Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/407A24884C3C11F0A124A87BC4F9AE02.roa
File:                     407A24884C3C11F0A124A87BC4F9AE02.roa (raw, json)
Hash identifier:          KgwVPuF72+9Qm7ncTcvls0VEtDVO4wuHz+tNe+EgzlI=
Subject key identifier:   51:94:15:BC:58:25:84:AB:27:12:8F:A4:53:6B:E2:BB:FE:DA:DB:FB
Certificate issuer:       /CN=A918EDB2/serialNumber=A7AE474416B0E8AD3A89E86774A640FEBE6973F9
Certificate serial:       1EB2
Authority key identifier: A7:AE:47:44:16:B0:E8:AD:3A:89:E8:67:74:A6:40:FE:BE:69:73:F9
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/p65HRBaw6K06iehndKZA_r5pc_k.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/407A24884C3C11F0A124A87BC4F9AE02.roa
Signing time:             Wed 18 Jun 2025 12:03:31 +0000
ROA not before:           Wed 18 Jun 2025 12:03:31 +0000
ROA not after:            Wed 01 Jul 2026 00:00:00 +0000
asID:                     153973
IP address blocks:        165.101.10.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/p65HRBaw6K06iehndKZA_r5pc_k.crl
                          rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/p65HRBaw6K06iehndKZA_r5pc_k.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/p65HRBaw6K06iehndKZA_r5pc_k.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 10 Jul 2025 03:15:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 7858 (0x1eb2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918EDB2, serialNumber=A7AE474416B0E8AD3A89E86774A640FEBE6973F9
        Validity
            Not Before: Jun 18 12:03:31 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=6852ab13-f15b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:23:4c:4f:15:1f:51:54:16:e7:5f:fb:6f:53:
                    ad:de:7f:c1:4b:ff:1a:1e:6a:92:73:6d:35:22:bc:
                    0b:91:68:f6:b0:54:ad:e9:e4:89:24:d2:d5:ef:71:
                    a5:77:45:42:b8:37:27:b7:6f:71:b8:f7:c5:5b:b8:
                    f3:d9:ee:82:8a:c3:d8:c0:35:b3:bc:2b:d6:ef:ef:
                    3b:c1:1c:4d:8a:84:16:c9:39:c6:d6:cf:21:a2:20:
                    db:55:bd:db:53:d6:df:19:f5:3c:38:c8:ec:5b:6e:
                    04:37:ca:d7:ee:c5:df:42:32:7f:e8:6d:90:37:f4:
                    f6:b5:6f:42:41:11:05:37:e7:08:c6:21:2c:53:d5:
                    db:b3:3a:49:6b:cc:d8:81:c9:c9:07:a1:94:5b:19:
                    e3:90:d3:35:bb:94:f3:c7:03:5d:28:b6:b7:b3:5c:
                    88:9b:72:a4:4d:9c:d7:b9:56:a7:fa:6f:34:04:ce:
                    3b:13:00:8d:89:5d:10:55:b7:f7:84:c7:2b:fe:cb:
                    1e:5f:79:32:68:c0:5d:b7:db:e1:d0:b2:66:73:0a:
                    86:97:e8:1f:3b:2d:25:a1:a3:53:3e:f5:82:c0:63:
                    ce:28:e0:51:0a:ee:a2:52:e0:ea:87:95:0e:33:d1:
                    a7:b1:f8:b9:2b:f7:f3:6e:97:71:e3:2b:f8:af:98:
                    b2:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                51:94:15:BC:58:25:84:AB:27:12:8F:A4:53:6B:E2:BB:FE:DA:DB:FB
            X509v3 Authority Key Identifier:
                keyid:A7:AE:47:44:16:B0:E8:AD:3A:89:E8:67:74:A6:40:FE:BE:69:73:F9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/p65HRBaw6K06iehndKZA_r5pc_k.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/p65HRBaw6K06iehndKZA_r5pc_k.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/407A24884C3C11F0A124A87BC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  165.101.10.0/23

    Signature Algorithm: sha256WithRSAEncryption
         5d:34:6f:6e:b7:80:b1:9c:b1:11:41:15:67:b9:1f:71:13:56:
         43:c6:bc:88:09:33:f5:f6:18:f1:da:fc:57:6b:20:02:42:63:
         9c:5a:0a:62:8b:22:dc:4c:fd:7e:83:4e:cf:94:cd:5d:47:89:
         42:30:37:e3:c4:e0:5a:f1:6c:d8:eb:50:69:41:30:e6:76:98:
         ed:6f:69:e0:99:39:49:79:ea:f8:d3:77:6c:d5:fa:0b:31:2d:
         72:d7:ac:b1:f7:f9:2c:db:29:82:25:dd:56:1e:15:35:fb:5d:
         0c:d1:fe:e9:c7:44:37:20:8a:70:49:09:03:52:f1:9d:60:eb:
         28:fe:36:fe:66:20:bd:d2:a2:b2:10:53:0d:57:43:66:87:94:
         68:7b:7a:f4:f9:8c:2f:37:26:67:8a:2a:4d:f8:9c:87:98:54:
         e8:53:2e:8a:72:76:7a:e5:9d:96:d3:06:33:32:fa:6f:98:5e:
         ae:cb:fb:3e:bc:aa:00:f0:1f:43:68:96:64:16:3a:1a:e1:19:
         eb:54:97:ee:d7:f3:42:65:d2:d0:9c:35:92:3e:bd:29:01:0f:
         59:9c:d1:f1:70:7c:22:f3:b5:5b:50:fa:d6:c3:e5:85:ae:38:
         28:26:0d:90:6d:9c:5f:a5:4a:c3:44:0a:e5:a2:a0:b7:bf:1a:
         b2:7c:37:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 3 16:52:07 2025 by rpki-client