Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A919D180/774287F2D6C711EFA3E1D81CC4F9AE02/C8D5160AE75E11EF97E59E40C4F9AE02.roa
File:                     C8D5160AE75E11EF97E59E40C4F9AE02.roa (raw, json)
Hash identifier:          usgzG5l4Fc/vVVRb6d9DCRrnc0s/zMN8s4ksanz/FtM=
Subject key identifier:   C2:11:84:37:C8:71:4C:84:3D:9E:17:6E:2D:29:61:E8:4D:FE:C1:5E
Certificate issuer:       /CN=A919D180/serialNumber=87DA44A4CF839C3881C6BC38683CCDC308CA7CE9
Certificate serial:       41
Authority key identifier: 87:DA:44:A4:CF:83:9C:38:81:C6:BC:38:68:3C:CD:C3:08:CA:7C:E9
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/h9pEpM-DnDiBxrw4aDzNwwjKfOk.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A919D180/774287F2D6C711EFA3E1D81CC4F9AE02/C8D5160AE75E11EF97E59E40C4F9AE02.roa
Signing time:             Mon 07 Apr 2025 06:44:43 +0000
ROA not before:           Mon 07 Apr 2025 06:44:43 +0000
ROA not after:            Wed 01 Jul 2026 00:00:00 +0000
asID:                     17794
IP address blocks:        202.45.82.0/23 maxlen: 23
                          202.45.85.0/24 maxlen: 24
                          202.45.88.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A919D180/774287F2D6C711EFA3E1D81CC4F9AE02/h9pEpM-DnDiBxrw4aDzNwwjKfOk.crl
                          rsync://rpki.apnic.net/member_repository/A919D180/774287F2D6C711EFA3E1D81CC4F9AE02/h9pEpM-DnDiBxrw4aDzNwwjKfOk.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/h9pEpM-DnDiBxrw4aDzNwwjKfOk.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 04 May 2025 02:50:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 65 (0x41)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A919D180, serialNumber=87DA44A4CF839C3881C6BC38683CCDC308CA7CE9
        Validity
            Not Before: Apr  7 06:44:43 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=67f3745a-f4c4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:b8:10:ce:6b:8f:fc:62:10:f7:6a:5d:5a:87:
                    b8:18:01:66:74:2a:18:cc:3b:6c:6c:35:dc:87:e9:
                    3f:16:ee:b0:36:0d:0f:06:31:d1:a1:1d:ee:4b:7e:
                    01:bf:67:3b:50:91:81:20:86:40:5d:90:80:03:a7:
                    df:39:cb:c4:a4:50:fe:88:ba:b6:7c:64:52:47:25:
                    71:0c:35:db:d9:dd:f1:f2:2d:f6:55:7d:bb:14:ec:
                    36:de:d9:12:ab:1e:00:c0:b8:d3:f5:9d:cb:e9:8b:
                    8e:b4:37:e3:78:06:76:99:2a:44:85:d2:0e:dc:f8:
                    c6:55:6f:fa:df:f4:ba:f7:f1:18:ff:e4:96:f2:fd:
                    29:25:df:e4:25:47:fb:92:78:61:2a:fd:90:2f:a0:
                    e6:83:d2:40:55:9c:03:2c:5f:f6:be:3c:44:6d:c2:
                    12:0d:16:19:67:21:a9:2b:6d:c1:79:74:e9:6a:ad:
                    09:b6:01:27:0a:70:0c:72:14:82:8e:27:bc:29:96:
                    e2:58:5b:73:e9:55:0e:00:ba:dd:b1:56:9c:ee:7a:
                    b8:a3:56:b4:d6:2b:81:3e:87:29:88:9b:f1:79:99:
                    0f:a1:dc:ca:bd:51:8d:77:27:d7:ba:27:e9:22:08:
                    ef:7a:96:83:4f:cd:e0:50:df:32:b3:1f:59:a5:c0:
                    5d:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C2:11:84:37:C8:71:4C:84:3D:9E:17:6E:2D:29:61:E8:4D:FE:C1:5E
            X509v3 Authority Key Identifier:
