Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A915A4AF/466466CA69F611EFB2B8AF50C4F9AE02/0E89AC7651D911F0B26BF882C4F9AE02.roa
File:                     0E89AC7651D911F0B26BF882C4F9AE02.roa (raw, json)
Hash identifier:          nvv0oHQNlQesLC7oMYNtNrlkaktCwof5cKk9/EWjMoo=
Subject key identifier:   20:70:2C:58:B1:FC:48:7D:E1:88:F2:B7:66:7A:D1:D9:CF:F3:4C:39
Certificate issuer:       /CN=A915A4AF/serialNumber=CEE48764AA2C16F75A067244EBA5866974E1CED6
Certificate serial:       99
Authority key identifier: CE:E4:87:64:AA:2C:16:F7:5A:06:72:44:EB:A5:86:69:74:E1:CE:D6
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/zuSHZKosFvdaBnJE66WGaXThztY.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A915A4AF/466466CA69F611EFB2B8AF50C4F9AE02/0E89AC7651D911F0B26BF882C4F9AE02.roa
Signing time:             Wed 25 Jun 2025 15:28:34 +0000
ROA not before:           Wed 25 Jun 2025 15:28:34 +0000
ROA not after:            Tue 30 Dec 2025 00:00:00 +0000
asID:                     141342
IP address blocks:        160.30.237.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A915A4AF/466466CA69F611EFB2B8AF50C4F9AE02/zuSHZKosFvdaBnJE66WGaXThztY.crl
                          rsync://rpki.apnic.net/member_repository/A915A4AF/466466CA69F611EFB2B8AF50C4F9AE02/zuSHZKosFvdaBnJE66WGaXThztY.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/zuSHZKosFvdaBnJE66WGaXThztY.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 10 Jul 2025 03:15:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 153 (0x99)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A915A4AF, serialNumber=CEE48764AA2C16F75A067244EBA5866974E1CED6
        Validity
            Not Before: Jun 25 15:28:34 2025 GMT
            Not After : Dec 30 00:00:00 2025 GMT
        Subject: CN=685c15a2-a2a4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:07:a0:36:2d:1e:d7:b6:04:f6:b3:bc:3d:9f:
                    06:f2:3f:5a:51:4b:06:87:fd:86:51:0b:14:6c:ec:
                    32:9f:9e:08:3c:56:b3:6d:ed:e5:2f:55:9c:a2:56:
                    8e:84:2b:ce:eb:e7:af:0b:6f:27:be:47:2f:88:fc:
                    e1:c8:24:87:40:fa:0f:e3:ba:72:1c:a2:c3:02:fd:
                    81:1c:e3:aa:ca:13:d8:e1:27:0d:3e:f5:ea:7f:32:
                    b3:76:84:3c:90:f4:fa:42:2c:28:54:31:21:7b:d4:
                    9c:97:b3:fd:30:06:fc:80:59:55:5b:6b:53:0f:72:
                    ca:9f:93:7d:89:98:d3:6f:c2:6b:08:34:9c:a6:27:
                    d4:ca:29:82:e4:13:25:7a:49:b9:e1:8a:48:da:46:
                    25:ea:35:d0:a1:4a:8a:32:02:46:68:11:a2:1d:b3:
                    18:60:85:17:ad:00:e3:35:83:c4:6d:b1:42:9a:29:
                    49:38:b3:ca:8f:6c:68:19:11:d9:83:3e:c6:70:60:
                    da:66:42:4c:10:c1:71:bc:8b:06:f1:c1:21:c9:24:
                    0d:0a:35:29:70:51:d9:83:5e:f5:7a:7b:48:74:82:
                    8e:05:d9:db:9d:03:bc:6f:8c:de:f4:12:7b:6e:6d:
                    ef:ee:9c:74:ba:bb:c5:b1:6f:75:00:98:76:c3:b6:
                    fa:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                20:70:2C:58:B1:FC:48:7D:E1:88:F2:B7:66:7A:D1:D9:CF:F3:4C:39
            X509v3 Authority Key Identifier:
