Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A917799C/2D335E6A554411F09342AC0CC4F9AE02/1A10CA38554511F0BE9D290EC4F9AE02.roa
File:                     1A10CA38554511F0BE9D290EC4F9AE02.roa (raw, json)
Hash identifier:          +cgq7m1m+3yCjZbwy4Qcjluah/ZFibIuVd5FM/B6ZOU=
Subject key identifier:   9A:11:B1:73:09:F8:62:8C:DF:4A:90:84:9A:8A:63:15:2E:5F:81:CA
Certificate issuer:       /CN=A917799C/serialNumber=AD070240293ACDC524CA1336582D70C219FCC7E0
Certificate serial:       02
Authority key identifier: AD:07:02:40:29:3A:CD:C5:24:CA:13:36:58:2D:70:C2:19:FC:C7:E0
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/rQcCQCk6zcUkyhM2WC1wwhn8x-A.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A917799C/2D335E6A554411F09342AC0CC4F9AE02/1A10CA38554511F0BE9D290EC4F9AE02.roa
Signing time:             Sun 29 Jun 2025 23:59:33 +0000
ROA not before:           Sun 29 Jun 2025 23:59:33 +0000
ROA not after:            Fri 01 May 2026 00:00:00 +0000
asID:                     151496
IP address blocks:        165.101.57.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A917799C/2D335E6A554411F09342AC0CC4F9AE02/rQcCQCk6zcUkyhM2WC1wwhn8x-A.crl
                          rsync://rpki.apnic.net/member_repository/A917799C/2D335E6A554411F09342AC0CC4F9AE02/rQcCQCk6zcUkyhM2WC1wwhn8x-A.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/rQcCQCk6zcUkyhM2WC1wwhn8x-A.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 10 Jul 2025 03:15:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2 (0x2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A917799C, serialNumber=AD070240293ACDC524CA1336582D70C219FCC7E0
        Validity
            Not Before: Jun 29 23:59:33 2025 GMT
            Not After : May  1 00:00:00 2026 GMT
        Subject: CN=6861d364-7dd2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:5a:37:e8:b5:25:ff:ff:92:c9:ba:3f:2b:91:
                    c9:c9:44:ad:c6:0c:56:c9:a6:8e:eb:12:33:d4:e6:
                    09:ad:69:fe:9f:fc:85:ac:40:15:a6:df:94:13:00:
                    30:bd:27:39:54:40:c9:f8:33:82:a0:9f:a3:c4:3a:
                    8b:66:4b:0e:2b:59:fc:8c:94:bc:9b:1c:4e:e2:2f:
                    75:fe:d9:6d:c9:85:42:fb:52:1b:ba:17:b8:30:74:
                    57:0f:c5:4d:d4:02:a1:f0:32:7b:be:55:7c:77:89:
                    dc:78:6c:63:03:5c:a0:69:8a:60:1f:8d:77:51:f0:
                    47:24:4f:7d:e4:c7:64:4c:2c:a5:b0:fd:1e:e7:90:
                    5b:4b:b9:2f:79:24:a6:ea:cc:dd:c8:04:f4:18:ec:
                    ee:a0:2c:47:27:5f:2f:8c:b9:76:48:50:0f:6e:bc:
                    24:e3:d4:62:c9:15:07:08:a1:47:5a:52:a9:aa:5f:
                    a3:a9:b8:07:90:41:b8:aa:68:83:b6:5d:77:b9:6d:
                    83:dc:3a:67:87:9c:3c:0e:88:eb:75:80:c0:d7:52:
                    87:c9:67:53:e9:69:c8:65:db:66:b0:9b:af:24:ea:
                    35:b3:c2:b6:70:a3:b7:fa:46:e8:83:12:6e:f0:ce:
                    66:4d:4f:31:21:fa:b4:d8:c0:a1:5d:c5:da:4d:f8:
                    19:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9A:11:B1:73:09:F8:62:8C:DF:4A:90:84:9A:8A:63:15:2E:5F:81:CA
            X509v3 Authority Key Identifier:
                keyid:AD:07:02:40:29:3A:CD:C5:24:CA:13:36:58:2D:70:C2:19:FC:C7:E0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A917799C/2D335E6A554411F09342AC0CC4F9AE02/rQcCQCk6zcUkyhM2WC1wwhn8x-A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/rQcCQCk6zcUkyhM2WC1wwhn8x-A.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917799C/2D335E6A554411F09342AC0CC4F9AE02/1A10CA38554511F0BE9D290EC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  165.101.57.0/24

    Signature Algorithm: sha256WithRSAEncryption
         24:ea:8e:4c:75:ea:de:bf:f8:9e:50:f2:90:76:f0:fe:8e:de:
         b5:d1:d8:d6:aa:fe:91:fa:ac:1a:02:28:3e:9e:6c:dd:b0:d0:
         9e:c7:13:1f:1f:19:ed:bf:f1:28:05:55:44:6b:b3:41:b2:48:
         7d:53:25:90:a3:b7:2d:18:d8:5e:20:7b:85:24:6c:a6:0f:69:
         ec:b0:b4:80:89:a6:5b:c7:27:35:aa:47:45:40:23:2b:e3:37:
         b4:93:9b:b6:53:16:28:e1:0b:ad:fc:c0:01:f0:fb:f6:f8:63:
         f9:b2:be:6d:a7:65:a3:84:3c:b7:43:bf:1b:31:48:9b:cd:a8:
         a2:eb:47:a9:e0:77:19:22:67:30:aa:69:19:d9:e4:f3:e9:61:
         4d:5d:a3:b6:05:dc:5d:a0:54:3e:e8:d8:f3:e5:39:a6:d4:9c:
         9d:de:94:a9:7d:f0:85:15:f2:e5:fa:07:34:73:72:87:ae:ce:
         2d:d2:c6:a2:8b:e9:47:f9:e4:7d:e3:a1:6b:35:21:8f:0d:c9:
         9e:4e:5a:26:06:80:32:dd:ee:59:69:c1:11:1b:22:b0:0a:a8:
         f3:1e:44:38:85:c5:e4:21:11:a4:6b:b6:fd:31:8b:1b:7f:d4:
         85:5c:06:ca:4f:9e:88:79:82:b1:92:49:d7:dc:94:cf:5a:9d:
         74:2f:70:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 4 18:04:10 2025 by rpki-client