Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/9B07333C32B111EFB8050F30C4F9AE02.roa
File:                     9B07333C32B111EFB8050F30C4F9AE02.roa (raw, json)
Hash identifier:          u9iBEBTSA84MuGF6OCACe7O2oek6fy2IfgyvGf/uG2U=
Subject key identifier:   65:91:D5:20:36:7F:9C:5A:71:EF:69:94:21:51:F8:54:5B:8F:2F:64
Certificate issuer:       /CN=A918EDB2/serialNumber=A7AE474416B0E8AD3A89E86774A640FEBE6973F9
Certificate serial:       1D8A
Authority key identifier: A7:AE:47:44:16:B0:E8:AD:3A:89:E8:67:74:A6:40:FE:BE:69:73:F9
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/p65HRBaw6K06iehndKZA_r5pc_k.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/9B07333C32B111EFB8050F30C4F9AE02.roa
Signing time:             Thu 08 May 2025 15:53:12 +0000
ROA not before:           Thu 08 May 2025 15:53:12 +0000
ROA not after:            Wed 01 Jul 2026 00:00:00 +0000
asID:                     142485
IP address blocks:        157.66.78.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/p65HRBaw6K06iehndKZA_r5pc_k.crl
                          rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/p65HRBaw6K06iehndKZA_r5pc_k.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/p65HRBaw6K06iehndKZA_r5pc_k.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 21 May 2025 15:26:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 7562 (0x1d8a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918EDB2, serialNumber=A7AE474416B0E8AD3A89E86774A640FEBE6973F9
        Validity
            Not Before: May  8 15:53:12 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=681cd368-2e85
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:8e:2e:73:f9:13:b1:d3:dc:54:64:9c:22:5d:
                    04:97:e4:c7:d8:4d:94:54:f4:7e:ba:bf:84:51:a9:
                    5f:9b:0a:3e:21:f7:86:ac:0e:25:29:ea:97:3b:18:
                    eb:61:3e:fa:db:0d:68:ba:7c:7e:ed:8a:7a:9d:79:
                    d9:b8:d9:cd:43:d8:53:62:1e:72:d3:89:be:f3:91:
                    43:2c:90:27:93:0c:b3:e0:d0:bb:4d:a9:7c:54:d8:
                    ed:df:95:d0:98:6e:02:85:4e:72:01:d0:20:02:0c:
                    7d:75:69:8c:3d:a0:b9:ce:26:f5:3d:b4:44:12:59:
                    53:6f:9d:b3:2a:c4:46:06:1c:e8:4c:d8:bd:0e:c4:
                    e0:0e:b0:fb:8a:e7:ec:04:89:32:32:8b:47:2e:cf:
                    45:a3:fc:f8:c2:3b:89:56:cb:0c:60:38:85:86:0e:
                    c2:1c:ec:30:4b:24:28:9b:24:71:b0:ce:8f:f3:07:
                    00:c2:28:eb:21:13:34:84:c0:5a:d9:1e:59:48:72:
                    40:4b:3d:95:af:37:36:5e:8f:83:61:5a:61:3b:ee:
                    77:54:62:7d:26:02:77:86:d3:c1:b6:f5:ef:21:bd:
                    53:f8:98:bd:48:43:dc:79:a5:b8:0a:fb:f4:b9:d5:
                    80:12:35:92:76:83:4a:33:bf:67:21:32:37:97:c0:
                    25:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                65:91:D5:20:36:7F:9C:5A:71:EF:69:94:21:51:F8:54:5B:8F:2F:64
            X509v3 Authority Key Identifier:
                keyid:A7:AE:47:44:16:B0:E8:AD:3A:89:E8:67:74:A6:40:FE:BE:69:73:F9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/p65HRBaw6K06iehndKZA_r5pc_k.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/p65HRBaw6K06iehndKZA_r5pc_k.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/9B07333C32B111EFB8050F30C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  157.66.78.0/23

    Signature Algorithm: sha256WithRSAEncryption
         9d:d6:8a:3f:cc:11:92:78:e1:6f:bd:c9:4d:32:95:84:96:78:
         3a:e0:14:a1:9f:fe:73:03:d6:61:08:be:29:a1:ea:48:b8:c6:
         64:30:ca:d8:57:fb:98:a4:e2:ce:46:3a:e5:3e:f8:5f:c7:18:
         1c:6e:9c:64:40:4c:e9:a6:24:e0:48:85:c5:5a:89:5f:fd:2d:
         cb:3a:ae:4e:d5:68:d1:a5:5b:a2:d9:10:a5:43:08:93:19:02:
         b3:d4:0a:85:f3:04:df:ac:3d:6f:a1:90:b9:5c:fe:87:43:b2:
         09:3c:59:13:8c:4b:08:46:32:c5:e0:48:99:07:21:4e:48:aa:
         05:de:0e:b0:a5:68:14:d8:aa:9b:5b:52:aa:6d:5e:c1:92:33:
         c1:12:6b:32:a1:29:3d:41:40:6a:f0:57:b6:4c:69:8b:35:41:
         34:79:8f:f7:a1:2f:28:52:1d:e6:fa:0a:e3:68:1a:fc:c3:75:
         45:99:2c:17:74:c5:01:a1:23:de:33:7b:13:36:20:06:03:7c:
         e2:ee:08:79:a0:33:8c:d7:fe:a1:0b:6a:3f:45:1f:d6:cf:2c:
         42:6c:92:5d:94:98:26:e1:88:c8:2c:53:c0:25:a8:13:ba:fc:
         52:b9:d6:c3:27:81:8b:56:0b:1a:6c:51:ef:e9:cd:2b:e2:8d:
         71:bc:b5:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 15 06:56:11 2025 by rpki-client