Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A918549C/E6AB2CDE4A3111EFB7BBD51CC4F9AE02/D5C6712C2BF811F0A209EF6DC4F9AE02.roa
File:                     D5C6712C2BF811F0A209EF6DC4F9AE02.roa (raw, json)
Hash identifier:          8rr+Ae0hpqDQA95PGvgN3goNJqA35l83x4zl3ssPb/c=
Subject key identifier:   FB:F7:94:2C:53:D0:2A:AA:43:1B:0C:51:EA:F6:AF:FD:F5:CC:78:E9
Certificate issuer:       /CN=A918549C/serialNumber=52EDFEDFEA1535C13EE8A00E55FC7D51446D67D4
Certificate serial:       A1
Authority key identifier: 52:ED:FE:DF:EA:15:35:C1:3E:E8:A0:0E:55:FC:7D:51:44:6D:67:D4
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Uu3-3-oVNcE-6KAOVfx9UURtZ9Q.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918549C/E6AB2CDE4A3111EFB7BBD51CC4F9AE02/D5C6712C2BF811F0A209EF6DC4F9AE02.roa
Signing time:             Thu 08 May 2025 10:40:19 +0000
ROA not before:           Thu 08 May 2025 10:40:19 +0000
ROA not after:            Thu 28 May 2026 00:00:00 +0000
asID:                     135391
IP address blocks:        163.223.77.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918549C/E6AB2CDE4A3111EFB7BBD51CC4F9AE02/Uu3-3-oVNcE-6KAOVfx9UURtZ9Q.crl
                          rsync://rpki.apnic.net/member_repository/A918549C/E6AB2CDE4A3111EFB7BBD51CC4F9AE02/Uu3-3-oVNcE-6KAOVfx9UURtZ9Q.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Uu3-3-oVNcE-6KAOVfx9UURtZ9Q.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 20 May 2025 05:32:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 161 (0xa1)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918549C, serialNumber=52EDFEDFEA1535C13EE8A00E55FC7D51446D67D4
        Validity
            Not Before: May  8 10:40:19 2025 GMT
            Not After : May 28 00:00:00 2026 GMT
        Subject: CN=681c8a12-6dd5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:78:24:2c:80:4d:1f:c0:9c:ba:55:e9:f3:ee:
                    d4:60:09:d3:67:8a:73:06:80:c5:fe:01:f4:31:33:
                    e7:21:da:29:73:71:0b:e2:4c:35:7e:f8:cb:3c:a3:
                    c7:53:00:4c:0c:14:91:e6:25:49:ef:8d:8d:58:af:
                    51:71:2b:7c:42:30:b7:0c:a8:ca:45:0c:67:86:67:
                    d3:e5:d1:a3:62:92:0e:a7:2b:c6:31:ea:c5:76:38:
                    7b:b0:d4:c4:f2:da:a9:8c:68:ec:79:fe:8c:6b:11:
                    4f:4f:a2:79:c5:46:7b:8e:e7:55:d5:72:01:94:ad:
                    d5:9c:34:b9:cf:ec:8a:96:ef:b9:4e:a1:74:57:4b:
                    51:07:06:0e:fb:1b:57:67:f3:85:28:83:78:18:94:
                    04:b8:d2:93:e8:63:6e:15:0d:9d:b1:91:43:ec:fa:
                    ad:8b:27:67:41:14:c6:d4:5e:5b:ac:a0:5e:7a:ca:
                    01:21:b4:7d:c7:42:3c:92:24:e4:de:07:7b:3b:a4:
                    5a:c2:dd:ff:18:6f:f5:18:cb:d6:95:e5:ae:84:1c:
                    9c:10:ef:89:ed:8b:19:53:57:6c:8f:b5:a6:ae:51:
                    d1:8f:72:5c:4f:77:0a:d1:75:a0:bb:03:e3:83:fc:
                    2c:60:c2:71:d3:b6:7f:0f:06:75:b9:62:9c:90:57:
                    c4:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FB:F7:94:2C:53:D0:2A:AA:43:1B:0C:51:EA:F6:AF:FD:F5:CC:78:E9
            X509v3 Authority Key Identifier:
                keyid:52:ED:FE:DF:EA:15:35:C1:3E:E8:A0:0E:55:FC:7D:51:44:6D:67:D4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918549C/E6AB2CDE4A3111EFB7BBD51CC4F9AE02/Uu3-3-oVNcE-6KAOVfx9UURtZ9Q.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Uu3-3-oVNcE-6KAOVfx9UURtZ9Q.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918549C/E6AB2CDE4A3111EFB7BBD51CC4F9AE02/D5C6712C2BF811F0A209EF6DC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  163.223.77.0/24

    Signature Algorithm: sha256WithRSAEncryption
         d0:0f:be:4c:c5:d5:47:0d:a0:17:44:b7:a2:9d:79:10:22:4a:
         c6:b0:5e:6a:39:af:9d:5b:e8:1f:b6:eb:d2:16:3d:bb:62:a5:
         b1:34:82:16:0d:82:ae:84:aa:e6:d9:31:ff:19:a4:ef:10:8e:
         3e:a9:3b:47:c0:27:82:89:41:96:a2:a1:6c:89:3e:d2:4d:1e:
         f5:64:ec:0f:a2:f4:c7:a1:c9:35:97:9c:b8:80:ad:42:39:46:
         04:f8:6e:4a:e4:98:d0:ed:f9:76:03:01:68:e0:6c:e4:1e:99:
         64:3e:18:69:d9:d7:35:f1:97:6d:62:88:b7:f6:65:41:63:24:
         2c:3c:d3:b3:55:fc:18:c6:1d:8e:36:27:d5:f3:15:36:c8:cd:
         b4:45:58:1c:84:e1:5e:0a:71:68:78:98:3f:28:59:4b:2b:f7:
         18:1e:5a:f4:60:2e:d2:45:37:16:e2:55:55:53:b6:83:e3:0c:
         7a:31:51:db:dc:97:d5:f1:83:6b:f6:3c:58:3d:26:a4:57:96:
         e8:f6:9a:75:72:fe:2b:57:6b:18:be:cb:1e:d2:ed:73:29:73:
         95:6e:cd:00:ca:a9:2c:0d:2d:6a:2b:0f:ef:42:c7:6b:d3:8a:
         75:e4:41:0a:0d:5b:0d:7a:a9:88:61:ac:0e:55:88:69:c7:6f:
         d4:f6:29:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 14 17:34:25 2025 by rpki-client