Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/90173B646F6211EFA016D84BC4F9AE02.roa
File:                     90173B646F6211EFA016D84BC4F9AE02.roa (raw, json)
Hash identifier:          acCNd2HvMRj2WBWPD1jTdHF5jTlrQ+XccvUz2F8sakM=
Subject key identifier:   91:CD:3F:AF:E7:03:51:3E:F6:BE:E6:AB:5B:0D:95:8B:D2:67:36:29
Certificate issuer:       /CN=A918EDB2/serialNumber=A7AE474416B0E8AD3A89E86774A640FEBE6973F9
Certificate serial:       1D3B
Authority key identifier: A7:AE:47:44:16:B0:E8:AD:3A:89:E8:67:74:A6:40:FE:BE:69:73:F9
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/p65HRBaw6K06iehndKZA_r5pc_k.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/90173B646F6211EFA016D84BC4F9AE02.roa
Signing time:             Thu 08 May 2025 15:51:59 +0000
ROA not before:           Thu 08 May 2025 15:51:59 +0000
ROA not after:            Wed 01 Jul 2026 00:00:00 +0000
asID:                     132215
IP address blocks:        160.25.22.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/p65HRBaw6K06iehndKZA_r5pc_k.crl
                          rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/p65HRBaw6K06iehndKZA_r5pc_k.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/p65HRBaw6K06iehndKZA_r5pc_k.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 17 May 2025 15:20:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 7483 (0x1d3b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918EDB2, serialNumber=A7AE474416B0E8AD3A89E86774A640FEBE6973F9
        Validity
            Not Before: May  8 15:51:59 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=681cd31e-68b7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:b8:ef:c0:d5:e7:74:f9:36:59:51:93:83:a7:
                    a6:f4:1a:d8:c3:08:cd:f8:79:8f:87:f3:99:00:38:
                    59:97:a5:93:43:75:8b:ac:70:35:8a:13:60:82:a8:
                    29:dc:db:07:45:49:5d:e9:99:5d:b4:ec:1b:04:dc:
                    6c:8b:46:2a:2a:86:67:48:60:7d:e3:8b:22:90:06:
                    cf:dd:8e:64:ec:0a:ef:ea:1f:a3:63:31:3d:e5:73:
                    5c:20:55:b4:ef:3b:9e:1d:f6:69:db:8a:39:b0:9f:
                    c7:0d:a8:b7:c8:e5:00:74:e4:99:94:35:b2:19:32:
                    f9:bc:19:b1:47:3e:4e:6c:27:bd:73:9e:95:8a:87:
                    f1:7a:74:9e:21:b3:ec:94:f7:04:2f:2e:6d:02:9f:
                    9b:8e:90:95:db:2c:31:ed:26:e3:fa:dc:7d:09:46:
                    20:f3:96:a0:d7:25:af:86:eb:d2:89:f6:c9:42:71:
                    02:63:e1:52:1f:57:6d:b5:57:d8:46:c9:b8:c3:e4:
                    55:5f:9d:d4:d8:de:15:60:dc:be:46:53:74:5c:b2:
                    df:82:59:11:8a:50:bb:9b:6c:3a:d7:4b:34:4d:9a:
                    36:1d:98:c8:6a:79:4a:13:47:e0:ea:c3:a4:db:d0:
                    b4:d3:1b:ef:b6:08:5e:cc:56:ad:5c:02:0b:f9:e9:
                    1d:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                91:CD:3F:AF:E7:03:51:3E:F6:BE:E6:AB:5B:0D:95:8B:D2:67:36:29
            X509v3 Authority Key Identifier:
