Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9169A9C/7114843EBC3811EEA515313BC4F9AE02/183B0B384E6A11F08A1BF84DC4F9AE02.roa
File:                     183B0B384E6A11F08A1BF84DC4F9AE02.roa (raw, json)
Hash identifier:          Dmmpxo/YJEMbai3LZXF50f2qPKmpjF90qTq1CudRiYE=
Subject key identifier:   DD:D4:30:94:A5:A0:6D:82:F5:FE:B9:61:0D:FE:37:AC:EC:A2:EB:D0
Certificate issuer:       /CN=A9169A9C/serialNumber=F47A42CA929D837E17932BCA07D65F822C9644CB
Certificate serial:       010D
Authority key identifier: F4:7A:42:CA:92:9D:83:7E:17:93:2B:CA:07:D6:5F:82:2C:96:44:CB
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/9HpCypKdg34XkyvKB9ZfgiyWRMs.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9169A9C/7114843EBC3811EEA515313BC4F9AE02/183B0B384E6A11F08A1BF84DC4F9AE02.roa
Signing time:             Sat 21 Jun 2025 06:36:43 +0000
ROA not before:           Sat 21 Jun 2025 06:36:43 +0000
ROA not after:            Mon 02 Mar 2026 00:00:00 +0000
asID:                     151633
IP address blocks:        157.15.50.0/24 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9169A9C/7114843EBC3811EEA515313BC4F9AE02/9HpCypKdg34XkyvKB9ZfgiyWRMs.crl
                          rsync://rpki.apnic.net/member_repository/A9169A9C/7114843EBC3811EEA515313BC4F9AE02/9HpCypKdg34XkyvKB9ZfgiyWRMs.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/9HpCypKdg34XkyvKB9ZfgiyWRMs.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 10 Jul 2025 03:15:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 269 (0x10d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9169A9C, serialNumber=F47A42CA929D837E17932BCA07D65F822C9644CB
        Validity
            Not Before: Jun 21 06:36:43 2025 GMT
            Not After : Mar  2 00:00:00 2026 GMT
        Subject: CN=685652fb-a194
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:40:ea:68:ff:12:ef:c6:d3:df:fb:08:a5:39:
                    85:90:5e:1b:78:22:19:c4:6e:b7:f2:a6:fa:1e:d5:
                    8b:dc:45:ba:a3:74:71:7d:bb:d3:be:a7:94:90:f3:
                    52:a1:21:29:84:5c:dd:c2:52:af:8d:6a:54:6d:a9:
                    d0:24:1d:19:ea:13:0e:6a:17:97:10:d5:81:00:6b:
                    20:9e:4c:ad:9c:8a:04:fb:39:6d:67:6e:28:a1:b6:
                    54:a2:e3:96:0d:da:cb:84:53:36:cd:b7:31:5e:c8:
                    e2:93:57:08:cf:a1:ba:a7:d6:f9:fe:d0:53:40:9d:
                    7e:6f:92:a1:32:27:2c:94:c3:45:98:eb:89:e6:45:
                    a8:2d:13:97:79:b4:d6:b2:d9:d8:a8:c8:74:10:77:
                    0e:11:62:ea:1a:25:43:ef:39:d5:f8:f6:4b:a0:bb:
                    18:20:95:c3:e3:81:fc:b1:4f:57:f6:cb:45:a5:5b:
                    37:60:13:b9:12:ba:c9:08:57:c3:86:cb:50:c8:29:
                    6e:8a:01:07:26:82:5c:8a:72:ed:19:a3:1b:ce:3c:
                    2e:53:3e:ee:fc:d3:ee:24:c4:60:64:2d:ac:b6:b7:
                    ca:6c:48:e6:af:bf:ff:3e:0b:4d:d8:35:aa:57:e6:
                    ea:24:ca:5c:4b:d3:25:7e:dd:a6:26:4b:ba:a8:ae:
                    59:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DD:D4:30:94:A5:A0:6D:82:F5:FE:B9:61:0D:FE:37:AC:EC:A2:EB:D0
            X509v3 Authority Key Identifier:
