Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/CC5EE982BE7D11EE8F88D929C4F9AE02.roa
File:                     CC5EE982BE7D11EE8F88D929C4F9AE02.roa (raw, json)
Hash identifier:          BCkmrjh/AVu3NbIW8U9LSev9xrpTE5VCjB3W4NcuNLk=
Subject key identifier:   61:10:31:EB:EE:63:89:22:B9:BC:ED:FE:76:C7:60:E9:96:99:C3:5A
Certificate issuer:       /CN=A918EDB2/serialNumber=A7AE474416B0E8AD3A89E86774A640FEBE6973F9
Certificate serial:       1DB2
Authority key identifier: A7:AE:47:44:16:B0:E8:AD:3A:89:E8:67:74:A6:40:FE:BE:69:73:F9
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/p65HRBaw6K06iehndKZA_r5pc_k.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/CC5EE982BE7D11EE8F88D929C4F9AE02.roa
Signing time:             Thu 08 May 2025 15:53:46 +0000
ROA not before:           Thu 08 May 2025 15:53:46 +0000
ROA not after:            Wed 01 Jul 2026 00:00:00 +0000
asID:                     151737
IP address blocks:        157.15.24.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/p65HRBaw6K06iehndKZA_r5pc_k.crl
                          rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/p65HRBaw6K06iehndKZA_r5pc_k.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/p65HRBaw6K06iehndKZA_r5pc_k.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 17 May 2025 15:20:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 7602 (0x1db2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918EDB2, serialNumber=A7AE474416B0E8AD3A89E86774A640FEBE6973F9
        Validity
            Not Before: May  8 15:53:46 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=681cd38a-aa6e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:9b:04:b8:d1:29:5e:fb:13:46:93:7b:b5:84:
                    8e:f3:17:c4:3e:64:d7:ec:5f:c4:0f:5b:c9:be:f4:
                    a5:f5:75:7a:cc:47:57:ff:21:e3:00:7e:2e:94:ad:
                    2d:6a:18:cb:8b:8c:2b:20:93:15:0f:d5:dd:0c:b0:
                    b2:db:bb:7f:60:1d:c6:07:17:40:6b:22:c8:ad:86:
                    c4:47:b1:f0:e5:68:c6:0e:18:06:35:31:b5:87:9c:
                    bf:e8:7e:c9:34:a6:34:8a:57:08:ba:9f:ba:8d:b1:
                    16:4f:67:d5:29:14:a3:fa:b7:82:3b:71:9a:51:7d:
                    ed:ea:ca:62:ed:d0:3b:e4:f1:21:c8:ca:fa:02:f9:
                    86:ec:09:f5:f0:e4:d9:13:f5:a4:54:5c:9d:a5:88:
                    ec:99:c1:fb:e8:94:56:f0:17:05:a3:e5:33:be:e9:
                    6b:33:dc:e7:b2:44:52:c4:eb:4a:80:8b:56:94:fa:
                    d3:0a:c5:5e:dd:d4:a4:2a:01:79:1f:ef:64:61:f0:
                    a7:f6:5e:72:27:0b:60:8a:3c:74:af:60:13:3a:91:
                    e3:10:18:5c:47:fe:af:35:c5:56:be:d8:ae:7a:bb:
                    9c:23:f6:10:8a:8d:4d:91:6a:4e:d7:e4:7e:cd:b6:
                    5f:d2:fb:6a:d1:07:ac:8b:59:70:1f:97:61:3a:fe:
                    fd:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                61:10:31:EB:EE:63:89:22:B9:BC:ED:FE:76:C7:60:E9:96:99:C3:5A
            X509v3 Authority Key Identifier:
                keyid:A7:AE:47:44:16:B0:E8:AD:3A:89:E8:67:74:A6:40:FE:BE:69:73:F9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/p65HRBaw6K06iehndKZA_r5pc_k.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/p65HRBaw6K06iehndKZA_r5pc_k.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/CC5EE982BE7D11EE8F88D929C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  157.15.24.0/23

    Signature Algorithm: sha256WithRSAEncryption
         73:e6:00:ee:e4:8f:b9:2f:e9:9e:5a:fb:34:9e:81:9c:b1:e1:
         3e:e5:64:bc:ff:03:01:77:f6:05:cf:5f:60:cc:d8:c6:e7:f2:
         42:ac:0f:67:7a:b3:d3:98:05:13:ec:2d:62:05:fb:59:f2:1e:
         f3:52:0b:47:5c:22:40:52:20:1b:de:8a:14:7a:f6:8e:be:0a:
         83:76:8d:a4:f4:8e:01:ab:60:98:da:88:6f:88:d5:32:7b:cf:
         a1:24:53:a9:6e:f7:68:a6:80:0d:00:cc:55:f3:e4:c9:f4:80:
         85:e8:ab:c3:c9:45:0b:ed:8b:6f:9e:0f:21:be:ef:c2:37:db:
         cb:e2:c2:5c:0b:68:4d:02:8e:af:fd:5e:35:70:f0:1f:b3:8f:
         c4:b8:32:01:8c:eb:04:e9:1e:eb:76:85:5b:86:f4:5f:b6:d7:
         f2:24:34:ae:5d:af:62:af:0c:2c:00:49:69:df:08:7b:a7:fa:
         f1:43:b6:74:f2:e1:08:e6:fd:41:5c:1b:e5:05:e4:af:22:1a:
         e8:48:27:bb:9b:66:14:c2:ac:da:1a:9c:b5:f5:0a:7f:b6:92:
         c3:09:3c:e7:4e:57:08:35:ff:0d:3b:71:d6:a0:6c:e4:56:55:
         7c:b0:00:48:df:76:23:02:85:8d:3c:fa:c2:fd:c6:2d:96:99:
         e8:1a:11:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 06:20:37 2025 by rpki-client