Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/8C4B0B6E7CB411EF83786972C4F9AE02.roa
File:                     8C4B0B6E7CB411EF83786972C4F9AE02.roa (raw, json)
Hash identifier:          j/XCNTd2SVv4DnG4Rb05ngDh0N/ZthVxeidWOkrIGeQ=
Subject key identifier:   6D:BD:C8:C7:8C:99:50:6A:AA:FC:CC:93:01:00:D3:67:88:CF:A3:AC
Certificate issuer:       /CN=A918EDB2/serialNumber=A7AE474416B0E8AD3A89E86774A640FEBE6973F9
Certificate serial:       1D91
Authority key identifier: A7:AE:47:44:16:B0:E8:AD:3A:89:E8:67:74:A6:40:FE:BE:69:73:F9
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/p65HRBaw6K06iehndKZA_r5pc_k.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/8C4B0B6E7CB411EF83786972C4F9AE02.roa
Signing time:             Thu 08 May 2025 15:53:18 +0000
ROA not before:           Thu 08 May 2025 15:53:18 +0000
ROA not after:            Wed 01 Jul 2026 00:00:00 +0000
asID:                     149557
IP address blocks:        160.187.48.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/p65HRBaw6K06iehndKZA_r5pc_k.crl
                          rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/p65HRBaw6K06iehndKZA_r5pc_k.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/p65HRBaw6K06iehndKZA_r5pc_k.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 17 May 2025 15:20:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 7569 (0x1d91)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918EDB2, serialNumber=A7AE474416B0E8AD3A89E86774A640FEBE6973F9
        Validity
            Not Before: May  8 15:53:18 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=681cd36e-aa55
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:b1:34:7a:d0:d3:01:20:27:3b:f2:df:a7:b2:
                    0c:57:6a:16:4a:bf:cf:a2:c5:c4:23:e8:ef:2c:81:
                    83:d8:e5:f0:c6:2d:5f:e0:4e:02:2c:73:e3:01:ed:
                    54:db:6c:88:f1:a3:9c:4c:7f:33:fc:07:14:03:cc:
                    82:09:af:4e:2a:45:e7:78:a8:e5:c0:a0:f7:e7:cd:
                    39:0c:3d:87:7e:f0:a5:4e:84:b7:05:40:1c:10:f8:
                    30:ee:48:89:66:a1:7f:07:a0:2f:65:c0:b2:cd:f5:
                    ba:15:16:3e:b5:ec:40:e5:1e:27:22:b0:43:71:67:
                    ac:d9:ce:41:60:69:50:a3:90:3e:15:c4:20:93:7f:
                    a2:2c:1d:1f:ff:f7:12:ed:3a:1a:69:0c:fc:71:95:
                    1b:51:c9:4c:f1:bc:07:6a:25:0e:83:19:bb:b9:96:
                    48:b2:4c:c0:fd:68:e1:32:e0:d5:40:66:a6:6d:22:
                    0b:fa:d2:6a:a9:9d:16:21:e6:ca:b9:04:91:67:7b:
                    a2:06:5d:d1:51:03:90:ad:ce:e2:5b:57:a0:78:d3:
                    50:98:bf:88:10:04:9d:2a:66:38:aa:e8:08:a0:c4:
                    0d:df:b8:b1:41:4c:6a:2f:f2:f8:6c:6c:fc:cc:89:
                    e3:6b:5a:ee:e2:de:27:2f:73:a0:62:fd:45:8a:fb:
                    b4:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6D:BD:C8:C7:8C:99:50:6A:AA:FC:CC:93:01:00:D3:67:88:CF:A3:AC
            X509v3 Authority Key Identifier:
