Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/C450720E223911EF9B58F681C4F9AE02.roa
File:                     C450720E223911EF9B58F681C4F9AE02.roa (raw, json)
Hash identifier:          hgcB8nW8OBWyhABCbUrmx3abF6TjO0V+fy/OcucaYX4=
Subject key identifier:   6A:1F:5E:33:84:58:8C:D4:91:99:32:5C:C2:50:B8:88:6C:24:21:BE
Certificate issuer:       /CN=A918EDB2/serialNumber=A7AE474416B0E8AD3A89E86774A640FEBE6973F9
Certificate serial:       1D55
Authority key identifier: A7:AE:47:44:16:B0:E8:AD:3A:89:E8:67:74:A6:40:FE:BE:69:73:F9
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/p65HRBaw6K06iehndKZA_r5pc_k.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/C450720E223911EF9B58F681C4F9AE02.roa
Signing time:             Thu 08 May 2025 15:52:25 +0000
ROA not before:           Thu 08 May 2025 15:52:25 +0000
ROA not after:            Wed 01 Jul 2026 00:00:00 +0000
asID:                     135745
IP address blocks:        160.20.228.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/p65HRBaw6K06iehndKZA_r5pc_k.crl
                          rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/p65HRBaw6K06iehndKZA_r5pc_k.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/p65HRBaw6K06iehndKZA_r5pc_k.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 20 May 2025 02:50:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 7509 (0x1d55)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918EDB2, serialNumber=A7AE474416B0E8AD3A89E86774A640FEBE6973F9
        Validity
            Not Before: May  8 15:52:25 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=681cd339-0451
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:dd:f1:a5:58:8c:42:32:03:39:20:29:8a:74:
                    6f:52:9d:3c:26:45:72:a3:78:20:1b:12:7b:71:62:
                    24:0b:95:d3:c7:9e:16:3f:e3:bc:0e:11:64:d1:e2:
                    09:a9:fc:bf:d8:0e:b6:12:26:60:dc:58:f1:d2:21:
                    91:ab:95:2d:b5:d5:58:4b:86:49:f0:ae:59:0c:17:
                    e6:b6:cc:f8:b8:2a:ca:08:ad:17:ce:05:71:d4:26:
                    09:00:6d:1c:ab:25:a8:45:5d:21:3b:5e:bd:1c:93:
                    6f:b7:e5:6f:c5:22:9b:56:40:bc:f5:93:9f:03:3d:
                    cb:a1:ff:4a:6e:c0:21:8b:50:75:ca:31:7f:56:60:
                    89:11:bc:e6:65:c4:5f:f9:39:8d:0a:f5:19:93:46:
                    03:ba:e3:a7:d6:7c:46:8f:24:8c:3b:8e:de:0f:0d:
                    52:dd:b5:7f:fd:34:d4:e9:d3:f2:c6:02:ed:c5:54:
                    2c:a8:19:81:5c:02:18:df:17:8f:56:de:b8:7e:14:
                    9e:dc:da:19:83:08:ec:c2:4d:44:58:90:3c:a4:4f:
                    dc:26:e1:11:c8:85:87:18:63:47:7d:d1:df:f6:c3:
                    fe:b9:84:be:3b:2f:2e:e8:5b:75:fc:55:a3:fc:94:
                    e1:1a:16:eb:fb:59:7a:10:16:fa:18:a6:52:ac:0f:
                    bc:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6A:1F:5E:33:84:58:8C:D4:91:99:32:5C:C2:50:B8:88:6C:24:21:BE
            X509v3 Authority Key Identifier:
                keyid:A7:AE:47:44:16:B0:E8:AD:3A:89:E8:67:74:A6:40:FE:BE:69:73:F9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/p65HRBaw6K06iehndKZA_r5pc_k.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/p65HRBaw6K06iehndKZA_r5pc_k.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/C450720E223911EF9B58F681C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  160.20.228.0/24

    Signature Algorithm: sha256WithRSAEncryption
         66:06:51:c0:ae:5f:79:ae:8a:1e:34:95:02:fb:ed:5d:a8:10:
         41:8a:fd:c3:cc:ca:05:13:e7:6e:45:27:bf:16:6d:09:97:b2:
         e2:e1:fb:83:43:62:16:70:6a:ee:c1:07:3a:a4:ec:46:ab:9a:
         2d:78:be:ef:3e:b7:10:4c:74:f1:c1:5d:55:99:2d:ab:9d:33:
         99:ae:6b:c3:f6:b2:d5:86:ae:74:fe:b7:51:e7:67:ce:72:47:
         25:ac:bd:7e:ba:93:4c:1e:90:7f:4e:a7:cc:81:9f:96:78:de:
         5d:b4:cd:24:f3:46:e3:4a:2b:73:36:2c:56:54:5b:80:7b:06:
         13:ab:fa:06:ee:0e:42:14:0f:6f:33:0c:77:f7:0e:41:5a:1d:
         64:70:5b:e3:f9:0b:c4:a3:22:d4:b4:8f:06:83:69:a1:59:8a:
         a9:bb:76:66:fd:3c:7c:ef:b9:2f:e0:e4:aa:40:b0:6c:10:01:
         0a:79:13:5d:33:cf:44:e4:81:6a:19:3a:74:5f:2b:92:de:70:
         08:ba:ac:81:76:ea:51:6c:68:48:35:fd:09:d3:e4:b8:1f:09:
         f3:6c:94:8c:b7:89:31:e2:cf:20:31:20:e6:56:45:21:7d:ed:
         6a:68:69:90:85:d3:6b:57:54:d2:62:f5:e0:8c:76:e9:6f:15:
         2c:73:ff:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 13 11:51:24 2025 by rpki-client