Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/612F557A555911EFA6C99529C4F9AE02.roa
File:                     612F557A555911EFA6C99529C4F9AE02.roa (raw, json)
Hash identifier:          hoVzsQfXL6FcGBiB9ERglERU85tyEKMVcbEmWbc1xz0=
Subject key identifier:   88:BC:18:98:E2:1C:A8:9A:83:6C:67:45:CA:30:75:3D:57:67:82:65
Certificate issuer:       /CN=A918EDB2/serialNumber=A7AE474416B0E8AD3A89E86774A640FEBE6973F9
Certificate serial:       1D5F
Authority key identifier: A7:AE:47:44:16:B0:E8:AD:3A:89:E8:67:74:A6:40:FE:BE:69:73:F9
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/p65HRBaw6K06iehndKZA_r5pc_k.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/612F557A555911EFA6C99529C4F9AE02.roa
Signing time:             Thu 08 May 2025 15:52:34 +0000
ROA not before:           Thu 08 May 2025 15:52:34 +0000
ROA not after:            Wed 01 Jul 2026 00:00:00 +0000
asID:                     136644
IP address blocks:        160.22.0.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/p65HRBaw6K06iehndKZA_r5pc_k.crl
                          rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/p65HRBaw6K06iehndKZA_r5pc_k.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/p65HRBaw6K06iehndKZA_r5pc_k.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 19 May 2025 15:22:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 7519 (0x1d5f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918EDB2, serialNumber=A7AE474416B0E8AD3A89E86774A640FEBE6973F9
        Validity
            Not Before: May  8 15:52:34 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=681cd342-94d7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:43:72:52:18:0e:be:d8:d5:6d:9e:48:9a:4b:
                    53:a4:4e:ac:90:1a:7a:0f:76:d9:6d:44:e8:4f:60:
                    77:08:c7:a0:a9:e3:51:ee:d5:25:e0:ec:b1:1b:63:
                    47:c0:f2:5b:fb:3d:c8:da:a7:9c:dd:f4:73:f6:69:
                    39:bc:d7:0c:10:8b:78:d3:f7:f8:43:85:3f:06:67:
                    5b:6e:9e:45:1e:0e:b0:67:69:d9:fa:31:5f:60:5d:
                    4b:e9:1a:7a:5a:2f:2f:65:a0:60:cd:b6:af:b0:b8:
                    f6:89:06:4c:50:bd:c1:8d:19:07:88:98:63:40:3b:
                    ca:5e:11:30:0e:42:97:f2:fc:bf:f2:fd:6c:c2:2f:
                    5d:24:21:ee:b6:3b:ba:40:39:dc:cb:39:4c:3a:ea:
                    5f:84:b7:7f:96:d7:9a:f4:77:be:bf:c3:82:5d:3d:
                    b7:e0:09:c9:ba:90:3f:66:ca:21:bc:ca:1b:50:0c:
                    34:97:e9:b1:4a:07:08:3a:51:e5:a8:60:6b:7e:d3:
                    47:65:47:20:5e:f4:0b:51:ee:2a:4e:bd:72:8d:98:
                    38:28:fc:d1:30:5f:b8:a9:fd:dd:33:f5:0a:db:a2:
                    21:80:14:18:66:ba:9d:94:3a:d2:ef:67:41:fc:05:
                    31:8a:9e:d0:ea:d2:96:06:97:08:9a:9e:63:9e:59:
                    08:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                88:BC:18:98:E2:1C:A8:9A:83:6C:67:45:CA:30:75:3D:57:67:82:65
            X509v3 Authority Key Identifier:
                keyid:A7:AE:47:44:16:B0:E8:AD:3A:89:E8:67:74:A6:40:FE:BE:69:73:F9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/p65HRBaw6K06iehndKZA_r5pc_k.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/p65HRBaw6K06iehndKZA_r5pc_k.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/612F557A555911EFA6C99529C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  160.22.0.0/23

    Signature Algorithm: sha256WithRSAEncryption
         8f:18:f9:81:7a:64:ec:fb:a2:ff:48:e9:ad:09:d7:10:77:74:
         19:b9:9d:ab:ba:ab:92:24:98:5a:c5:59:eb:40:07:4b:3d:b5:
         a5:c4:dd:93:64:25:d8:d9:0f:8f:08:f5:11:99:2c:a5:aa:4c:
         9e:ab:9e:57:57:9d:ac:7e:f3:f5:63:b7:e3:2d:98:6c:2c:9a:
         11:7e:27:fa:70:fa:a7:81:77:51:49:f5:d5:e5:58:a6:7b:eb:
         88:aa:28:e8:ce:f5:2f:c4:0f:18:4a:6c:7f:09:24:0c:8b:a7:
         d8:df:e4:e0:bb:0d:17:df:34:e6:4e:38:68:19:79:30:d0:41:
         43:2b:62:f1:73:c6:aa:fd:34:c0:82:be:5d:e6:39:06:d5:97:
         bc:dd:aa:48:fa:c1:5f:06:69:1e:3c:f6:f0:06:5c:e4:2b:a8:
         8e:1e:a6:55:13:cd:6d:66:14:d1:84:7d:fb:56:d6:a9:2a:f8:
         74:0b:c6:53:96:83:bf:34:ef:ba:66:f8:2b:f3:ba:cd:f9:37:
         ed:f3:f4:a2:75:65:4f:b6:1f:fb:da:72:46:9e:0d:a7:9c:bf:
         e6:f6:24:33:0b:64:ef:98:95:7b:33:7c:3c:0c:a5:9f:c9:8a:
         b4:ee:58:2f:7d:be:39:82:7c:4f:36:0c:4f:68:11:90:3b:5a:
         5b:ba:2c:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 13 04:48:14 2025 by rpki-client