                keyid:A7:AE:47:44:16:B0:E8:AD:3A:89:E8:67:74:A6:40:FE:BE:69:73:F9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/p65HRBaw6K06iehndKZA_r5pc_k.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/p65HRBaw6K06iehndKZA_r5pc_k.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/90173B646F6211EFA016D84BC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  160.25.22.0/23

    Signature Algorithm: sha256WithRSAEncryption
         2b:8e:ba:ad:b7:6c:7c:84:69:81:9d:13:6b:6e:f2:27:f7:92:
         80:eb:66:81:23:b8:1a:07:30:2c:89:d1:05:65:da:20:02:81:
         45:d0:0e:d9:57:52:ad:cc:5f:aa:48:7f:45:88:f8:03:9e:3b:
         6c:95:bd:55:51:84:4f:e2:65:bb:cf:1c:d7:0e:c3:22:8f:f5:
         94:02:ff:f1:26:35:22:da:ac:c3:95:8b:5f:85:c9:be:9d:33:
         09:59:cd:0e:4d:e7:24:8e:43:4a:95:89:91:0e:84:ab:02:15:
         bd:bd:a9:05:92:05:8a:3d:b9:ec:cc:ce:81:9f:57:0b:cf:9c:
         23:32:79:f1:7d:57:4a:31:68:11:86:35:d0:1b:30:4a:d6:ca:
         4a:aa:5c:57:56:40:b4:cd:85:81:b8:b2:33:f9:91:85:1d:9b:
         90:dd:b2:43:a6:99:01:fb:14:87:86:9d:02:1f:05:79:ff:b0:
         0a:1d:a4:75:5e:7d:4a:db:59:9a:3a:7d:02:d4:13:08:bc:73:
         de:38:0d:9f:2b:71:0b:56:2f:d8:bc:c7:e0:1e:84:bb:26:a4:
         9a:aa:13:58:dd:eb:69:4b:a5:89:ca:51:25:3d:5e:a4:18:18:
         9d:ea:b2:a4:01:09:32:64:76:a7:69:4f:fe:ef:9a:f1:f7:57:
         a7:7d:e7:bd
-----BEGIN CERTIFICATE-----
MIIFcTCCBFmgAwIBAgICHTswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
OEVEQjIxMTAvBgNVBAUTKEE3QUU0NzQ0MTZCMEU4QUQzQTg5RTg2Nzc0QTY0MEZF
QkU2OTczRjkwHhcNMjUwNTA4MTU1MTU5WhcNMjYwNzAxMDAwMDAwWjAYMRYwFAYD
VQQDEw02ODFjZDMxZS02OGI3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAvLjvwNXndPk2WVGTg6em9BrYwwjN+HmPh/OZADhZl6WTQ3WLrHA1ihNggqgp
3NsHRUld6ZldtOwbBNxsi0YqKoZnSGB944sikAbP3Y5k7Arv6h+jYzE95XNcIFW0
7zueHfZp24o5sJ/HDai3yOUAdOSZlDWyGTL5vBmxRz5ObCe9c56ViofxenSeIbPs
lPcELy5tAp+bjpCV2ywx7Sbj+tx9CUYg85ag1yWvhuvSifbJQnECY+FSH1dttVfY
Rsm4w+RVX53U2N4VYNy+RlN0XLLfglkRilC7m2w610s0TZo2HZjIanlKE0fg6sOk
29C00xvvtghezFatXAIL+ekdkQIDAQABo4IClTCCApEwHQYDVR0OBBYEFJHNP6/n
A1E+9r7mq1sNlYvSZzYpMB8GA1UdIwQYMBaAFKeuR0QWsOitOonoZ3SmQP6+aXP5
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4RURCMi8xQzU3Q0VBQzcw
RTkxMUUyQjM2RDRCNkIyOTc5QkIyMC9wNjVIUkJhdzZLMDZpZWhuZEtaQV9yNXBj
X2suY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy
RkQxRkYyL3A2NUhSQmF3NkswNmllaG5kS1pBX3I1cGNfay5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
OEVEQjIvMUM1N0NFQUM3MEU5MTFFMkIzNkQ0QjZCMjk3OUJCMjAvOTAxNzNCNjQ2
RjYyMTFFRkEwMTZEODRCQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E
EDAOMAwEAgABMAYDBAGgGRYwDQYJKoZIhvcNAQELBQADggEBACuOuq23bHyEaYGd
E2tu8if3koDrZoEjuBoHMCyJ0QVl2iACgUXQDtlXUq3MX6pIf0WI+AOeO2yVvVVR
hE/iZbvPHNcOwyKP9ZQC//EmNSLarMOVi1+Fyb6dMwlZzQ5N5ySOQ0qViZEOhKsC
Fb29qQWSBYo9uezMzoGfVwvPnCMyefF9V0oxaBGGNdAbMErWykqqXFdWQLTNhYG4
sjP5kYUdm5DdskOmmQH7FIeGnQIfBXn/sAodpHVefUrbWZo6fQLUEwi8c944DZ8r
cQtWL9i8x+AehLsmpJqqE1jd62lLpYnKUSU9XqQYGJ3qsqQBCTJkdqdpT/7vmvH3
V6d9570=
-----END CERTIFICATE-----
Generated at Mon May 12 04:05:26 2025 by rpki-client