Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91F5216/5CD5E7306E0811EDBEED6284C4F9AE02/CDA9BB546E0C11ED8BF41547C4F9AE02.roa
File:                     CDA9BB546E0C11ED8BF41547C4F9AE02.roa (raw, json)
Hash identifier:          5xUQVljU0BWWuc6LYolHHzG3Hqi8KmssX696YCKuce8=
Subject key identifier:   00:5C:E3:D2:AD:AE:ED:99:E4:B7:15:98:18:BE:2D:D8:99:97:B3:ED
Certificate issuer:       /CN=A91F5216/serialNumber=A841BDC5AFA9E9A0A95B88546113CA745EE963B5
Certificate serial:       01CB
Authority key identifier: A8:41:BD:C5:AF:A9:E9:A0:A9:5B:88:54:61:13:CA:74:5E:E9:63:B5
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/qEG9xa-p6aCpW4hUYRPKdF7pY7U.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91F5216/5CD5E7306E0811EDBEED6284C4F9AE02/CDA9BB546E0C11ED8BF41547C4F9AE02.roa
Signing time:             Sat 19 Apr 2025 02:28:37 +0000
ROA not before:           Sat 19 Apr 2025 02:28:37 +0000
ROA not after:            Wed 01 Jul 2026 00:00:00 +0000
asID:                     55491
IP address blocks:        146.196.0.0/19 maxlen: 19
                          146.196.4.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91F5216/5CD5E7306E0811EDBEED6284C4F9AE02/qEG9xa-p6aCpW4hUYRPKdF7pY7U.crl
                          rsync://rpki.apnic.net/member_repository/A91F5216/5CD5E7306E0811EDBEED6284C4F9AE02/qEG9xa-p6aCpW4hUYRPKdF7pY7U.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/qEG9xa-p6aCpW4hUYRPKdF7pY7U.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 02 May 2025 02:08:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 459 (0x1cb)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91F5216, serialNumber=A841BDC5AFA9E9A0A95B88546113CA745EE963B5
        Validity
            Not Before: Apr 19 02:28:37 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=68030a55-bb36
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:58:59:c7:17:06:b7:e2:30:08:3b:2c:63:13:
                    8b:1d:49:ad:2c:86:db:67:41:7a:d9:cf:9c:73:72:
                    37:c1:f0:a9:39:fe:4e:dd:b2:a4:9f:86:3a:e1:ae:
                    3c:9d:bf:42:16:5b:24:18:d1:0a:83:e0:ae:4f:d6:
                    44:54:b7:e6:40:1f:89:99:2c:a7:d4:05:03:ad:de:
                    99:b7:16:32:1c:08:34:46:f9:c4:ed:e4:0c:16:f6:
                    58:06:40:7e:2b:88:92:c9:fb:07:4c:22:70:1c:d2:
                    06:77:02:43:fb:7e:2b:b3:95:ef:32:6e:69:0d:aa:
                    a1:bc:a2:db:9b:0f:b2:1f:be:7f:42:96:ff:56:bc:
                    fd:93:05:e4:91:5a:d2:36:b8:33:57:3d:4c:d2:b7:
                    ea:9f:2d:8e:4d:fc:de:d4:f6:ea:61:8f:34:e6:22:
                    65:68:56:83:c9:85:5b:61:fb:06:9a:ef:7f:d6:c6:
                    9e:7d:f9:16:55:9a:65:37:0a:cb:3c:32:1f:a7:72:
                    f9:22:37:3c:4a:ee:b1:2c:07:3c:b5:60:f7:fb:30:
                    6f:0c:2a:91:51:dd:ef:83:8a:d4:16:73:4f:7a:83:
                    42:c8:e6:af:56:12:c5:7a:fb:eb:7b:b0:2c:36:29:
                    3c:97:a4:6e:a3:c5:44:0a:f2:d0:9e:1a:00:19:1a:
                    7f:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                00:5C:E3:D2:AD:AE:ED:99:E4:B7:15:98:18:BE:2D:D8:99:97:B3:ED
            X509v3 Authority Key Identifier:
