Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/B4C80DDE8ADE11EFBA7E1E44C4F9AE02.roa
File:                     B4C80DDE8ADE11EFBA7E1E44C4F9AE02.roa (raw, json)
Hash identifier:          1PatRbXJ2HM4qnCrmlWGJ7psiZGUmXh7plkfPKfhaE4=
Subject key identifier:   AF:A7:92:52:05:58:F1:38:C9:B2:B9:03:9D:2F:AC:04:AF:36:77:9B
Certificate issuer:       /CN=A918EDB2/serialNumber=A7AE474416B0E8AD3A89E86774A640FEBE6973F9
Certificate serial:       1E04
Authority key identifier: A7:AE:47:44:16:B0:E8:AD:3A:89:E8:67:74:A6:40:FE:BE:69:73:F9
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/p65HRBaw6K06iehndKZA_r5pc_k.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/B4C80DDE8ADE11EFBA7E1E44C4F9AE02.roa
Signing time:             Thu 08 May 2025 15:54:59 +0000
ROA not before:           Thu 08 May 2025 15:54:59 +0000
ROA not after:            Wed 01 Jul 2026 00:00:00 +0000
asID:                     153228
IP address blocks:        160.187.250.0/24 maxlen: 24
                          160.187.251.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/p65HRBaw6K06iehndKZA_r5pc_k.crl
                          rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/p65HRBaw6K06iehndKZA_r5pc_k.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/p65HRBaw6K06iehndKZA_r5pc_k.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 17 May 2025 15:20:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 7684 (0x1e04)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918EDB2, serialNumber=A7AE474416B0E8AD3A89E86774A640FEBE6973F9
        Validity
            Not Before: May  8 15:54:59 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=681cd3d3-6820
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:dc:e2:da:53:86:22:7b:e5:ba:f0:c9:fa:78:
                    6f:bf:9a:6b:97:79:6c:b4:b0:f7:65:a3:ac:54:b3:
                    88:93:2a:73:69:1d:43:a3:e2:3f:35:ac:cf:0f:3e:
                    28:9b:a8:fa:0f:a7:5f:94:e3:30:08:59:c0:a4:3e:
                    1d:48:d6:4e:a6:d3:1e:bf:e0:ee:cc:2a:6c:c4:5f:
                    c6:2b:cf:32:8c:07:29:13:4b:8d:7c:c8:55:54:b6:
                    15:01:d9:95:1a:69:b5:b8:d6:61:b7:f2:0f:b5:84:
                    2e:3b:64:23:29:0a:06:45:5e:5b:60:00:46:f7:34:
                    0e:ff:60:4d:c2:08:4d:19:d0:4a:5f:52:d3:8b:85:
                    16:8b:99:7c:77:ad:e4:60:b3:f7:dd:a7:16:65:64:
                    a7:37:9d:a6:fc:28:a0:e9:e1:c4:bf:96:67:2f:f6:
                    5b:8d:2a:43:55:4c:35:01:3f:84:0e:65:21:89:6b:
                    07:23:d9:e0:cc:41:99:8b:a6:b9:cc:43:47:7a:f2:
                    d2:57:c3:b2:0b:70:35:78:8f:16:0d:da:9c:96:68:
                    05:fd:55:96:9b:63:90:f0:ee:f1:83:d3:e9:94:53:
                    e2:3d:09:10:e4:2f:d1:1a:12:55:0a:bd:94:6e:91:
                    fb:6b:6e:18:ac:0d:c4:3c:e5:75:7f:ae:4c:6e:ec:
                    95:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AF:A7:92:52:05:58:F1:38:C9:B2:B9:03:9D:2F:AC:04:AF:36:77:9B
            X509v3 Authority Key Identifier:
                keyid:A7:AE:47:44:16:B0:E8:AD:3A:89:E8:67:74:A6:40:FE:BE:69:73:F9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/p65HRBaw6K06iehndKZA_r5pc_k.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/p65HRBaw6K06iehndKZA_r5pc_k.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/B4C80DDE8ADE11EFBA7E1E44C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  160.187.250.0/23

    Signature Algorithm: sha256WithRSAEncryption
         8d:4e:25:e9:ce:af:34:28:39:04:14:fd:0c:d5:6d:e4:fd:fb:
         5a:ea:ea:21:fb:a4:35:1b:3c:b2:db:74:cb:33:46:dc:73:8b:
         7d:4b:12:c0:e6:80:c2:4a:11:37:3f:6f:c3:f9:34:4c:9c:3b:
         ab:02:9a:67:d9:51:16:99:1a:01:ab:6f:a8:00:47:02:c8:f9:
         83:88:b6:99:69:80:09:ee:ec:cf:da:ed:46:4f:d6:21:53:96:
         61:b9:97:92:5b:6b:a1:97:a9:f3:a7:c7:f1:a3:cf:f8:28:1b:
         6c:a6:92:c0:96:b1:04:24:aa:7f:30:dc:1e:be:ed:0f:12:79:
         be:ab:df:ec:74:e7:be:c6:9b:5e:3d:ef:0c:4f:a2:de:e1:94:
         20:b8:a7:10:d3:46:4f:de:43:05:14:28:2d:e9:f0:31:c3:26:
         39:29:cf:b7:a9:33:ba:89:aa:22:0e:1f:45:1a:71:45:0c:27:
         32:0f:39:be:ac:c2:70:b1:6e:67:21:1d:fd:7c:c0:a9:2e:f9:
         fb:17:af:d7:42:18:19:28:42:4b:c3:33:32:ab:26:c1:33:83:
         4a:ea:ff:19:ee:13:2b:b7:9f:3c:22:7b:a5:1d:ff:f4:f3:fd:
         e0:13:34:53:4b:22:27:64:e7:aa:3d:11:f3:47:36:23:fa:b6:
         1f:de:eb:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 01:09:45 2025 by rpki-client