Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/9A80C87203EB11F0AA408709C4F9AE02.roa
File:                     9A80C87203EB11F0AA408709C4F9AE02.roa (raw, json)
Hash identifier:          kasr4cfZ3dqX0+HCUe6i7FKOVaCGGyAhmRKOcv9MLJs=
Subject key identifier:   78:CF:DA:E2:FE:ED:6D:9C:8C:91:10:BA:19:22:7E:58:2F:A5:65:6F
Certificate issuer:       /CN=A918EDB2/serialNumber=A7AE474416B0E8AD3A89E86774A640FEBE6973F9
Certificate serial:       1D4E
Authority key identifier: A7:AE:47:44:16:B0:E8:AD:3A:89:E8:67:74:A6:40:FE:BE:69:73:F9
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/p65HRBaw6K06iehndKZA_r5pc_k.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/9A80C87203EB11F0AA408709C4F9AE02.roa
Signing time:             Thu 08 May 2025 15:52:19 +0000
ROA not before:           Thu 08 May 2025 15:52:19 +0000
ROA not after:            Wed 01 Jul 2026 00:00:00 +0000
asID:                     134912
IP address blocks:        160.30.124.0/24 maxlen: 24
                          160.30.125.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/p65HRBaw6K06iehndKZA_r5pc_k.crl
                          rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/p65HRBaw6K06iehndKZA_r5pc_k.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/p65HRBaw6K06iehndKZA_r5pc_k.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 17 May 2025 15:20:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 7502 (0x1d4e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918EDB2, serialNumber=A7AE474416B0E8AD3A89E86774A640FEBE6973F9
        Validity
            Not Before: May  8 15:52:19 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=681cd333-0ddb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:51:f6:f5:f4:9d:50:ee:d4:ce:de:4f:fd:3b:
                    59:84:42:77:c1:ad:c8:ca:a5:26:5c:44:bb:18:ad:
                    b4:7a:a8:07:ce:52:d9:c7:de:c4:d7:6f:92:33:c7:
                    a0:ed:b1:77:af:ee:54:81:01:5b:fa:7c:73:65:a8:
                    90:23:2e:b4:bc:8c:ad:6c:79:31:23:45:20:0f:12:
                    6e:ee:03:18:bc:fc:5a:11:b2:97:e7:95:bc:1f:5f:
                    68:de:2a:ce:8d:51:8b:51:ef:3d:06:cd:fb:e1:30:
                    f9:0f:1e:83:c2:aa:5f:b4:b1:e5:f8:6c:31:e7:21:
                    3e:27:bb:db:81:93:6c:85:d0:bc:d1:19:a8:5f:ec:
                    c5:83:87:6b:48:80:dc:a2:fc:1e:16:45:8a:1c:e9:
                    4b:66:9d:f5:e7:e3:4b:ed:f4:94:8f:ea:c0:00:2c:
                    ca:20:8c:7f:54:92:7a:4a:13:2e:c3:98:72:b5:c6:
                    00:8d:8c:04:cf:a3:2f:fb:42:88:d9:d8:61:51:83:
                    ad:ee:52:3b:0e:19:b0:6c:af:51:5e:e2:6d:06:49:
                    81:86:b4:cc:59:81:be:0f:b8:62:3d:62:2c:f5:e2:
                    29:4d:56:00:30:4e:4a:ff:05:66:fa:89:6a:24:8f:
                    2b:22:e4:87:c9:a3:27:6c:04:76:cf:49:a4:2a:f8:
                    b3:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                78:CF:DA:E2:FE:ED:6D:9C:8C:91:10:BA:19:22:7E:58:2F:A5:65:6F
            X509v3 Authority Key Identifier:
                keyid:A7:AE:47:44:16:B0:E8:AD:3A:89:E8:67:74:A6:40:FE:BE:69:73:F9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/p65HRBaw6K06iehndKZA_r5pc_k.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/p65HRBaw6K06iehndKZA_r5pc_k.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/9A80C87203EB11F0AA408709C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  160.30.124.0/23

    Signature Algorithm: sha256WithRSAEncryption
         0d:92:96:fa:68:9e:f8:88:d7:3f:7a:14:e0:f2:ec:02:03:10:
         97:7d:84:d9:af:d9:2e:c7:64:75:60:ea:4d:40:2f:f8:23:92:
         a3:00:e2:b2:a5:a5:d1:e2:0b:64:d7:14:7b:8d:1c:13:03:9c:
         de:32:92:cb:ee:8b:61:79:d8:be:af:e7:a7:21:92:d2:29:f6:
         d6:cc:b7:4b:2d:d8:d0:f1:11:d4:7d:41:5a:9d:7b:15:fe:df:
         6e:77:15:18:b5:e5:4a:b3:12:38:19:f9:38:b7:37:5d:de:02:
         d1:95:de:21:12:6e:dd:2a:91:76:ac:df:b5:7b:9f:71:9a:40:
         f8:0c:e8:0f:1a:f8:65:d6:5f:91:c0:09:04:ce:48:f9:94:bc:
         79:09:13:35:37:64:fa:25:4c:eb:48:af:bb:49:08:2e:f4:2e:
         59:00:63:92:05:9f:20:53:4f:ed:19:61:59:35:6c:75:83:1e:
         1a:7b:ab:65:6c:1a:5c:1f:f6:59:b2:15:de:d1:45:a4:7e:72:
         42:d4:30:5c:bd:9f:7a:2e:ae:68:17:e8:84:f5:ac:df:d7:44:
         0b:df:54:2b:a3:9c:30:58:03:a6:84:cb:f8:ab:7e:f5:4b:dd:
         26:f8:90:dd:cb:14:d8:fb:32:f0:f9:40:ca:37:a8:08:b1:40:
         97:18:fe:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 22:12:41 2025 by rpki-client