Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/29810CBE69B211EF9455261FC4F9AE02.roa
File:                     29810CBE69B211EF9455261FC4F9AE02.roa (raw, json)
Hash identifier:          PcJ3M9jmAlTFm0rXsqow47CnSx3N13rwa/KGxNhZ2qw=
Subject key identifier:   64:26:C3:7B:87:CF:33:E1:50:F1:3B:2A:B3:67:35:80:6A:75:BB:53
Certificate issuer:       /CN=A918EDB2/serialNumber=A7AE474416B0E8AD3A89E86774A640FEBE6973F9
Certificate serial:       1D53
Authority key identifier: A7:AE:47:44:16:B0:E8:AD:3A:89:E8:67:74:A6:40:FE:BE:69:73:F9
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/p65HRBaw6K06iehndKZA_r5pc_k.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/29810CBE69B211EF9455261FC4F9AE02.roa
Signing time:             Thu 08 May 2025 15:52:23 +0000
ROA not before:           Thu 08 May 2025 15:52:23 +0000
ROA not after:            Wed 01 Jul 2026 00:00:00 +0000
asID:                     135701
IP address blocks:        160.30.144.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/p65HRBaw6K06iehndKZA_r5pc_k.crl
                          rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/p65HRBaw6K06iehndKZA_r5pc_k.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/p65HRBaw6K06iehndKZA_r5pc_k.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 17 May 2025 15:20:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 7507 (0x1d53)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918EDB2, serialNumber=A7AE474416B0E8AD3A89E86774A640FEBE6973F9
        Validity
            Not Before: May  8 15:52:23 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=681cd337-9559
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:84:df:53:c2:9e:b8:31:ab:e5:d4:ec:ce:d4:
                    5e:0d:30:3c:86:94:8e:65:3c:8a:1b:3b:34:1e:d7:
                    9d:c4:9a:9c:24:57:0f:92:f4:39:36:88:15:3f:5b:
                    a2:20:74:25:77:2c:2f:a3:d8:47:34:97:83:66:d0:
                    4a:1e:df:74:18:9e:02:df:c2:54:0e:94:66:46:9c:
                    26:64:0f:cd:df:41:b2:17:a5:76:81:57:bb:9e:47:
                    32:c1:42:39:c9:44:a9:96:ce:b5:9f:09:57:e6:b9:
                    db:10:99:07:f0:55:b3:93:6e:80:54:2d:fb:74:5d:
                    c6:dd:00:1b:f4:21:51:e0:7d:fb:5b:01:0b:27:63:
                    77:50:c6:c3:bf:11:a1:0d:d6:e4:f1:76:93:21:95:
                    90:7e:32:e1:54:51:ef:7e:9a:3b:e8:fe:6d:b2:00:
                    0a:7e:a5:0f:9c:0b:18:ad:a8:96:d1:29:37:db:ae:
                    5e:fe:10:56:18:ea:b0:29:71:85:c2:8e:ca:8b:00:
                    b6:b9:87:42:6a:bf:ef:94:33:c0:e6:39:0d:1a:7a:
                    0f:fa:fb:57:71:12:88:7c:ab:5d:30:8a:d5:6a:6d:
                    d4:9b:2c:95:e2:36:a4:38:c5:e6:e9:80:65:60:61:
                    25:41:33:78:44:95:78:d8:ac:6a:83:82:10:71:4f:
                    a1:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                64:26:C3:7B:87:CF:33:E1:50:F1:3B:2A:B3:67:35:80:6A:75:BB:53
            X509v3 Authority Key Identifier:
                keyid:A7:AE:47:44:16:B0:E8:AD:3A:89:E8:67:74:A6:40:FE:BE:69:73:F9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/p65HRBaw6K06iehndKZA_r5pc_k.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/p65HRBaw6K06iehndKZA_r5pc_k.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/29810CBE69B211EF9455261FC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  160.30.144.0/23

    Signature Algorithm: sha256WithRSAEncryption
         39:86:d3:5b:58:fa:71:e1:ba:c5:4c:9d:7b:67:a0:d9:d7:b8:
         5b:fc:8d:5e:cc:58:98:f0:4d:bf:ca:4e:d4:ef:69:12:ef:f5:
         4d:43:7a:bd:47:ae:44:e8:c1:80:07:80:86:8a:1f:30:68:e0:
         a1:11:63:01:36:d7:d1:f3:9a:f8:6d:70:94:1b:55:14:8e:2b:
         d8:2d:b6:24:8a:1a:f8:c3:34:00:0f:d2:a9:e4:7e:ce:de:f5:
         c5:c8:18:d8:0e:3e:10:9b:29:b9:60:a5:47:34:4d:72:19:65:
         bf:02:6d:e7:00:52:61:a7:98:c2:8e:f9:d3:d9:18:77:fd:b1:
         fb:00:7e:02:05:d1:95:34:c4:3b:57:d2:2a:48:16:46:c7:8c:
         1a:25:39:62:6f:72:24:75:e3:54:93:59:1e:6a:8a:cb:7d:0c:
         f2:c3:b6:47:fc:85:51:7d:6a:72:2e:39:39:40:91:7d:b7:0b:
         45:18:05:77:7b:00:8e:54:22:d7:74:95:17:11:14:03:5d:99:
         91:05:04:0a:7c:41:c8:e1:bb:01:ad:15:86:e8:54:e3:69:d0:
         b4:71:41:7c:3f:0a:65:52:c3:ea:2d:5a:ec:05:34:da:96:5b:
         1a:f3:17:86:e1:63:cd:8c:75:bb:1d:aa:81:76:9c:23:a8:6f:
         8d:72:d4:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 12 07:10:52 2025 by rpki-client