNE
RjQxMUVEODA0MUY5MzBDNEY5QUUwMi84ZjRNTW41NTVhOUQ0VnNPYjR6V2JBTXAw
VGcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyLzhmNE1NbjU1NWE5RDRWc09iNHpXYkFNcDBUZy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
OTJDMTgvOUE1RUVBOEMzREY0MTFFRDgwNDFGOTMwQzRGOUFFMDIvMEI5M0VBNjYx
RkQxMTFGMDkxRjk1RjgyQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E
EDAOMAwEAgABMAYDBADKm54wDQYJKoZIhvcNAQELBQADggEBAHFXbwCdw+PWnjGA
19jLHNO5PrPOvf4sGnJ9TMPcohniblPa8GdnTWT7A2D3wIBpUZuGEHNDLOjbrFqU
mF0FLRpjeHS8yKyY0XQcwMEzxGCiKo24729hL5uZm7HcB3wAtV9/Ty/ImLH+RGU8
SSAAgNrn6VLo/60jX12e98CDB+aqZMlG+5wXDmPAu3EPQE/2vloAtaEGgjflSHHy
12mt0Ibr/QqKhX98AOgOACd6pT2keClSVRzeqcFuLvhFgEQ7136MWFgxig/vv1lG
3vkiYZQh5qmn8ZXNAwKTtZNnfnxdFDS8O9EQ54G5LaI8Kfwj8Yvn/6h863AKV3PT
br1iyUA=
-----END CERTIFICATE-----
Generated at Thu Apr 24 06:54:45 2025 by rpki-client on console.sobornost.net