                keyid:CE:E4:87:64:AA:2C:16:F7:5A:06:72:44:EB:A5:86:69:74:E1:CE:D6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A915A4AF/466466CA69F611EFB2B8AF50C4F9AE02/zuSHZKosFvdaBnJE66WGaXThztY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/zuSHZKosFvdaBnJE66WGaXThztY.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915A4AF/466466CA69F611EFB2B8AF50C4F9AE02/0E89AC7651D911F0B26BF882C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  160.30.237.0/24

    Signature Algorithm: sha256WithRSAEncryption
         74:cc:56:78:1b:10:1a:9f:91:c3:70:fe:1c:f6:c4:8a:07:31:
         c3:c3:45:b9:d4:49:4b:ef:86:02:31:8b:b4:0d:b2:68:d3:fd:
         e9:9f:45:68:b6:c3:f6:a5:9f:ae:54:39:40:a9:52:b8:14:0c:
         cc:16:1b:13:62:0d:79:e1:8e:00:b8:ea:5f:f6:44:dd:5e:29:
         eb:a0:5d:b3:5d:2d:31:6a:e5:98:2f:38:9b:4d:69:4e:84:c0:
         1c:b8:47:bd:dd:66:b7:88:83:77:85:36:6e:de:f4:28:01:ee:
         4d:d0:8f:5b:80:90:11:47:29:18:1d:9e:1a:01:30:73:1e:2b:
         4e:d1:71:60:67:bf:8e:3f:b0:ed:2a:e1:f2:24:61:fc:ac:d9:
         c7:9b:5c:93:ce:6d:11:2e:bd:a0:f8:9c:ca:a6:e8:c7:39:3a:
         d3:8f:ef:d2:6c:69:41:83:16:3c:4c:a9:da:7a:46:fe:89:f4:
         36:da:81:ba:b8:db:3d:df:79:9c:eb:4a:75:cf:8e:5d:1a:dc:
         57:be:76:29:06:da:ae:ee:a2:e2:19:4f:7b:b4:d8:3d:86:8d:
         10:a8:30:cc:6d:7f:81:1d:c3:9d:56:2b:8e:19:4a:7f:26:63:
         98:3c:6c:ab:8f:b0:6e:3a:ee:6c:94:e5:fb:72:94:3a:95:ce:
         c2:7d:92:64
-----BEGIN CERTIFICATE-----
MIIFcTCCBFmgAwIBAgICAJkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NUE0QUYxMTAvBgNVBAUTKENFRTQ4NzY0QUEyQzE2Rjc1QTA2NzI0NEVCQTU4NjY5
NzRFMUNFRDYwHhcNMjUwNjI1MTUyODM0WhcNMjUxMjMwMDAwMDAwWjAYMRYwFAYD
VQQDEw02ODVjMTVhMi1hMmE0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEArgegNi0e17YE9rO8PZ8G8j9aUUsGh/2GUQsUbOwyn54IPFazbe3lL1WcolaO
hCvO6+evC28nvkcviPzhyCSHQPoP47pyHKLDAv2BHOOqyhPY4ScNPvXqfzKzdoQ8
kPT6QiwoVDEhe9Scl7P9MAb8gFlVW2tTD3LKn5N9iZjTb8JrCDScpifUyimC5BMl
ekm54YpI2kYl6jXQoUqKMgJGaBGiHbMYYIUXrQDjNYPEbbFCmilJOLPKj2xoGRHZ
gz7GcGDaZkJMEMFxvIsG8cEhySQNCjUpcFHZg171entIdIKOBdnbnQO8b4ze9BJ7
bm3v7px0urvFsW91AJh2w7b6lwIDAQABo4IClTCCApEwHQYDVR0OBBYEFCBwLFix
/Eh94Yjyt2Z60dnP80w5MB8GA1UdIwQYMBaAFM7kh2SqLBb3WgZyROulhml04c7W
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1QTRBRi80NjY0NjZDQTY5
RjYxMUVGQjJCOEFGNTBDNEY5QUUwMi96dVNIWktvc0Z2ZGFCbkpFNjZXR2FYVGh6
dFkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy
RkQxRkYyL3p1U0haS29zRnZkYUJuSkU2NldHYVhUaHp0WS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
NUE0QUYvNDY2NDY2Q0E2OUY2MTFFRkIyQjhBRjUwQzRGOUFFMDIvMEU4OUFDNzY1
MUQ5MTFGMEIyNkJGODgyQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E
EDAOMAwEAgABMAYDBACgHu0wDQYJKoZIhvcNAQELBQADggEBAHTMVngbEBqfkcNw
/hz2xIoHMcPDRbnUSUvvhgIxi7QNsmjT/emfRWi2w/aln65UOUCpUrgUDMwWGxNi
DXnhjgC46l/2RN1eKeugXbNdLTFq5ZgvOJtNaU6EwBy4R73dZreIg3eFNm7e9CgB
7k3Qj1uAkBFHKRgdnhoBMHMeK07RcWBnv44/sO0q4fIkYfys2cebXJPObREuvaD4
nMqm6Mc5OtOP79JsaUGDFjxMqdp6Rv6J9Dbagbq42z3feZzrSnXPjl0a3Fe+dikG
2q7uouIZT3u02D2GjRCoMMxtf4Edw51WK44ZSn8mY5g8bKuPsG467myU5ftylDqV
zsJ9kmQ=
-----END CERTIFICATE-----
Generated at Fri Jul 4 07:28:20 2025 by rpki-client