Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/B177DDD0816A11EFA9CE242CC4F9AE02.roa
File:                     B177DDD0816A11EFA9CE242CC4F9AE02.roa (raw, json)
Hash identifier:          NA2/kaKye54Z12Us333z9QLematNShqsP7EaJlwhNMo=
Subject key identifier:   3F:48:FB:E4:28:42:F7:34:DC:7C:D1:FA:7C:DF:71:9F:0F:B8:56:8F
Certificate issuer:       /CN=A918EDB2/serialNumber=A7AE474416B0E8AD3A89E86774A640FEBE6973F9
Certificate serial:       1E01
Authority key identifier: A7:AE:47:44:16:B0:E8:AD:3A:89:E8:67:74:A6:40:FE:BE:69:73:F9
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/p65HRBaw6K06iehndKZA_r5pc_k.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/B177DDD0816A11EFA9CE242CC4F9AE02.roa
Signing time:             Thu 08 May 2025 15:54:56 +0000
ROA not before:           Thu 08 May 2025 15:54:56 +0000
ROA not after:            Wed 01 Jul 2026 00:00:00 +0000
asID:                     153224
IP address blocks:        160.187.140.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/p65HRBaw6K06iehndKZA_r5pc_k.crl
                          rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/p65HRBaw6K06iehndKZA_r5pc_k.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/p65HRBaw6K06iehndKZA_r5pc_k.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 17 May 2025 15:20:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 7681 (0x1e01)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918EDB2, serialNumber=A7AE474416B0E8AD3A89E86774A640FEBE6973F9
        Validity
            Not Before: May  8 15:54:56 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=681cd3d0-df6b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:65:8d:66:fc:e9:49:29:92:01:d8:62:9c:a7:
                    88:a0:5f:87:6f:ff:19:04:7c:aa:3b:9a:59:c6:8c:
                    35:c6:60:5b:43:fc:65:d4:10:12:8c:7b:ed:df:75:
                    d6:95:31:49:8a:c4:e8:e6:19:48:ce:e9:79:76:d0:
                    8d:67:63:32:e7:fe:6f:07:3a:42:46:9a:0f:55:c7:
                    30:45:d2:d9:ec:f3:1a:ee:df:61:52:2c:24:53:01:
                    40:3f:8f:c1:63:83:58:12:73:c5:80:79:b6:f5:fd:
                    65:d3:6a:5d:b8:94:12:a4:3c:bd:41:2b:0a:1a:dc:
                    69:ea:b8:b4:6c:85:35:fb:73:78:25:48:a0:25:13:
                    bf:a2:07:15:92:3f:bd:3a:f1:d0:33:4b:dd:98:12:
                    39:07:44:11:c9:8d:6a:3f:3c:c9:7d:4a:d1:2a:8c:
                    cb:f7:1e:3e:35:1b:b1:3f:93:60:89:e6:c5:27:68:
                    a5:9e:43:a6:28:4a:a2:7e:89:46:71:6d:a1:07:bf:
                    62:dc:44:37:2e:c8:1e:6e:5f:b0:eb:d2:7f:72:78:
                    ee:98:07:ef:dd:a6:49:f0:cb:ba:ca:d4:fd:5d:ac:
                    24:39:ea:9d:2b:8e:a8:c7:e8:64:c2:05:21:27:df:
                    3d:5a:bd:31:58:58:1b:0e:e0:ca:19:56:bd:9e:1a:
                    f9:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3F:48:FB:E4:28:42:F7:34:DC:7C:D1:FA:7C:DF:71:9F:0F:B8:56:8F
            X509v3 Authority Key Identifier:
                keyid:A7:AE:47:44:16:B0:E8:AD:3A:89:E8:67:74:A6:40:FE:BE:69:73:F9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/p65HRBaw6K06iehndKZA_r5pc_k.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/p65HRBaw6K06iehndKZA_r5pc_k.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/B177DDD0816A11EFA9CE242CC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  160.187.140.0/23

    Signature Algorithm: sha256WithRSAEncryption
         32:ed:5d:68:3b:fd:e7:d1:7d:66:01:a5:03:55:14:e0:4e:a3:
         43:be:11:26:f1:55:d0:6d:51:81:77:f6:83:2d:e9:0a:60:41:
         b3:1f:53:f8:26:4f:84:ee:f0:7e:c4:89:85:ad:c3:ac:6d:62:
         b5:f9:c3:86:88:88:53:b5:92:2e:5e:d4:79:c9:a9:05:04:d5:
         03:d2:16:20:f2:43:c4:c4:9c:44:dc:e8:5f:2e:01:eb:e9:10:
         3b:b3:2a:9d:0f:d6:5b:53:88:81:13:78:63:26:00:e2:e5:97:
         4b:35:46:30:d0:d0:b9:51:05:3f:5c:2b:32:ed:20:5d:94:6a:
         ce:e0:e4:6d:0d:0e:2e:83:6f:e7:a1:9c:8c:df:3b:38:b9:11:
         07:8d:5b:6c:1b:88:06:88:8a:3e:d5:49:98:c6:cf:81:a8:1c:
         02:3d:e0:c2:89:e4:78:de:4b:fb:58:0d:af:cf:9f:6e:d4:4a:
         84:8f:2e:74:5b:0f:c8:92:5f:af:2c:05:91:1c:af:11:00:46:
         b1:b4:4f:4a:9c:86:ef:38:dd:04:14:8c:3f:e0:3a:cd:67:d1:
         7d:50:86:81:75:e9:4f:5e:e4:97:2f:1d:39:d8:36:79:1c:d7:
         29:a2:b3:2e:dc:a5:b5:6e:0d:94:cc:9d:07:0e:e3:0c:72:ca:
         81:a0:92:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 15:26:45 2025 by rpki-client