Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/4DDA75D4773911EFB312F242C4F9AE02.roa
File:                     4DDA75D4773911EFB312F242C4F9AE02.roa (raw, json)
Hash identifier:          AaMWok3Ps5C+AuXu5vMLgEM/JPcTdxthSNY2fhWkqwg=
Subject key identifier:   88:18:E4:E8:61:4A:4D:2C:FD:77:6B:11:A1:A2:D6:7B:05:0C:09:07
Certificate issuer:       /CN=A918EDB2/serialNumber=A7AE474416B0E8AD3A89E86774A640FEBE6973F9
Certificate serial:       1DF9
Authority key identifier: A7:AE:47:44:16:B0:E8:AD:3A:89:E8:67:74:A6:40:FE:BE:69:73:F9
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/p65HRBaw6K06iehndKZA_r5pc_k.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/4DDA75D4773911EFB312F242C4F9AE02.roa
Signing time:             Thu 08 May 2025 15:54:50 +0000
ROA not before:           Thu 08 May 2025 15:54:50 +0000
ROA not after:            Wed 01 Jul 2026 00:00:00 +0000
asID:                     153209
IP address blocks:        160.187.49.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/p65HRBaw6K06iehndKZA_r5pc_k.crl
                          rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/p65HRBaw6K06iehndKZA_r5pc_k.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/p65HRBaw6K06iehndKZA_r5pc_k.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 17 May 2025 15:20:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 7673 (0x1df9)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918EDB2, serialNumber=A7AE474416B0E8AD3A89E86774A640FEBE6973F9
        Validity
            Not Before: May  8 15:54:50 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=681cd3c9-180e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:4d:58:2e:83:c1:a8:f0:3f:ae:ba:86:30:b8:
                    32:0f:70:33:1e:ef:e7:f9:9b:76:62:6b:3f:de:aa:
                    7b:24:f6:36:a7:f7:e6:7c:c8:56:0a:f5:bf:68:d1:
                    2f:f9:49:1d:db:86:fa:9a:86:23:8f:df:14:e8:43:
                    fb:90:f8:a5:72:49:30:45:97:ba:7f:bb:42:5d:61:
                    cf:f2:ca:dc:61:a5:17:eb:b0:31:22:51:d6:fa:c5:
                    77:79:a9:3e:39:eb:07:4b:96:2d:30:e4:b7:41:13:
                    39:a3:ca:64:b5:eb:04:93:27:b7:37:e6:5f:5c:96:
                    f8:a9:c7:f8:ad:17:69:36:ef:a9:4f:5e:a8:26:ad:
                    64:94:c9:4e:86:63:96:af:1f:33:92:66:8e:d7:36:
                    1c:6f:e3:0b:5e:99:8f:db:c9:bf:05:8c:ae:cb:dd:
                    70:78:b2:2f:54:8d:4a:f7:0d:c5:42:7b:ee:ac:c7:
                    c0:3d:60:bc:cf:c0:2c:6f:f0:9b:e8:ac:eb:b8:e2:
                    5e:08:63:ac:97:97:5f:d5:2f:70:cf:09:4f:bd:45:
                    26:d1:6d:8e:ef:27:a4:3a:6d:49:39:0b:f0:b0:73:
                    87:37:81:19:c2:5b:34:68:e1:d6:c7:f8:62:ab:6d:
                    9e:80:12:ec:0f:d4:5b:dc:df:b1:db:36:21:82:ee:
                    ab:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                88:18:E4:E8:61:4A:4D:2C:FD:77:6B:11:A1:A2:D6:7B:05:0C:09:07
            X509v3 Authority Key Identifier:
                keyid:A7:AE:47:44:16:B0:E8:AD:3A:89:E8:67:74:A6:40:FE:BE:69:73:F9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/p65HRBaw6K06iehndKZA_r5pc_k.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/p65HRBaw6K06iehndKZA_r5pc_k.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/4DDA75D4773911EFB312F242C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  160.187.49.0/24

    Signature Algorithm: sha256WithRSAEncryption
         0f:92:1b:bc:b4:d7:08:97:cd:0e:d0:73:78:56:5c:66:9e:0f:
         1f:a4:02:05:2b:39:5e:91:65:70:f6:93:3c:e8:cd:8b:ac:50:
         88:a2:e7:4c:8c:24:05:64:28:89:9d:a7:72:80:24:26:a7:6f:
         22:96:92:b8:fa:ad:58:57:71:af:8b:e8:04:47:46:55:ef:be:
         28:f2:ca:ed:0d:34:8d:85:e2:3f:08:98:2c:03:af:4b:3f:50:
         cd:bb:72:41:1a:62:07:db:11:4b:64:7a:63:a8:b9:e8:b4:af:
         fd:3c:c0:1a:dd:59:6e:6f:df:82:f2:bf:77:03:c6:f9:70:f3:
         76:6f:ac:58:1b:87:51:f9:8a:2c:37:0f:ad:95:b9:a1:8b:c5:
         e0:93:72:0b:6e:e2:99:f0:63:fb:80:2d:4a:cc:8e:90:df:6a:
         b1:b9:ee:09:41:68:4d:f0:44:a1:1f:72:10:65:bd:a8:8f:43:
         cb:f5:81:ba:7b:c1:65:67:56:d9:92:61:89:bc:c5:ce:47:ba:
         fd:fd:cb:fe:fc:37:a9:7e:3f:39:e0:0b:5d:48:dc:12:89:64:
         f6:f9:2e:46:ba:4b:38:36:18:e1:4d:1b:7c:77:48:56:d6:87:
         e3:ce:af:ec:49:ad:2c:6d:5e:7d:eb:3f:43:02:9a:35:88:f8:
         c5:9c:67:0d
-----BEGIN CERTIFICATE-----
MIIFcTCCBFmgAwIBAgICHfkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
OEVEQjIxMTAvBgNVBAUTKEE3QUU0NzQ0MTZCMEU4QUQzQTg5RTg2Nzc0QTY0MEZF
QkU2OTczRjkwHhcNMjUwNTA4MTU1NDUwWhcNMjYwNzAxMDAwMDAwWjAYMRYwFAYD
VQQDEw02ODFjZDNjOS0xODBlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAwk1YLoPBqPA/rrqGMLgyD3AzHu/n+Zt2Yms/3qp7JPY2p/fmfMhWCvW/aNEv
+Ukd24b6moYjj98U6EP7kPilckkwRZe6f7tCXWHP8srcYaUX67AxIlHW+sV3eak+
OesHS5YtMOS3QRM5o8pktesEkye3N+ZfXJb4qcf4rRdpNu+pT16oJq1klMlOhmOW
rx8zkmaO1zYcb+MLXpmP28m/BYyuy91weLIvVI1K9w3FQnvurMfAPWC8z8Asb/Cb
6KzruOJeCGOsl5df1S9wzwlPvUUm0W2O7yekOm1JOQvwsHOHN4EZwls0aOHWx/hi
q22egBLsD9Rb3N+x2zYhgu6rgwIDAQABo4IClTCCApEwHQYDVR0OBBYEFIgY5Ohh
Sk0s/XdrEaGi1nsFDAkHMB8GA1UdIwQYMBaAFKeuR0QWsOitOonoZ3SmQP6+aXP5
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4RURCMi8xQzU3Q0VBQzcw
RTkxMUUyQjM2RDRCNkIyOTc5QkIyMC9wNjVIUkJhdzZLMDZpZWhuZEtaQV9yNXBj
X2suY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy
RkQxRkYyL3A2NUhSQmF3NkswNmllaG5kS1pBX3I1cGNfay5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
OEVEQjIvMUM1N0NFQUM3MEU5MTFFMkIzNkQ0QjZCMjk3OUJCMjAvNEREQTc1RDQ3
NzM5MTFFRkIzMTJGMjQyQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E
EDAOMAwEAgABMAYDBACguzEwDQYJKoZIhvcNAQELBQADggEBAA+SG7y01wiXzQ7Q
c3hWXGaeDx+kAgUrOV6RZXD2kzzozYusUIii50yMJAVkKImdp3KAJCanbyKWkrj6
rVhXca+L6ARHRlXvvijyyu0NNI2F4j8ImCwDr0s/UM27ckEaYgfbEUtkemOouei0
r/08wBrdWW5v34Lyv3cDxvlw83ZvrFgbh1H5iiw3D62VuaGLxeCTcgtu4pnwY/uA
LUrMjpDfarG57glBaE3wRKEfchBlvaiPQ8v1gbp7wWVnVtmSYYm8xc5Huv39y/78
N6l+PzngC11I3BKJZPb5Lka6Szg2GOFNG3x3SFbWh+POr+xJrSxtXn3rP0MCmjWI
+MWcZw0=
-----END CERTIFICATE-----
Generated at Sun May 11 00:58:36 2025 by rpki-client