Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91F7537/802AE646A27111EFA392F079C4F9AE02/9B35F348266211F09E7C3657C4F9AE02.roa
File:                     9B35F348266211F09E7C3657C4F9AE02.roa (raw, json)
Hash identifier:          w98iv4SMeaHMbmTMicpq1ZJ/swub43o1vMMkgZ6/hgM=
Subject key identifier:   4C:15:AE:2D:5F:E5:4D:0D:6C:B6:F0:02:57:7D:B4:6F:AD:FB:2B:7F
Certificate issuer:       /CN=A91F7537/serialNumber=DF5FE21B7C955215934471794D8B070663D2B34E
Certificate serial:       5E
Authority key identifier: DF:5F:E2:1B:7C:95:52:15:93:44:71:79:4D:8B:07:06:63:D2:B3:4E
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/31_iG3yVUhWTRHF5TYsHBmPSs04.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91F7537/802AE646A27111EFA392F079C4F9AE02/9B35F348266211F09E7C3657C4F9AE02.roa
Signing time:             Thu 01 May 2025 08:02:20 +0000
ROA not before:           Thu 01 May 2025 08:02:20 +0000
ROA not after:            Sat 31 Jan 2026 00:00:00 +0000
asID:                     139780
IP address blocks:        160.250.8.0/24 maxlen: 24
                          160.250.9.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91F7537/802AE646A27111EFA392F079C4F9AE02/31_iG3yVUhWTRHF5TYsHBmPSs04.crl
                          rsync://rpki.apnic.net/member_repository/A91F7537/802AE646A27111EFA392F079C4F9AE02/31_iG3yVUhWTRHF5TYsHBmPSs04.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/31_iG3yVUhWTRHF5TYsHBmPSs04.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 12 May 2025 05:10:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 94 (0x5e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91F7537, serialNumber=DF5FE21B7C955215934471794D8B070663D2B34E
        Validity
            Not Before: May  1 08:02:20 2025 GMT
            Not After : Jan 31 00:00:00 2026 GMT
        Subject: CN=68132a8c-6cf0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:d4:95:67:87:32:bf:aa:84:68:78:ac:6e:75:
                    32:3f:98:42:59:15:7c:3f:5a:30:b2:5a:fa:0c:01:
                    ef:e6:5f:0f:d2:ab:57:3f:c8:05:8d:8b:64:1d:4a:
                    22:05:6c:bb:21:a2:ca:a5:c7:b1:b5:39:4f:fe:11:
                    77:84:71:6f:15:52:a7:2b:41:25:e8:ce:fd:23:fa:
                    39:8d:70:33:d4:96:ce:aa:a7:99:8b:47:2e:67:83:
                    26:e3:e7:fc:2c:8c:f9:07:87:ac:04:66:bd:a5:20:
                    36:2c:73:0f:91:9e:e9:e7:43:8d:44:1c:19:6b:88:
                    7f:29:48:57:21:88:33:2f:04:2e:c3:36:78:a3:38:
                    50:b4:2b:e5:b5:d5:35:ba:77:cf:fb:11:7f:76:55:
                    25:75:da:bb:90:81:3e:a8:ee:ce:ca:c5:47:3a:78:
                    9a:55:e9:53:cf:7d:61:9e:ec:74:f1:3f:9c:b4:96:
                    8c:82:65:75:23:b4:d5:57:e2:1d:6d:8b:9c:79:03:
                    4d:33:ab:10:45:0c:f8:8e:04:52:ad:b0:1e:c6:e6:
                    91:f4:69:f4:1c:5f:da:8a:38:84:e2:d9:9b:ea:b7:
                    42:50:cd:70:1c:ec:23:a7:44:14:a3:4b:d7:4d:8a:
                    5e:42:3e:e8:2b:94:a6:7c:da:0e:5d:37:8e:65:5b:
                    a0:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4C:15:AE:2D:5F:E5:4D:0D:6C:B6:F0:02:57:7D:B4:6F:AD:FB:2B:7F
            X509v3 Authority Key Identifier:
                keyid:DF:5F:E2:1B:7C:95:52:15:93:44:71:79:4D:8B:07:06:63:D2:B3:4E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91F7537/802AE646A27111EFA392F079C4F9AE02/31_iG3yVUhWTRHF5TYsHBmPSs04.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/31_iG3yVUhWTRHF5TYsHBmPSs04.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F7537/802AE646A27111EFA392F079C4F9AE02/9B35F348266211F09E7C3657C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  160.250.8.0/23

    Signature Algorithm: sha256WithRSAEncryption
         31:e0:16:11:d2:69:17:07:b0:7e:eb:8b:73:6a:2d:87:41:b9:
         da:65:86:71:6a:3d:3d:ab:ae:99:82:b1:97:e2:33:c0:c3:0d:
         23:4f:b4:38:16:90:17:74:55:54:7c:13:24:d8:0a:85:23:be:
         10:a6:b1:93:29:95:e1:44:49:a1:92:45:47:c7:00:9d:4c:22:
         3b:f3:bd:0f:ee:4c:9a:22:ab:d6:c5:3e:c5:80:be:fa:af:d7:
         18:e3:46:51:2b:05:7c:4f:66:89:63:55:c1:26:26:f1:52:50:
         2a:19:3e:6e:5c:5e:6e:c3:08:f3:66:3f:9d:f7:b4:2f:9e:80:
         20:89:13:66:3c:2f:69:99:3a:fc:b7:bb:e8:03:4d:ee:da:18:
         a9:d6:2b:01:84:18:5e:b2:41:53:0a:5b:70:ff:46:8d:05:bb:
         d7:63:0f:00:f8:b0:06:b9:c7:29:fe:f4:18:f0:dd:fe:f1:01:
         00:53:fa:2f:47:ca:8a:fb:0f:4f:2e:a3:32:e8:ab:b9:7e:b0:
         08:15:f9:5d:b2:3e:37:04:30:60:0d:3d:8e:c7:2d:6b:f0:34:
         78:6f:a4:c0:1a:ae:f4:eb:51:c8:9e:8b:77:52:02:e0:d9:2e:
         bb:68:8b:98:e7:37:97:90:33:c1:41:ef:45:3e:6f:db:c5:d9:
         1d:dd:8f:77
-----BEGIN CERTIFICATE-----
MIIFcDCCBFigAwIBAgIBXjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFG
NzUzNzExMC8GA1UEBRMoREY1RkUyMUI3Qzk1NTIxNTkzNDQ3MTc5NEQ4QjA3MDY2
M0QyQjM0RTAeFw0yNTA1MDEwODAyMjBaFw0yNjAxMzEwMDAwMDBaMBgxFjAUBgNV
BAMTDTY4MTMyYThjLTZjZjAwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQCw1JVnhzK/qoRoeKxudTI/mEJZFXw/WjCyWvoMAe/mXw/Sq1c/yAWNi2QdSiIF
bLshosqlx7G1OU/+EXeEcW8VUqcrQSXozv0j+jmNcDPUls6qp5mLRy5ngybj5/ws
jPkHh6wEZr2lIDYscw+RnunnQ41EHBlriH8pSFchiDMvBC7DNnijOFC0K+W11TW6
d8/7EX92VSV12ruQgT6o7s7KxUc6eJpV6VPPfWGe7HTxP5y0loyCZXUjtNVX4h1t
i5x5A00zqxBFDPiOBFKtsB7G5pH0afQcX9qKOITi2Zvqt0JQzXAc7COnRBSjS9dN
il5CPugrlKZ82g5dN45lW6DDAgMBAAGjggKVMIICkTAdBgNVHQ4EFgQUTBWuLV/l
TQ1stvACV320b637K38wHwYDVR0jBBgwFoAU31/iG3yVUhWTRHF5TYsHBmPSs04w
DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUY3NTM3LzgwMkFFNjQ2QTI3
MTExRUZBMzkyRjA3OUM0RjlBRTAyLzMxX2lHM3lWVWhXVFJIRjVUWXNIQm1QU3Mw
NC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG
RDFGRjIvMzFfaUczeVZVaFdUUkhGNVRZc0hCbVBTczA0LmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwgcsGCCsGAQUFBwELBIG+MIG7MIGDBggrBgEFBQcw
C4Z3cnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG
NzUzNy84MDJBRTY0NkEyNzExMUVGQTM5MkYwNzlDNEY5QUUwMi85QjM1RjM0ODI2
NjIxMUYwOUU3QzM2NTdDNEY5QUUwMi5yb2EwMwYIKwYBBQUHMA2GJ2h0dHBzOi8v
cnJkcC5hcG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAfBggrBgEFBQcBBwEB/wQQ
MA4wDAQCAAEwBgMEAaD6CDANBgkqhkiG9w0BAQsFAAOCAQEAMeAWEdJpFwewfuuL
c2oth0G52mWGcWo9PauumYKxl+IzwMMNI0+0OBaQF3RVVHwTJNgKhSO+EKaxkymV
4URJoZJFR8cAnUwiO/O9D+5MmiKr1sU+xYC++q/XGONGUSsFfE9miWNVwSYm8VJQ
Khk+blxebsMI82Y/nfe0L56AIIkTZjwvaZk6/Le76ANN7toYqdYrAYQYXrJBUwpb
cP9GjQW712MPAPiwBrnHKf70GPDd/vEBAFP6L0fKivsPTy6jMuiruX6wCBX5XbI+
NwQwYA09jscta/A0eG+kwBqu9OtRyJ6Ld1IC4Nkuu2iLmOc3l5AzwUHvRT5v28XZ
Hd2Pdw==
-----END CERTIFICATE-----
Generated at Mon May 5 09:48:21 2025 by rpki-client on console.sobornost.net