                keyid:A8:41:BD:C5:AF:A9:E9:A0:A9:5B:88:54:61:13:CA:74:5E:E9:63:B5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91F5216/5CD5E7306E0811EDBEED6284C4F9AE02/qEG9xa-p6aCpW4hUYRPKdF7pY7U.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/qEG9xa-p6aCpW4hUYRPKdF7pY7U.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F5216/5CD5E7306E0811EDBEED6284C4F9AE02/CDA9BB546E0C11ED8BF41547C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  146.196.0.0/19

    Signature Algorithm: sha256WithRSAEncryption
         47:4d:a6:6b:41:07:88:e1:3e:92:05:82:4a:5f:b0:ca:a5:b8:
         5f:2f:8e:1a:6a:3d:ea:98:0f:90:00:1b:ac:58:69:9d:01:85:
         91:98:0f:8e:f9:ad:7f:dc:4b:8d:14:0d:0e:30:45:f1:03:83:
         a2:fa:67:97:83:f0:29:06:ad:31:aa:2a:62:c5:0f:cc:bf:86:
         15:7a:e5:b0:41:7a:e5:96:c6:1f:bb:95:e8:3b:4f:a4:22:37:
         76:12:85:7a:9f:d3:e6:02:d4:60:94:c0:6c:e1:45:84:c1:5e:
         48:0b:f3:70:70:1e:ac:38:57:56:a2:41:97:6b:24:bb:99:1d:
         32:ae:ec:64:fd:ad:ac:25:f7:15:e8:0c:95:ee:ad:b1:3d:27:
         8b:76:0c:b4:a3:ee:dd:67:dc:4f:1f:92:2a:f8:59:fb:5c:3f:
         11:2d:31:1b:8a:b8:92:be:1d:31:4d:f5:3c:ab:28:ce:4d:f5:
         02:f8:1c:0e:54:30:ca:ae:5d:f9:5e:cc:d4:2f:b8:ba:d6:33:
         47:16:3c:e4:da:5a:0b:a4:c9:c8:1d:a1:d8:d4:c9:f9:92:a2:
         76:0d:8c:35:57:29:13:df:b7:0d:ab:e1:fa:f6:23:f2:36:47:
         c4:24:98:2f:66:17:ee:c3:45:05:b7:a2:98:be:ce:38:e3:14:
         a3:fd:5e:4b
-----BEGIN CERTIFICATE-----
MIIFcTCCBFmgAwIBAgICAcswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RjUyMTYxMTAvBgNVBAUTKEE4NDFCREM1QUZBOUU5QTBBOTVCODg1NDYxMTNDQTc0
NUVFOTYzQjUwHhcNMjUwNDE5MDIyODM3WhcNMjYwNzAxMDAwMDAwWjAYMRYwFAYD
VQQDEw02ODAzMGE1NS1iYjM2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAyFhZxxcGt+IwCDssYxOLHUmtLIbbZ0F62c+cc3I3wfCpOf5O3bKkn4Y64a48
nb9CFlskGNEKg+CuT9ZEVLfmQB+JmSyn1AUDrd6ZtxYyHAg0RvnE7eQMFvZYBkB+
K4iSyfsHTCJwHNIGdwJD+34rs5XvMm5pDaqhvKLbmw+yH75/Qpb/Vrz9kwXkkVrS
NrgzVz1M0rfqny2OTfze1PbqYY805iJlaFaDyYVbYfsGmu9/1saeffkWVZplNwrL
PDIfp3L5Ijc8Su6xLAc8tWD3+zBvDCqRUd3vg4rUFnNPeoNCyOavVhLFevvre7As
Nik8l6Ruo8VECvLQnhoAGRp/GQIDAQABo4IClTCCApEwHQYDVR0OBBYEFABc49Kt
ru2Z5LcVmBi+LdiZl7PtMB8GA1UdIwQYMBaAFKhBvcWvqemgqVuIVGETynRe6WO1
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGNTIxNi81Q0Q1RTczMDZF
MDgxMUVEQkVFRDYyODRDNEY5QUUwMi9xRUc5eGEtcDZhQ3BXNGhVWVJQS2RGN3BZ
N1UuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy
RkQxRkYyL3FFRzl4YS1wNmFDcFc0aFVZUlBLZEY3cFk3VS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
RjUyMTYvNUNENUU3MzA2RTA4MTFFREJFRUQ2Mjg0QzRGOUFFMDIvQ0RBOUJCNTQ2
RTBDMTFFRDhCRjQxNTQ3QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E
EDAOMAwEAgABMAYDBAWSxAAwDQYJKoZIhvcNAQELBQADggEBAEdNpmtBB4jhPpIF
gkpfsMqluF8vjhpqPeqYD5AAG6xYaZ0BhZGYD475rX/cS40UDQ4wRfEDg6L6Z5eD
8CkGrTGqKmLFD8y/hhV65bBBeuWWxh+7leg7T6QiN3YShXqf0+YC1GCUwGzhRYTB
XkgL83BwHqw4V1aiQZdrJLuZHTKu7GT9rawl9xXoDJXurbE9J4t2DLSj7t1n3E8f
kir4WftcPxEtMRuKuJK+HTFN9TyrKM5N9QL4HA5UMMquXflezNQvuLrWM0cWPOTa
WgukycgdodjUyfmSonYNjDVXKRPftw2r4fr2I/I2R8QkmC9mF+7DRQW3opi+zjjj
FKP9Xks=
-----END CERTIFICATE-----
Generated at Fri Apr 25 08:25:21 2025 by rpki-client on console.sobornost.net