Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/79196DC85DE811EFA8CA9452C4F9AE02.roa
File:                     79196DC85DE811EFA8CA9452C4F9AE02.roa (raw, json)
Hash identifier:          epodL04PoM09c2ggIQXV7O3x4X9WocqGDFYWhVwHNvk=
Subject key identifier:   ED:56:ED:EB:E9:D8:FB:56:01:78:B0:43:D8:53:50:6F:52:5D:01:1C
Certificate issuer:       /CN=A918EDB2/serialNumber=A7AE474416B0E8AD3A89E86774A640FEBE6973F9
Certificate serial:       1D94
Authority key identifier: A7:AE:47:44:16:B0:E8:AD:3A:89:E8:67:74:A6:40:FE:BE:69:73:F9
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/p65HRBaw6K06iehndKZA_r5pc_k.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/79196DC85DE811EFA8CA9452C4F9AE02.roa
Signing time:             Thu 08 May 2025 15:53:21 +0000
ROA not before:           Thu 08 May 2025 15:53:21 +0000
ROA not after:            Wed 01 Jul 2026 00:00:00 +0000
asID:                     149618
IP address blocks:        160.30.122.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/p65HRBaw6K06iehndKZA_r5pc_k.crl
                          rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/p65HRBaw6K06iehndKZA_r5pc_k.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/p65HRBaw6K06iehndKZA_r5pc_k.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 19 May 2025 14:50:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 7572 (0x1d94)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918EDB2, serialNumber=A7AE474416B0E8AD3A89E86774A640FEBE6973F9
        Validity
            Not Before: May  8 15:53:21 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=681cd371-3ae0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:46:cf:c8:23:a5:cd:4e:3b:d4:69:d5:78:14:
                    2d:20:2d:95:88:fc:9f:48:5a:34:f3:2b:92:da:56:
                    42:7c:65:d5:46:0f:c7:82:3a:f5:d4:4e:04:2a:e1:
                    df:40:0e:1a:42:69:56:cc:21:e1:e4:9a:30:90:3a:
                    13:37:8c:32:3b:b1:1b:93:c9:7b:22:9f:b5:02:f8:
                    c3:c4:c3:65:16:51:8d:86:e1:25:20:18:ac:56:1b:
                    b4:1a:39:1e:6a:55:e0:e7:cc:f5:a2:bc:3a:ed:d4:
                    79:07:e2:d8:74:95:ba:f0:3d:a9:03:3d:9d:7d:73:
                    bb:07:d0:26:58:5d:f0:41:71:c2:2a:d3:03:5c:23:
                    7b:f2:0e:94:ad:4f:16:eb:f3:b1:91:dc:4c:26:43:
                    4c:52:6e:0c:37:78:8e:95:1a:25:21:38:01:f7:87:
                    be:bc:63:99:b6:92:d1:fd:94:5c:cf:cb:7a:e0:a4:
                    63:9a:3c:04:ea:3e:d0:0c:59:44:13:d2:18:f6:6e:
                    45:66:26:23:7a:03:90:8c:37:7c:ce:a9:d7:69:64:
                    65:b6:4d:f0:66:cc:a2:00:ad:d5:ce:12:2d:36:d4:
                    ea:6a:1d:cf:d3:a1:59:a8:a1:91:1a:4a:96:89:7c:
                    c3:d2:3f:65:21:09:60:46:56:44:ac:37:38:76:cd:
                    d7:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                ED:56:ED:EB:E9:D8:FB:56:01:78:B0:43:D8:53:50:6F:52:5D:01:1C
            X509v3 Authority Key Identifier:
                keyid:A7:AE:47:44:16:B0:E8:AD:3A:89:E8:67:74:A6:40:FE:BE:69:73:F9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/p65HRBaw6K06iehndKZA_r5pc_k.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/p65HRBaw6K06iehndKZA_r5pc_k.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/79196DC85DE811EFA8CA9452C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  160.30.122.0/23

    Signature Algorithm: sha256WithRSAEncryption
         05:6a:0f:f4:90:26:c4:dc:1b:fd:d6:56:79:39:18:1b:53:24:
         4b:4e:26:10:fc:8c:9a:77:d7:01:ac:be:b0:5f:22:de:7b:b6:
         ba:2b:a0:c8:14:6b:4e:53:d1:4a:35:7f:8b:04:a1:45:54:91:
         96:84:98:39:e3:61:f1:38:11:7e:e7:00:af:07:78:b0:1f:52:
         a8:68:b9:37:1a:45:7d:dc:d5:2b:f6:83:f8:89:27:a1:35:7f:
         35:33:0a:0c:fb:8f:60:ed:be:6e:dc:c9:d8:da:00:18:65:d1:
         b8:83:54:fd:98:d0:d2:34:4a:97:c2:3d:78:47:7b:31:0d:91:
         e4:aa:b1:fb:51:fc:75:60:0d:53:f8:f6:98:56:2e:a9:50:4a:
         8f:4f:ba:2f:16:cc:2c:3a:92:97:fd:09:e4:73:7c:72:b8:c7:
         95:0a:36:5f:27:71:04:4e:bd:3e:d6:7f:10:ac:6c:73:db:76:
         11:7e:47:e1:ad:2e:a5:b8:4e:37:0c:7d:92:2c:00:77:31:ab:
         e0:8e:06:1a:b0:23:05:1c:25:72:49:a6:1e:79:d1:1a:00:0f:
         5a:ea:b5:78:f2:30:09:10:13:b2:79:bf:8b:be:62:98:25:cc:
         40:a5:b1:84:e8:2e:f7:21:1e:27:dd:99:39:96:25:76:b6:66:
         bf:34:d7:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 12 19:22:14 2025 by rpki-client