Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/93E4A4E82E1C11EFB674EB7FC4F9AE02.roa
File:                     93E4A4E82E1C11EFB674EB7FC4F9AE02.roa (raw, json)
Hash identifier:          pytzWyLzwJ9+CczLR+lVMvFUF/r+kNi1ndZrBvAlz0w=
Subject key identifier:   88:31:0A:40:D8:1A:BD:33:0A:46:F9:8D:20:3F:FB:CC:A2:CA:F7:52
Certificate issuer:       /CN=A918EDB2/serialNumber=A7AE474416B0E8AD3A89E86774A640FEBE6973F9
Certificate serial:       1D6F
Authority key identifier: A7:AE:47:44:16:B0:E8:AD:3A:89:E8:67:74:A6:40:FE:BE:69:73:F9
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/p65HRBaw6K06iehndKZA_r5pc_k.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/93E4A4E82E1C11EFB674EB7FC4F9AE02.roa
Signing time:             Thu 08 May 2025 15:52:48 +0000
ROA not before:           Thu 08 May 2025 15:52:48 +0000
ROA not after:            Wed 01 Jul 2026 00:00:00 +0000
asID:                     138718
IP address blocks:        160.22.132.0/23 maxlen: 24
                          160.187.182.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/p65HRBaw6K06iehndKZA_r5pc_k.crl
                          rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/p65HRBaw6K06iehndKZA_r5pc_k.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/p65HRBaw6K06iehndKZA_r5pc_k.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 20 May 2025 10:53:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 7535 (0x1d6f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918EDB2, serialNumber=A7AE474416B0E8AD3A89E86774A640FEBE6973F9
        Validity
            Not Before: May  8 15:52:48 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=681cd350-0128
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e4:4a:21:6c:b0:80:50:45:d3:97:c7:45:a4:02:
                    3a:52:6f:5f:36:db:a2:bf:4e:ab:34:91:06:57:72:
                    39:33:5f:8d:26:c6:e2:5a:cd:1c:06:54:1b:60:3f:
                    f5:0d:60:6e:f3:a0:99:d6:d5:dc:53:52:9e:92:c3:
                    b4:ee:8b:e9:d6:bb:e7:0c:65:2a:b4:19:d6:2c:89:
                    51:6e:c7:da:1c:32:3d:2b:33:49:e4:af:e8:ef:ae:
                    ec:6a:1d:33:b0:60:b3:bf:ba:31:82:c4:19:aa:eb:
                    0a:27:a1:13:38:a6:55:fc:fb:aa:a5:74:e8:67:1f:
                    72:3f:43:91:6e:de:63:7b:7e:70:02:01:09:02:82:
                    09:0a:70:ec:ba:20:4b:04:31:1b:05:0c:7f:93:06:
                    7a:b4:19:66:4f:d3:fd:99:ed:66:bc:1c:83:16:56:
                    71:b4:b6:3a:8d:9a:db:97:8e:8f:60:71:3c:db:a8:
                    4c:52:e5:b0:7b:13:84:af:4d:a4:26:fe:1e:e6:b5:
                    8e:84:14:08:91:93:ab:a7:da:24:d0:40:94:f0:3e:
                    15:a5:02:05:c5:98:4e:95:42:f0:c0:70:50:2e:e2:
                    23:80:2e:9e:e1:33:5e:64:cb:05:5a:6e:ea:e2:42:
                    dc:fb:bd:66:1c:a6:db:dc:66:35:5c:2e:65:29:bd:
                    cc:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                88:31:0A:40:D8:1A:BD:33:0A:46:F9:8D:20:3F:FB:CC:A2:CA:F7:52
            X509v3 Authority Key Identifier:
                keyid:A7:AE:47:44:16:B0:E8:AD:3A:89:E8:67:74:A6:40:FE:BE:69:73:F9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/p65HRBaw6K06iehndKZA_r5pc_k.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/p65HRBaw6K06iehndKZA_r5pc_k.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/93E4A4E82E1C11EFB674EB7FC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  160.22.132.0/23
                  160.187.182.0/23

    Signature Algorithm: sha256WithRSAEncryption
         4e:67:64:3c:cd:b0:af:7d:f3:8e:98:f1:10:a6:b2:b8:76:48:
         61:8c:0a:db:16:91:18:99:69:55:56:3c:c1:54:56:6d:3c:b4:
         ab:73:a5:f8:2b:ed:7c:99:ce:52:2b:4f:87:ee:df:c6:e1:bd:
         b3:1d:b4:e0:9c:70:0a:c8:6b:ee:03:69:b6:df:fb:46:bf:6a:
         b5:ca:93:88:c7:96:a8:fd:4d:cb:82:08:41:55:28:e0:75:46:
         41:8b:28:ba:dd:d7:b7:24:7d:b8:f5:4f:b6:08:70:56:9b:fd:
         3c:b1:e2:0b:3d:cb:34:15:4b:12:5e:ae:e3:92:8f:82:bf:c3:
         d8:e0:ec:97:89:2c:ea:5d:d8:22:7f:11:9a:12:cd:05:38:4b:
         a5:d4:58:fd:e4:2e:fc:e5:ec:fb:f6:52:c5:b1:74:c7:75:6d:
         45:00:33:b2:eb:51:7e:b3:23:6f:03:c1:ea:7f:b7:52:a6:9b:
         80:95:ef:82:14:6c:17:c7:7d:b6:41:29:77:a1:07:0c:1b:72:
         96:94:49:4f:a8:4c:e3:0a:bd:41:49:9b:a6:c4:9f:45:8e:89:
         16:fe:d7:8b:e4:60:e7:66:7f:54:fd:ed:81:aa:28:0a:45:8f:
         f1:7b:7d:5f:6a:10:90:2d:5c:3b:78:16:14:8d:fd:8b:4d:66:
         df:6f:64:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 14 13:07:10 2025 by rpki-client