Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/BD032766013D11EFA1F5104BC4F9AE02.roa
File:                     BD032766013D11EFA1F5104BC4F9AE02.roa (raw, json)
Hash identifier:          a6DDA+5hh5w9t+C19djugqcRIWUXlmgaEQtmNOMN2pI=
Subject key identifier:   57:1B:F0:C7:51:F0:56:AB:E8:91:53:0A:62:00:D2:4D:64:0F:F4:C5
Certificate issuer:       /CN=A918EDB2/serialNumber=A7AE474416B0E8AD3A89E86774A640FEBE6973F9
Certificate serial:       1DA9
Authority key identifier: A7:AE:47:44:16:B0:E8:AD:3A:89:E8:67:74:A6:40:FE:BE:69:73:F9
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/p65HRBaw6K06iehndKZA_r5pc_k.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/BD032766013D11EFA1F5104BC4F9AE02.roa
Signing time:             Thu 08 May 2025 15:53:38 +0000
ROA not before:           Thu 08 May 2025 15:53:38 +0000
ROA not after:            Wed 01 Jul 2026 00:00:00 +0000
asID:                     151726
IP address blocks:        157.10.150.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/p65HRBaw6K06iehndKZA_r5pc_k.crl
                          rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/p65HRBaw6K06iehndKZA_r5pc_k.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/p65HRBaw6K06iehndKZA_r5pc_k.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 20 May 2025 10:53:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 7593 (0x1da9)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918EDB2, serialNumber=A7AE474416B0E8AD3A89E86774A640FEBE6973F9
        Validity
            Not Before: May  8 15:53:38 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=681cd382-1f0e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:d1:c3:c9:f6:fe:71:67:19:40:a2:06:ff:0a:
                    2e:be:81:81:ce:9e:f0:1f:91:90:fa:44:f6:af:45:
                    05:eb:af:7e:3c:e8:b4:09:a6:c6:a4:96:fc:d7:df:
                    12:fc:44:94:ac:20:aa:e7:23:24:7c:9e:04:a4:ed:
                    09:77:ba:18:03:71:54:84:c8:f3:0d:08:8e:b0:65:
                    83:ed:d0:11:d2:17:97:af:dc:67:97:b6:50:81:e3:
                    54:bd:6b:ca:ec:14:70:6b:aa:d3:c3:0e:a3:ef:2e:
                    c8:e7:53:b3:24:1e:dd:f2:4b:8d:8d:e9:2f:ee:96:
                    d2:31:ca:61:cf:f5:7d:29:76:4c:61:16:cf:4d:20:
                    72:3e:36:32:a2:46:a6:9b:7e:67:61:cc:1e:5c:b0:
                    a9:82:9f:8b:61:82:13:e0:f7:a6:8e:d2:8f:98:ec:
                    51:83:d1:74:de:ab:c4:84:84:26:d2:8c:5f:16:b9:
                    5a:13:37:13:a4:26:ae:92:59:93:14:c8:56:7b:b2:
                    30:bf:84:d8:51:bb:c2:85:07:39:60:39:a9:95:c4:
                    3f:a5:e7:94:3b:39:5d:73:ef:cb:89:d2:6f:23:93:
                    bc:f6:62:b1:04:54:ec:5f:2a:43:a9:0a:77:8f:fd:
                    07:be:9d:7d:0a:81:96:f3:7e:ee:40:a9:1c:7e:0a:
                    82:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                57:1B:F0:C7:51:F0:56:AB:E8:91:53:0A:62:00:D2:4D:64:0F:F4:C5
            X509v3 Authority Key Identifier:
                keyid:A7:AE:47:44:16:B0:E8:AD:3A:89:E8:67:74:A6:40:FE:BE:69:73:F9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/p65HRBaw6K06iehndKZA_r5pc_k.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/p65HRBaw6K06iehndKZA_r5pc_k.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/BD032766013D11EFA1F5104BC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  157.10.150.0/23

    Signature Algorithm: sha256WithRSAEncryption
         cb:53:0b:e3:cc:60:a9:da:ee:07:d1:53:28:a4:4d:88:54:49:
         e1:24:82:b5:cf:21:c5:7b:38:b6:c1:77:48:9e:d1:ba:9c:af:
         a0:11:e9:74:05:41:8d:55:ab:e9:30:fe:08:cf:f2:22:f9:44:
         66:a5:d3:7c:10:e1:f8:7d:c3:45:5b:e1:ca:ad:ac:de:87:70:
         1b:d7:f5:e1:ec:72:fa:6b:7c:d5:2b:ee:be:57:ae:5d:69:74:
         12:fa:37:d6:c6:dc:5e:35:67:64:a8:80:d4:22:9f:a5:0f:39:
         48:19:76:c9:24:1d:58:57:e4:a7:62:35:3d:d8:db:ac:87:ac:
         06:4f:e3:fa:15:9e:e5:b0:8f:17:18:a5:c1:7b:4e:c9:f0:1a:
         fd:4f:54:c2:33:de:8f:d4:ab:6a:0c:d1:74:67:62:16:61:32:
         81:83:51:3a:cc:69:c5:8e:e5:6e:4a:7f:a6:f7:6b:96:1f:86:
         75:14:75:60:c1:c0:f0:82:e7:e7:df:71:b5:df:cd:aa:1e:12:
         61:6d:43:27:d8:b6:8a:cb:ae:94:f5:ae:40:cc:69:4a:8c:92:
         57:92:0f:ff:9e:ae:02:0b:ae:74:49:dc:c8:2e:32:50:e9:44:
         c8:f2:31:15:df:42:dc:2b:8c:7a:6e:2b:b3:a4:a2:72:b8:4d:
         89:c3:3b:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 14 14:56:14 2025 by rpki-client