                keyid:A7:AE:47:44:16:B0:E8:AD:3A:89:E8:67:74:A6:40:FE:BE:69:73:F9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/p65HRBaw6K06iehndKZA_r5pc_k.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/p65HRBaw6K06iehndKZA_r5pc_k.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/8C4B0B6E7CB411EF83786972C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  160.187.48.0/24

    Signature Algorithm: sha256WithRSAEncryption
         2b:76:01:b8:b7:db:b3:ea:e0:5a:91:47:a9:10:ef:e0:fc:92:
         d2:bf:d9:26:e1:52:77:c4:e8:a3:38:90:b4:f2:d9:71:23:53:
         56:df:c3:bb:9a:c0:99:dd:e4:8c:b0:cb:1c:2c:9f:d7:21:77:
         ea:09:99:f3:14:d5:7d:09:46:4a:a4:f1:63:50:bf:4c:94:5b:
         db:a1:fe:7c:1d:51:89:f3:3f:d2:e3:7a:bb:8a:32:1b:72:da:
         fa:ce:ea:f9:6e:10:a5:35:30:52:17:7f:a3:17:cf:8e:62:a6:
         52:20:67:97:b1:eb:60:24:eb:10:e1:32:60:04:00:35:77:af:
         80:6e:01:1f:6f:d6:ed:a3:cd:84:25:f6:10:7a:f2:7b:a7:ca:
         44:54:ab:03:d8:b4:6b:d2:61:91:1f:83:c2:7c:74:0e:12:66:
         c9:23:86:02:e5:48:76:27:6f:94:37:21:d3:3b:57:58:32:20:
         d0:f4:3e:26:cb:ed:d5:bc:88:bb:8a:54:5f:f6:7c:62:40:46:
         ad:04:85:a7:42:1b:c5:b7:56:c3:8f:92:28:09:6b:87:84:c9:
         53:aa:6f:27:a5:d3:68:30:ae:44:0d:84:10:af:3f:3d:7e:74:
         31:6f:5a:f0:8e:4f:b3:a5:c0:e4:ba:6a:17:c8:1b:ba:26:32:
         6b:78:33:77
-----BEGIN CERTIFICATE-----
MIIFcTCCBFmgAwIBAgICHZEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
OEVEQjIxMTAvBgNVBAUTKEE3QUU0NzQ0MTZCMEU4QUQzQTg5RTg2Nzc0QTY0MEZF
QkU2OTczRjkwHhcNMjUwNTA4MTU1MzE4WhcNMjYwNzAxMDAwMDAwWjAYMRYwFAYD
VQQDEw02ODFjZDM2ZS1hYTU1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAx7E0etDTASAnO/Lfp7IMV2oWSr/PosXEI+jvLIGD2OXwxi1f4E4CLHPjAe1U
22yI8aOcTH8z/AcUA8yCCa9OKkXneKjlwKD35805DD2HfvClToS3BUAcEPgw7kiJ
ZqF/B6AvZcCyzfW6FRY+texA5R4nIrBDcWes2c5BYGlQo5A+FcQgk3+iLB0f//cS
7ToaaQz8cZUbUclM8bwHaiUOgxm7uZZIskzA/WjhMuDVQGambSIL+tJqqZ0WIebK
uQSRZ3uiBl3RUQOQrc7iW1egeNNQmL+IEASdKmY4qugIoMQN37ixQUxqL/L4bGz8
zInja1ru4t4nL3OgYv1Fivu0iwIDAQABo4IClTCCApEwHQYDVR0OBBYEFG29yMeM
mVBqqvzMkwEA02eIz6OsMB8GA1UdIwQYMBaAFKeuR0QWsOitOonoZ3SmQP6+aXP5
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4RURCMi8xQzU3Q0VBQzcw
RTkxMUUyQjM2RDRCNkIyOTc5QkIyMC9wNjVIUkJhdzZLMDZpZWhuZEtaQV9yNXBj
X2suY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy
RkQxRkYyL3A2NUhSQmF3NkswNmllaG5kS1pBX3I1cGNfay5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
OEVEQjIvMUM1N0NFQUM3MEU5MTFFMkIzNkQ0QjZCMjk3OUJCMjAvOEM0QjBCNkU3
Q0I0MTFFRjgzNzg2OTcyQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E
EDAOMAwEAgABMAYDBACguzAwDQYJKoZIhvcNAQELBQADggEBACt2Abi327Pq4FqR
R6kQ7+D8ktK/2SbhUnfE6KM4kLTy2XEjU1bfw7uawJnd5Iywyxwsn9chd+oJmfMU
1X0JRkqk8WNQv0yUW9uh/nwdUYnzP9LjeruKMhty2vrO6vluEKU1MFIXf6MXz45i
plIgZ5ex62Ak6xDhMmAEADV3r4BuAR9v1u2jzYQl9hB68nunykRUqwPYtGvSYZEf
g8J8dA4SZskjhgLlSHYnb5Q3IdM7V1gyIND0PibL7dW8iLuKVF/2fGJARq0EhadC
G8W3VsOPkigJa4eEyVOqbyel02gwrkQNhBCvPz1+dDFvWvCOT7OlwOS6ahfIG7om
Mmt4M3c=
-----END CERTIFICATE-----
Generated at Sun May 11 16:48:34 2025 by rpki-client