Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/E1776024298011EF8FDCF737C4F9AE02.roa
File:                     E1776024298011EF8FDCF737C4F9AE02.roa (raw, json)
Hash identifier:          q3VLERqkd+kMeAaqCwLJI9C6pNWuwXf6GjOnL0U5km4=
Subject key identifier:   07:71:BA:FB:BE:0A:1B:E9:CE:6B:DB:D8:7E:CE:35:AD:29:04:0F:3E
Certificate issuer:       /CN=A918EDB2/serialNumber=A7AE474416B0E8AD3A89E86774A640FEBE6973F9
Certificate serial:       1DBE
Authority key identifier: A7:AE:47:44:16:B0:E8:AD:3A:89:E8:67:74:A6:40:FE:BE:69:73:F9
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/p65HRBaw6K06iehndKZA_r5pc_k.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/E1776024298011EF8FDCF737C4F9AE02.roa
Signing time:             Thu 08 May 2025 15:53:56 +0000
ROA not before:           Thu 08 May 2025 15:53:56 +0000
ROA not after:            Wed 01 Jul 2026 00:00:00 +0000
asID:                     152493
IP address blocks:        157.66.28.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/p65HRBaw6K06iehndKZA_r5pc_k.crl
                          rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/p65HRBaw6K06iehndKZA_r5pc_k.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/p65HRBaw6K06iehndKZA_r5pc_k.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 17 May 2025 15:20:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 7614 (0x1dbe)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918EDB2, serialNumber=A7AE474416B0E8AD3A89E86774A640FEBE6973F9
        Validity
            Not Before: May  8 15:53:56 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=681cd394-bee1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:ec:2c:8e:01:db:58:24:8a:24:ed:b0:32:16:
                    60:49:d4:20:b9:97:38:0f:5a:49:06:22:32:eb:46:
                    75:d0:d1:92:8a:fa:b5:f1:09:a9:c1:e5:0f:67:97:
                    9c:15:ce:f4:62:34:d1:b8:54:7d:f2:93:dc:54:bf:
                    72:b7:d4:be:6b:c3:8d:55:fa:2a:1f:e6:50:d0:7d:
                    63:26:d5:3f:73:d1:13:96:93:28:ce:19:8b:fe:05:
                    f8:67:af:c2:c7:66:1b:7d:47:b0:ec:7f:02:4e:7b:
                    6a:23:50:73:87:43:b8:c9:f4:cc:42:a9:ca:53:14:
                    a4:13:2d:52:7a:2d:31:85:eb:9e:6a:0a:86:ce:e8:
                    2c:98:47:10:ce:10:2f:61:45:83:78:19:67:45:cf:
                    a8:cb:03:5f:89:bf:1d:79:f2:a3:24:84:d8:60:94:
                    6f:ba:33:70:16:71:38:4f:5c:44:b4:5d:94:d8:ba:
                    f7:12:ec:41:02:b9:fe:95:5f:84:39:7e:2c:9b:12:
                    9c:c0:28:58:18:e9:b1:28:20:41:2e:2f:48:c9:dd:
                    19:e2:ae:1c:56:56:32:0e:8e:fd:c7:47:47:8e:e9:
                    56:88:a4:39:25:5e:d8:fa:b6:ca:45:49:08:cc:45:
                    d2:e1:1c:95:4a:d8:b2:b2:65:e8:36:5b:22:be:10:
                    e8:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                07:71:BA:FB:BE:0A:1B:E9:CE:6B:DB:D8:7E:CE:35:AD:29:04:0F:3E
            X509v3 Authority Key Identifier:
                keyid:A7:AE:47:44:16:B0:E8:AD:3A:89:E8:67:74:A6:40:FE:BE:69:73:F9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/p65HRBaw6K06iehndKZA_r5pc_k.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/p65HRBaw6K06iehndKZA_r5pc_k.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/E1776024298011EF8FDCF737C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  157.66.28.0/24

    Signature Algorithm: sha256WithRSAEncryption
         45:6f:97:d7:8b:62:00:f7:e7:e8:25:a3:8d:ca:00:e1:60:f0:
         9f:70:61:cc:64:6f:80:58:4d:b5:b5:88:d8:4e:45:e6:c5:5b:
         88:76:4f:65:df:51:f7:a2:c8:6e:4e:fa:f9:a0:e6:5a:7a:63:
         25:b1:66:2a:92:69:a5:17:23:fe:60:23:65:f5:24:18:cb:22:
         cb:d0:1f:b6:78:85:60:ca:c3:f0:61:6f:df:53:68:09:7d:b5:
         3f:01:a2:71:fc:1f:3b:df:15:d6:1d:f8:26:2b:7f:4d:26:cd:
         c4:f5:86:3b:f1:45:d0:4e:04:5c:7d:e7:17:ec:c0:87:2d:59:
         60:84:a5:9f:fb:75:2a:ae:ec:e7:c6:15:1a:3b:91:b5:4f:e4:
         8a:08:98:66:ce:96:4a:56:18:3b:bb:ca:19:17:bc:8c:64:c4:
         19:c4:a2:85:e5:e4:b1:1d:d0:7d:93:3c:1f:a9:d3:30:94:43:
         8d:e7:30:c7:2b:a7:c9:6b:9f:42:f6:0f:1c:4f:d9:bc:55:c7:
         ec:ce:eb:8e:60:0f:39:a0:53:00:97:c6:47:ff:0f:df:a1:df:
         cb:16:2a:6f:5f:6d:79:e3:df:0f:39:46:58:24:49:a2:05:9f:
         7d:5d:0a:ca:71:24:06:45:2f:5f:58:36:b3:05:da:c3:f7:b7:
         46:b7:92:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 12 07:30:18 2025 by rpki-client