Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A917E42D/66315CC0963311EEA3AAC418C4F9AE02/DA1C00CE26F411F097943C73C4F9AE02.roa
File:                     DA1C00CE26F411F097943C73C4F9AE02.roa (raw, json)
Hash identifier:          CfZU7daywOHQvFGh6BufBiOThF5L/4BKQajPooLtqOE=
Subject key identifier:   5F:2F:C0:30:70:99:17:A9:16:37:51:BB:77:F0:4F:84:9C:4A:BA:05
Certificate issuer:       /CN=A917E42D/serialNumber=5A7C384B296CFC7F24260F05108D67D60C6EADCE
Certificate serial:       0116
Authority key identifier: 5A:7C:38:4B:29:6C:FC:7F:24:26:0F:05:10:8D:67:D6:0C:6E:AD:CE
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Wnw4Syls_H8kJg8FEI1n1gxurc4.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A917E42D/66315CC0963311EEA3AAC418C4F9AE02/DA1C00CE26F411F097943C73C4F9AE02.roa
Signing time:             Fri 02 May 2025 01:29:12 +0000
ROA not before:           Fri 02 May 2025 01:29:12 +0000
ROA not after:            Tue 30 Dec 2025 00:00:00 +0000
asID:                     38715
IP address blocks:        203.173.80.0/21 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A917E42D/66315CC0963311EEA3AAC418C4F9AE02/Wnw4Syls_H8kJg8FEI1n1gxurc4.crl
                          rsync://rpki.apnic.net/member_repository/A917E42D/66315CC0963311EEA3AAC418C4F9AE02/Wnw4Syls_H8kJg8FEI1n1gxurc4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Wnw4Syls_H8kJg8FEI1n1gxurc4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 24 May 2025 02:50:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 278 (0x116)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A917E42D, serialNumber=5A7C384B296CFC7F24260F05108D67D60C6EADCE
        Validity
            Not Before: May  2 01:29:12 2025 GMT
            Not After : Dec 30 00:00:00 2025 GMT
        Subject: CN=68141fe8-7ff4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:2b:25:51:19:0c:d6:97:6e:0d:9b:95:5d:3e:
                    65:19:d1:65:ea:a0:c7:af:be:9a:19:0c:fe:37:45:
                    35:e8:a2:49:95:e3:4b:2e:44:1a:9b:cc:74:6e:70:
                    09:b7:68:9b:43:25:79:66:eb:44:6d:e0:9f:02:72:
                    c2:50:95:43:c0:dd:29:df:6c:0f:76:e3:84:31:9f:
                    71:80:7e:39:0a:47:95:db:d9:3e:17:37:91:10:d8:
                    2b:25:d7:60:f7:5c:45:5e:94:44:c3:9e:45:e6:f1:
                    39:24:c8:7c:31:a6:07:06:a1:9c:b0:4c:50:8b:f3:
                    41:ac:6a:63:bd:01:5f:d3:82:37:6b:37:c3:97:27:
                    e1:4d:4a:1f:1b:aa:36:ba:d6:b1:c5:84:6e:0c:7a:
                    dc:82:87:33:b5:9f:be:fb:22:b2:dc:5d:3b:80:35:
                    19:44:b8:35:d6:26:f9:0d:20:60:b7:ee:50:e3:5c:
                    eb:85:4f:69:21:50:d9:d6:10:3b:af:f3:b3:b1:4e:
                    6b:ba:00:21:c0:af:7c:85:3e:7a:20:aa:53:fe:85:
                    9a:9b:f8:94:4e:f0:84:f2:40:f1:a7:e8:58:28:61:
                    f7:88:00:44:07:fd:89:fd:25:35:1d:6f:e9:71:96:
                    eb:5b:c7:10:d1:7e:d1:77:8a:03:4d:14:f8:9d:0e:
                    de:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5F:2F:C0:30:70:99:17:A9:16:37:51:BB:77:F0:4F:84:9C:4A:BA:05
            X509v3 Authority Key Identifier:
                keyid:5A:7C:38:4B:29:6C:FC:7F:24:26:0F:05:10:8D:67:D6:0C:6E:AD:CE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A917E42D/66315CC0963311EEA3AAC418C4F9AE02/Wnw4Syls_H8kJg8FEI1n1gxurc4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Wnw4Syls_H8kJg8FEI1n1gxurc4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917E42D/66315CC0963311EEA3AAC418C4F9AE02/DA1C00CE26F411F097943C73C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  203.173.80.0/21

    Signature Algorithm: sha256WithRSAEncryption
         06:e6:f4:0e:58:d1:cd:d8:31:07:34:29:37:17:96:00:64:55:
         8e:bc:e1:f1:8f:c2:3d:36:a4:f8:4e:9c:92:9d:09:73:77:a1:
         91:49:d8:73:6e:fc:64:9b:6d:6c:db:66:56:7b:9f:44:7a:20:
         e0:c4:9d:bd:ae:02:0c:4b:86:d5:e1:61:04:42:8a:82:74:30:
         35:26:e7:a6:1e:3c:e2:70:87:fd:45:15:87:5d:73:b7:62:c9:
         de:26:31:fc:c9:cf:88:b0:90:7f:cc:09:40:9c:69:3e:99:5a:
         7a:2a:d9:d9:c7:c0:3a:6c:a4:35:54:d9:ed:b7:04:62:c8:00:
         c8:01:d2:fe:33:b9:23:24:3f:a9:db:82:ff:ef:df:30:f1:92:
         57:d3:4c:33:60:30:38:f7:9e:0c:65:53:f5:6c:f2:39:cb:03:
         cd:0a:0c:dd:2e:4a:a6:dd:e1:3f:ba:ef:18:b8:41:03:c7:84:
         ec:cc:cf:97:f8:53:bd:95:fa:53:94:0f:e4:76:91:c9:51:eb:
         27:8a:6f:dd:ac:59:38:65:ab:fb:ac:f7:df:ab:33:e8:a4:db:
         eb:d5:19:ba:7f:4d:a4:e7:65:4a:72:7c:8b:8b:82:5e:5f:a3:
         9c:58:39:8d:fb:74:89:e6:ab:a3:ae:64:09:82:aa:33:b4:d1:
         bf:aa:ed:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 17 08:34:54 2025 by rpki-client