Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A914E0FE/2F2B6FE2ABCA11EFA994D129C4F9AE02/C5D7AFBA502411F0881DEB19C4F9AE02.roa
File:                     C5D7AFBA502411F0881DEB19C4F9AE02.roa (raw, json)
Hash identifier:          Ti8eJO2oAD+cInPnRMrFT32zgx0G9iPebdag3c53iUo=
Subject key identifier:   0A:6C:DD:7B:CF:69:BA:56:65:C5:C2:76:89:82:42:D8:97:B4:B5:8D
Certificate issuer:       /CN=A914E0FE/serialNumber=964D08727DAEDAC74037AB9C43A508BADBCFDAFD
Certificate serial:       75
Authority key identifier: 96:4D:08:72:7D:AE:DA:C7:40:37:AB:9C:43:A5:08:BA:DB:CF:DA:FD
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/lk0Icn2u2sdAN6ucQ6UIutvP2v0.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A914E0FE/2F2B6FE2ABCA11EFA994D129C4F9AE02/C5D7AFBA502411F0881DEB19C4F9AE02.roa
Signing time:             Mon 23 Jun 2025 11:25:32 +0000
ROA not before:           Mon 23 Jun 2025 11:25:32 +0000
ROA not after:            Mon 02 Mar 2026 00:00:00 +0000
asID:                     153038
IP address blocks:        160.250.83.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A914E0FE/2F2B6FE2ABCA11EFA994D129C4F9AE02/lk0Icn2u2sdAN6ucQ6UIutvP2v0.crl
                          rsync://rpki.apnic.net/member_repository/A914E0FE/2F2B6FE2ABCA11EFA994D129C4F9AE02/lk0Icn2u2sdAN6ucQ6UIutvP2v0.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/lk0Icn2u2sdAN6ucQ6UIutvP2v0.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 10 Jul 2025 03:15:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 117 (0x75)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A914E0FE, serialNumber=964D08727DAEDAC74037AB9C43A508BADBCFDAFD
        Validity
            Not Before: Jun 23 11:25:32 2025 GMT
            Not After : Mar  2 00:00:00 2026 GMT
        Subject: CN=685939ab-7f61
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:94:c5:e3:e4:d2:6b:7f:74:67:97:d9:10:88:
                    cd:60:96:65:56:95:74:15:0d:81:9c:52:1f:cb:b4:
                    30:97:43:fd:fa:0c:b2:24:fc:4f:ca:5a:d3:02:e9:
                    2e:dc:eb:8b:9f:38:ba:39:b8:c1:6e:01:f2:25:9b:
                    ca:48:a2:01:60:9e:2c:75:70:60:16:ee:14:f1:f4:
                    96:84:d6:12:37:7c:88:47:d6:92:a2:50:56:28:67:
                    4c:7a:21:c1:f3:90:d4:11:51:57:b4:50:d3:4a:8d:
                    91:e6:86:ef:55:4d:52:8e:2d:90:66:34:2d:bc:89:
                    e5:63:0d:b2:e1:ca:6e:08:59:02:9f:b0:74:ad:bd:
                    85:0b:cf:2f:e7:be:7d:f1:c9:02:4d:9d:f3:df:fc:
                    9f:2d:80:d0:04:76:60:87:99:50:85:32:58:ec:89:
                    09:c9:43:a3:25:32:45:b0:4a:64:48:e1:7f:df:1a:
                    43:d0:f9:49:9e:43:ae:d6:bd:f8:21:98:a3:1d:78:
                    82:7c:4d:db:da:70:94:28:45:68:54:9d:0c:35:2b:
                    b6:3a:d8:cf:7a:af:21:60:4b:9d:7a:8b:fe:da:ab:
                    6c:80:1f:ac:6b:45:7e:e9:42:62:6e:ff:b9:5e:08:
                    80:3c:13:96:32:3d:69:53:8a:b9:de:67:7b:57:95:
                    78:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0A:6C:DD:7B:CF:69:BA:56:65:C5:C2:76:89:82:42:D8:97:B4:B5:8D
            X509v3 Authority Key Identifier:
