Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/E47A5F706C3211EF8D285C31C4F9AE02.roa
File:                     E47A5F706C3211EF8D285C31C4F9AE02.roa (raw, json)
Hash identifier:          /rAi23lwcJ1pINtlriHjZX5e9T8CthBIRKjo83KtMlM=
Subject key identifier:   17:07:1B:D6:9A:5E:E1:A7:13:DA:CC:A1:FD:A1:9F:E9:1B:82:D9:F2
Certificate issuer:       /CN=A918EDB2/serialNumber=A7AE474416B0E8AD3A89E86774A640FEBE6973F9
Certificate serial:       1E3D
Authority key identifier: A7:AE:47:44:16:B0:E8:AD:3A:89:E8:67:74:A6:40:FE:BE:69:73:F9
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/p65HRBaw6K06iehndKZA_r5pc_k.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/E47A5F706C3211EF8D285C31C4F9AE02.roa
Signing time:             Thu 08 May 2025 15:55:51 +0000
ROA not before:           Thu 08 May 2025 15:55:51 +0000
ROA not after:            Wed 01 Jul 2026 00:00:00 +0000
asID:                     9830
IP address blocks:        160.30.216.0/24 maxlen: 24
                          160.30.217.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/p65HRBaw6K06iehndKZA_r5pc_k.crl
                          rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/p65HRBaw6K06iehndKZA_r5pc_k.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/p65HRBaw6K06iehndKZA_r5pc_k.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 19 May 2025 15:22:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 7741 (0x1e3d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918EDB2, serialNumber=A7AE474416B0E8AD3A89E86774A640FEBE6973F9
        Validity
            Not Before: May  8 15:55:51 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=681cd407-0de0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:83:97:db:c8:37:b9:f2:9d:c4:f5:39:ef:4d:
                    77:3f:d6:ab:e7:fe:f2:b6:ff:1b:a3:eb:a2:f9:32:
                    5f:7e:37:fa:e0:4a:2f:1e:e6:cb:d6:47:a2:9f:77:
                    46:14:9c:c4:d3:5c:6a:31:0e:a1:32:56:6b:b6:ca:
                    47:a9:b4:c2:4c:a6:0f:e4:04:b2:38:73:97:ab:85:
                    3f:7e:a1:9b:e7:7f:e0:dc:5f:37:92:3d:86:d9:10:
                    34:f5:71:a4:69:97:9c:68:ce:2a:4d:fa:3f:69:00:
                    8d:d0:5b:21:19:5d:15:36:89:1c:d8:71:3d:12:c7:
                    35:64:b8:99:9a:07:9d:94:93:b9:e2:31:8f:0c:9f:
                    ac:87:de:66:c9:18:d5:87:c8:d5:5a:3e:f9:e7:6e:
                    b7:d1:93:a1:4e:3d:6e:b9:9d:22:48:f9:f4:3c:2a:
                    6d:9a:6d:91:60:66:2d:71:ac:05:16:69:69:8e:b0:
                    11:80:2f:83:d3:5b:a5:33:77:34:4f:6e:66:77:3a:
                    10:74:07:12:f6:a4:7b:8e:2d:64:26:ad:94:3e:4f:
                    e9:02:15:0f:b8:d6:07:4d:84:ca:2f:fb:6a:fa:08:
                    38:cc:b1:5d:9a:79:49:6f:53:de:a8:50:9b:69:3f:
                    5f:6a:5f:68:ec:39:98:33:67:17:fa:9a:1d:4b:cf:
                    75:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                17:07:1B:D6:9A:5E:E1:A7:13:DA:CC:A1:FD:A1:9F:E9:1B:82:D9:F2
            X509v3 Authority Key Identifier:
                keyid:A7:AE:47:44:16:B0:E8:AD:3A:89:E8:67:74:A6:40:FE:BE:69:73:F9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/p65HRBaw6K06iehndKZA_r5pc_k.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/p65HRBaw6K06iehndKZA_r5pc_k.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/E47A5F706C3211EF8D285C31C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  160.30.216.0/23

    Signature Algorithm: sha256WithRSAEncryption
         73:c1:44:85:01:71:f2:28:58:a2:05:34:a9:3c:1d:ad:6b:6c:
         d7:b8:a4:3d:f6:17:00:c2:ed:77:c5:00:4e:36:b4:bf:55:01:
         fd:ae:ae:35:a8:e0:f4:a1:63:0d:11:11:b6:47:5d:8e:e5:72:
         4e:28:74:e5:1e:6c:5b:07:d6:7d:e2:5a:4f:e5:7a:88:62:03:
         2c:62:08:b8:54:de:0d:09:96:76:d7:5e:13:a1:ba:cb:f9:89:
         08:5c:ab:ed:cc:80:6f:a7:e7:11:3f:5f:43:33:31:83:cf:30:
         d7:2b:ca:6a:39:8a:ae:b2:b7:0a:68:87:64:de:c8:58:9f:12:
         7c:5b:76:8b:8e:5c:36:8b:54:94:be:80:60:2c:14:c9:5a:7b:
         ea:71:31:7f:ad:a9:5a:8b:09:23:90:ef:c5:58:2d:81:01:c6:
         b7:81:b8:67:a6:5a:5f:5b:51:87:9e:47:2f:ed:13:f3:f6:0b:
         35:85:db:de:14:8b:4d:fb:77:d8:0a:f0:ab:71:ed:fd:3d:31:
         2c:41:c6:d9:eb:3e:73:f9:c5:05:bf:53:3d:a3:91:fc:59:4a:
         d2:2d:cd:21:52:6c:56:7b:50:c7:e3:e6:a1:cb:95:74:3e:d4:
         04:c0:ae:c9:a8:cd:7c:de:46:f5:ce:2e:19:60:e7:3f:3a:e9:
         03:d8:a0:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 13 05:45:33 2025 by rpki-client