Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/9CB242F4982C11EFB1500534C4F9AE02.roa
File:                     9CB242F4982C11EFB1500534C4F9AE02.roa (raw, json)
Hash identifier:          PGWEc9JRvbdGr42jxnGxCRUcbRd2FO5lkbK7JWO80Ic=
Subject key identifier:   3F:78:20:32:39:56:41:42:D7:58:0E:4C:CF:43:82:02:E4:4B:41:BD
Certificate issuer:       /CN=A918EDB2/serialNumber=A7AE474416B0E8AD3A89E86774A640FEBE6973F9
Certificate serial:       1E05
Authority key identifier: A7:AE:47:44:16:B0:E8:AD:3A:89:E8:67:74:A6:40:FE:BE:69:73:F9
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/p65HRBaw6K06iehndKZA_r5pc_k.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/9CB242F4982C11EFB1500534C4F9AE02.roa
Signing time:             Thu 08 May 2025 15:55:00 +0000
ROA not before:           Thu 08 May 2025 15:55:00 +0000
ROA not after:            Wed 01 Jul 2026 00:00:00 +0000
asID:                     153229
IP address blocks:        160.191.44.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/p65HRBaw6K06iehndKZA_r5pc_k.crl
                          rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/p65HRBaw6K06iehndKZA_r5pc_k.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/p65HRBaw6K06iehndKZA_r5pc_k.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 19 May 2025 15:22:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 7685 (0x1e05)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918EDB2, serialNumber=A7AE474416B0E8AD3A89E86774A640FEBE6973F9
        Validity
            Not Before: May  8 15:55:00 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=681cd3d4-27ab
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:e7:08:03:b4:03:c1:9d:a0:59:e4:b4:df:d4:
                    72:4a:a2:e2:16:9e:ee:97:fd:73:66:02:b8:35:ba:
                    71:c6:42:70:42:2e:a3:11:e9:1e:62:97:5f:b8:45:
                    83:7d:3b:ba:a0:80:5a:be:d4:21:38:32:52:fb:84:
                    af:a3:bd:ef:ca:0c:09:b5:bf:f8:4f:d0:e6:06:4f:
                    a1:34:81:91:06:1c:b1:73:9c:76:fb:ba:e2:ee:31:
                    f0:95:0b:91:17:b8:73:eb:e9:85:39:2f:95:ca:cc:
                    b8:89:d3:a6:dd:75:e2:5d:81:e4:8f:56:e7:52:f3:
                    74:0b:bb:1d:9d:6c:ca:c7:d2:36:fe:a4:2a:52:7a:
                    ca:39:c6:2c:37:76:a7:f2:18:a0:31:c3:7f:f7:6f:
                    11:fd:71:57:69:b0:da:29:f8:c4:06:db:50:30:73:
                    9a:3c:c4:76:88:31:76:9f:23:27:d3:78:8c:3e:fd:
                    30:1c:85:f0:6c:be:45:ac:38:c6:63:36:19:57:38:
                    7c:c6:bc:69:a7:53:26:89:f2:98:45:22:23:4c:6e:
                    2d:62:45:b0:7a:5d:83:5c:47:05:2e:20:be:b4:cd:
                    a8:1b:d6:fe:3e:5e:a5:b0:88:d3:71:26:35:dc:30:
                    c0:92:eb:37:5f:2a:5e:40:db:75:b4:eb:2d:b1:a6:
                    aa:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3F:78:20:32:39:56:41:42:D7:58:0E:4C:CF:43:82:02:E4:4B:41:BD
            X509v3 Authority Key Identifier:
                keyid:A7:AE:47:44:16:B0:E8:AD:3A:89:E8:67:74:A6:40:FE:BE:69:73:F9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/p65HRBaw6K06iehndKZA_r5pc_k.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/p65HRBaw6K06iehndKZA_r5pc_k.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/9CB242F4982C11EFB1500534C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  160.191.44.0/23

    Signature Algorithm: sha256WithRSAEncryption
         6a:55:a4:2c:24:a7:59:f4:cc:33:3a:61:15:7d:e7:c4:c7:5b:
         3e:73:0c:5c:82:ac:06:48:4c:02:81:8d:86:3b:34:a3:58:7f:
         62:5a:60:9e:f6:ee:c4:65:db:b6:c5:51:f7:96:9b:df:f9:da:
         6e:d9:39:eb:19:cb:73:cd:8a:e8:ba:aa:92:77:3f:32:62:cb:
         97:61:c0:86:b1:4b:f8:03:35:8a:47:4b:ac:ea:b8:8f:f9:84:
         aa:bd:1a:18:da:c2:e3:a3:21:0a:10:bd:44:e3:a7:d1:4f:ad:
         5d:8f:9c:f7:d4:4a:c5:08:3f:b0:e9:b4:c7:96:51:21:f6:6a:
         00:98:ba:16:c7:e2:76:9d:dd:c6:4f:a8:5a:31:60:64:b6:b1:
         3d:05:31:a8:47:12:59:e5:3e:23:89:cd:9c:41:84:69:2a:40:
         38:99:67:b9:2d:09:bd:af:c3:27:b8:16:cf:50:28:4b:8e:87:
         16:cb:89:fc:6f:27:2e:0d:7d:a7:e5:6e:f8:12:6b:2b:03:3c:
         ba:fa:1b:89:e6:0b:41:4c:15:13:c7:64:93:1e:b8:ed:cb:a0:
         ce:6f:c1:ad:16:85:b3:a3:dd:dc:8d:be:90:7b:4a:c3:41:bf:
         4c:b9:8d:75:ab:ea:7f:f4:b3:2f:b9:5a:13:1f:54:ff:f3:e6:
         f8:a4:cc:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 13 02:14:41 2025 by rpki-client