                keyid:96:4D:08:72:7D:AE:DA:C7:40:37:AB:9C:43:A5:08:BA:DB:CF:DA:FD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A914E0FE/2F2B6FE2ABCA11EFA994D129C4F9AE02/lk0Icn2u2sdAN6ucQ6UIutvP2v0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/lk0Icn2u2sdAN6ucQ6UIutvP2v0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914E0FE/2F2B6FE2ABCA11EFA994D129C4F9AE02/C5D7AFBA502411F0881DEB19C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  160.250.83.0/24

    Signature Algorithm: sha256WithRSAEncryption
         7d:13:c0:7a:69:f9:89:59:40:c2:5b:b0:2e:97:3c:5a:c7:49:
         c7:16:12:d3:32:09:cd:8d:f4:89:53:02:dd:b1:3b:af:8c:b2:
         70:6f:c5:91:97:11:4a:d6:8e:13:31:f3:bd:b1:d8:84:de:35:
         1a:87:6d:cb:6c:fb:f0:4e:e0:9d:ad:3e:b9:a1:60:64:fd:59:
         06:13:9b:af:78:4c:5e:42:28:8d:8e:e1:f3:09:91:6a:0e:fe:
         a1:e3:d3:6b:c7:50:9d:8b:b0:06:a6:2e:9f:92:06:a4:6d:b7:
         ab:db:78:d8:21:21:14:89:71:e2:c7:a1:17:7c:71:ff:fe:d8:
         32:1a:a6:b6:74:a3:f9:74:a7:38:ad:d7:d7:d7:af:f5:26:15:
         98:30:70:51:7a:92:da:e8:ba:cd:c6:be:d6:22:1d:a6:0c:dd:
         ba:f0:8b:bf:97:6e:6e:9f:ce:13:ee:22:b2:8c:20:95:2c:0f:
         5d:f4:28:72:1c:35:3a:8a:8d:79:7d:e0:61:b1:5e:19:97:90:
         de:3c:93:65:1c:b0:96:f6:64:08:36:1a:79:99:52:6a:e0:8e:
         86:fa:c4:70:fe:e8:cc:24:77:d9:ba:93:92:77:b5:60:b0:5c:
         11:0a:f5:9e:70:f4:11:c8:df:b8:8b:17:1c:3e:91:3a:8c:9b:
         d6:ee:20:6a
-----BEGIN CERTIFICATE-----
MIIFcDCCBFigAwIBAgIBdTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE0
RTBGRTExMC8GA1UEBRMoOTY0RDA4NzI3REFFREFDNzQwMzdBQjlDNDNBNTA4QkFE
QkNGREFGRDAeFw0yNTA2MjMxMTI1MzJaFw0yNjAzMDIwMDAwMDBaMBgxFjAUBgNV
BAMTDTY4NTkzOWFiLTdmNjEwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQDblMXj5NJrf3Rnl9kQiM1glmVWlXQVDYGcUh/LtDCXQ/36DLIk/E/KWtMC6S7c
64ufOLo5uMFuAfIlm8pIogFgnix1cGAW7hTx9JaE1hI3fIhH1pKiUFYoZ0x6IcHz
kNQRUVe0UNNKjZHmhu9VTVKOLZBmNC28ieVjDbLhym4IWQKfsHStvYULzy/nvn3x
yQJNnfPf/J8tgNAEdmCHmVCFMljsiQnJQ6MlMkWwSmRI4X/fGkPQ+UmeQ67Wvfgh
mKMdeIJ8TdvacJQoRWhUnQw1K7Y62M96ryFgS516i/7aq2yAH6xrRX7pQmJu/7le
CIA8E5YyPWlTirneZ3tXlXirAgMBAAGjggKVMIICkTAdBgNVHQ4EFgQUCmzde89p
ulZlxcJ2iYJC2Je0tY0wHwYDVR0jBBgwFoAUlk0Icn2u2sdAN6ucQ6UIutvP2v0w
DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTRFMEZFLzJGMkI2RkUyQUJD
QTExRUZBOTk0RDEyOUM0RjlBRTAyL2xrMEljbjJ1MnNkQU42dWNRNlVJdXR2UDJ2
MC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG
RDFGRjIvbGswSWNuMnUyc2RBTjZ1Y1E2VUl1dHZQMnYwLmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwgcsGCCsGAQUFBwELBIG+MIG7MIGDBggrBgEFBQcw
C4Z3cnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0
RTBGRS8yRjJCNkZFMkFCQ0ExMUVGQTk5NEQxMjlDNEY5QUUwMi9DNUQ3QUZCQTUw
MjQxMUYwODgxREVCMTlDNEY5QUUwMi5yb2EwMwYIKwYBBQUHMA2GJ2h0dHBzOi8v
cnJkcC5hcG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAfBggrBgEFBQcBBwEB/wQQ
MA4wDAQCAAEwBgMEAKD6UzANBgkqhkiG9w0BAQsFAAOCAQEAfRPAemn5iVlAwluw
Lpc8WsdJxxYS0zIJzY30iVMC3bE7r4yycG/FkZcRStaOEzHzvbHYhN41Godty2z7
8E7gna0+uaFgZP1ZBhObr3hMXkIojY7h8wmRag7+oePTa8dQnYuwBqYun5IGpG23
q9t42CEhFIlx4sehF3xx//7YMhqmtnSj+XSnOK3X19ev9SYVmDBwUXqS2ui6zca+
1iIdpgzduvCLv5dubp/OE+4isowglSwPXfQochw1OoqNeX3gYbFeGZeQ3jyTZRyw
lvZkCDYaeZlSauCOhvrEcP7ozCR32bqTkne1YLBcEQr1nnD0EcjfuIsXHD6ROoyb
1u4gag==
-----END CERTIFICATE-----
Generated at Fri Jul 4 06:44:06 2025 by rpki-client