                keyid:F4:7A:42:CA:92:9D:83:7E:17:93:2B:CA:07:D6:5F:82:2C:96:44:CB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9169A9C/7114843EBC3811EEA515313BC4F9AE02/9HpCypKdg34XkyvKB9ZfgiyWRMs.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/9HpCypKdg34XkyvKB9ZfgiyWRMs.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9169A9C/7114843EBC3811EEA515313BC4F9AE02/183B0B384E6A11F08A1BF84DC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  157.15.50.0/24

    Signature Algorithm: sha256WithRSAEncryption
         38:f5:36:5e:5e:d1:62:6d:92:7d:da:eb:fb:f4:aa:56:14:5c:
         1a:b8:07:41:6a:a3:57:b1:35:c7:a0:d8:27:38:9a:c5:ef:ef:
         54:33:a1:10:0e:a4:76:2f:4a:ba:32:d8:73:d2:f1:28:01:37:
         06:fd:f1:6b:62:67:c4:12:0d:8c:92:4f:68:e2:3e:07:9b:8a:
         67:0a:78:3e:b2:5e:3d:69:dd:7a:82:84:e4:85:e7:6b:1d:0a:
         7f:7d:69:7e:16:4d:f9:73:13:6e:05:ff:f2:8b:3a:d6:ff:d9:
         71:f5:18:35:0c:0e:ba:2b:eb:0f:ad:73:b0:76:09:55:bd:46:
         b0:17:74:31:8c:35:3b:91:38:46:30:1d:56:46:0d:9a:54:7f:
         e2:97:dd:6c:53:83:fa:d9:cb:9f:d4:14:6a:ac:38:ef:ac:8f:
         5c:47:bd:5d:05:0d:d0:20:39:a8:f4:c9:c7:f4:d0:99:74:ca:
         45:f3:b9:6a:01:b7:56:68:06:f3:72:ad:60:24:6a:ff:e3:27:
         dc:2e:b4:70:31:bf:1a:13:dd:ec:bf:38:90:7e:04:80:34:f8:
         51:d8:9d:e2:f8:8c:32:1f:28:2b:61:58:67:ba:c5:c1:60:d5:
         18:ce:1b:f9:1f:bd:45:e7:9e:a0:7b:95:9f:ce:30:d8:6c:fc:
         ff:53:5b:4c
-----BEGIN CERTIFICATE-----
MIIFcTCCBFmgAwIBAgICAQ0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NjlBOUMxMTAvBgNVBAUTKEY0N0E0MkNBOTI5RDgzN0UxNzkzMkJDQTA3RDY1Rjgy
MkM5NjQ0Q0IwHhcNMjUwNjIxMDYzNjQzWhcNMjYwMzAyMDAwMDAwWjAYMRYwFAYD
VQQDEw02ODU2NTJmYi1hMTk0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAm0DqaP8S78bT3/sIpTmFkF4beCIZxG638qb6HtWL3EW6o3RxfbvTvqeUkPNS
oSEphFzdwlKvjWpUbanQJB0Z6hMOaheXENWBAGsgnkytnIoE+zltZ24oobZUouOW
DdrLhFM2zbcxXsjik1cIz6G6p9b5/tBTQJ1+b5KhMicslMNFmOuJ5kWoLROXebTW
stnYqMh0EHcOEWLqGiVD7znV+PZLoLsYIJXD44H8sU9X9stFpVs3YBO5ErrJCFfD
hstQyCluigEHJoJcinLtGaMbzjwuUz7u/NPuJMRgZC2strfKbEjmr7//PgtN2DWq
V+bqJMpcS9Mlft2mJku6qK5Z5wIDAQABo4IClTCCApEwHQYDVR0OBBYEFN3UMJSl
oG2C9f65YQ3+N6zsouvQMB8GA1UdIwQYMBaAFPR6QsqSnYN+F5MrygfWX4IslkTL
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2OUE5Qy83MTE0ODQzRUJD
MzgxMUVFQTUxNTMxM0JDNEY5QUUwMi85SHBDeXBLZGczNFhreXZLQjlaZmdpeVdS
TXMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy
RkQxRkYyLzlIcEN5cEtkZzM0WGt5dktCOVpmZ2l5V1JNcy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
NjlBOUMvNzExNDg0M0VCQzM4MTFFRUE1MTUzMTNCQzRGOUFFMDIvMTgzQjBCMzg0
RTZBMTFGMDhBMUJGODREQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E
EDAOMAwEAgABMAYDBACdDzIwDQYJKoZIhvcNAQELBQADggEBADj1Nl5e0WJtkn3a
6/v0qlYUXBq4B0Fqo1exNceg2Cc4msXv71QzoRAOpHYvSroy2HPS8SgBNwb98Wti
Z8QSDYyST2jiPgebimcKeD6yXj1p3XqChOSF52sdCn99aX4WTflzE24F//KLOtb/
2XH1GDUMDror6w+tc7B2CVW9RrAXdDGMNTuROEYwHVZGDZpUf+KX3WxTg/rZy5/U
FGqsOO+sj1xHvV0FDdAgOaj0ycf00Jl0ykXzuWoBt1ZoBvNyrWAkav/jJ9wutHAx
vxoT3ey/OJB+BIA0+FHYneL4jDIfKCthWGe6xcFg1RjOG/kfvUXnnqB7lZ/OMNhs
/P9TW0w=
-----END CERTIFICATE-----
Generated at Thu Jul 3 18:35:09 2025 by rpki-client