                keyid:87:DA:44:A4:CF:83:9C:38:81:C6:BC:38:68:3C:CD:C3:08:CA:7C:E9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A919D180/774287F2D6C711EFA3E1D81CC4F9AE02/h9pEpM-DnDiBxrw4aDzNwwjKfOk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/h9pEpM-DnDiBxrw4aDzNwwjKfOk.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919D180/774287F2D6C711EFA3E1D81CC4F9AE02/C8D5160AE75E11EF97E59E40C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  202.45.82.0/23
                  202.45.85.0/24
                  202.45.88.0/24

    Signature Algorithm: sha256WithRSAEncryption
         83:c7:d1:a7:da:41:34:02:8a:ee:0d:dd:9b:ae:1e:9d:c5:cb:
         5f:c6:cd:fe:b1:ce:36:14:24:8e:ce:f2:70:63:19:e6:66:e2:
         b5:7e:70:6e:4f:cd:96:c3:20:72:86:c4:b9:8c:5a:bf:9b:a5:
         55:f5:c3:52:f5:cf:b5:9d:99:3f:cd:90:a6:9a:6e:c9:5a:5d:
         3e:4c:c6:0d:17:96:f1:44:7b:dd:23:b4:0f:2a:9f:6e:bd:02:
         49:6d:56:8e:aa:92:1a:e9:85:e0:c3:a7:a8:e8:83:ef:9e:d5:
         94:9d:9b:91:32:15:df:f9:37:67:c1:25:9c:61:a7:62:a4:a8:
         ff:b5:47:ee:10:9f:6b:52:09:49:d1:e0:de:27:6c:6b:23:72:
         03:2d:52:51:15:21:56:d7:b2:37:32:94:4f:fa:5f:12:0f:85:
         bf:d1:b2:2f:d7:89:a1:b3:25:de:74:37:0d:74:8e:5f:ab:72:
         84:00:db:6d:a9:4b:95:e1:12:e6:31:96:9d:1e:7a:6d:6a:50:
         ab:19:0b:04:e9:39:19:26:e4:a7:57:df:b3:10:a6:c4:f6:78:
         8a:ff:f4:db:3b:2b:3e:12:3f:3c:6c:22:84:79:44:a0:81:56:
         ca:58:11:26:66:ac:c6:dc:29:c4:34:80:5d:fe:03:6e:6a:e8:
         92:90:39:ff
-----BEGIN CERTIFICATE-----
MIIFfDCCBGSgAwIBAgIBQTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE5
RDE4MDExMC8GA1UEBRMoODdEQTQ0QTRDRjgzOUMzODgxQzZCQzM4NjgzQ0NEQzMw
OENBN0NFOTAeFw0yNTA0MDcwNjQ0NDNaFw0yNjA3MDEwMDAwMDBaMBgxFjAUBgNV
BAMTDTY3ZjM3NDVhLWY0YzQwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQCruBDOa4/8YhD3al1ah7gYAWZ0KhjMO2xsNdyH6T8W7rA2DQ8GMdGhHe5LfgG/
ZztQkYEghkBdkIADp985y8SkUP6IurZ8ZFJHJXEMNdvZ3fHyLfZVfbsU7Dbe2RKr
HgDAuNP1ncvpi460N+N4BnaZKkSF0g7c+MZVb/rf9Lr38Rj/5Jby/Skl3+QlR/uS
eGEq/ZAvoOaD0kBVnAMsX/a+PERtwhINFhlnIakrbcF5dOlqrQm2AScKcAxyFIKO
J7wpluJYW3PpVQ4Aut2xVpzuerijVrTWK4E+hymIm/F5mQ+h3Mq9UY13J9e6J+ki
CO96loNPzeBQ3zKzH1mlwF1pAgMBAAGjggKhMIICnTAdBgNVHQ4EFgQUwhGEN8hx
TIQ9nhduLSlh6E3+wV4wHwYDVR0jBBgwFoAUh9pEpM+DnDiBxrw4aDzNwwjKfOkw
DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTlEMTgwLzc3NDI4N0YyRDZD
NzExRUZBM0UxRDgxQ0M0RjlBRTAyL2g5cEVwTS1EbkRpQnhydzRhRHpOd3dqS2ZP
ay5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG
RDFGRjIvaDlwRXBNLURuRGlCeHJ3NGFEek53d2pLZk9rLmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwgcsGCCsGAQUFBwELBIG+MIG7MIGDBggrBgEFBQcw
C4Z3cnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5
RDE4MC83NzQyODdGMkQ2QzcxMUVGQTNFMUQ4MUNDNEY5QUUwMi9DOEQ1MTYwQUU3
NUUxMUVGOTdFNTlFNDBDNEY5QUUwMi5yb2EwMwYIKwYBBQUHMA2GJ2h0dHBzOi8v
cnJkcC5hcG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDArBggrBgEFBQcBBwEB/wQc
MBowGAQCAAEwEgMEAcotUgMEAMotVQMEAMotWDANBgkqhkiG9w0BAQsFAAOCAQEA
g8fRp9pBNAKK7g3dm64encXLX8bN/rHONhQkjs7ycGMZ5mbitX5wbk/NlsMgcobE
uYxav5ulVfXDUvXPtZ2ZP82QpppuyVpdPkzGDReW8UR73SO0Dyqfbr0CSW1WjqqS
GumF4MOnqOiD757VlJ2bkTIV3/k3Z8ElnGGnYqSo/7VH7hCfa1IJSdHg3idsayNy
Ay1SURUhVteyNzKUT/pfEg+Fv9GyL9eJobMl3nQ3DXSOX6tyhADbbalLleES5jGW
nR56bWpQqxkLBOk5GSbkp1ffsxCmxPZ4iv/02zsrPhI/PGwihHlEoIFWylgRJmas
xtwpxDSAXf4DbmrokpA5/w==
-----END CERTIFICATE-----
Generated at Sun Apr 27 08:07:52 2025 by rpki-client on console.sobornost.net