Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/EE6978B848BF11EF96563826C4F9AE02.roa
File:                     EE6978B848BF11EF96563826C4F9AE02.roa (raw, json)
Hash identifier:          jnyoegq0FPIEOgPkzjhUwqPdaCJ4ST/99oPa/h2MQM0=
Subject key identifier:   A4:86:30:33:E5:4E:DC:74:95:89:A7:04:7B:BB:E0:CF:D6:A4:DE:19
Certificate issuer:       /CN=A918EDB2/serialNumber=A7AE474416B0E8AD3A89E86774A640FEBE6973F9
Certificate serial:       1E3C
Authority key identifier: A7:AE:47:44:16:B0:E8:AD:3A:89:E8:67:74:A6:40:FE:BE:69:73:F9
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/p65HRBaw6K06iehndKZA_r5pc_k.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/EE6978B848BF11EF96563826C4F9AE02.roa
Signing time:             Thu 08 May 2025 15:55:50 +0000
ROA not before:           Thu 08 May 2025 15:55:50 +0000
ROA not after:            Wed 01 Jul 2026 00:00:00 +0000
asID:                     9829
IP address blocks:        158.144.183.0/24 maxlen: 24
                          160.30.8.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/p65HRBaw6K06iehndKZA_r5pc_k.crl
                          rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/p65HRBaw6K06iehndKZA_r5pc_k.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/p65HRBaw6K06iehndKZA_r5pc_k.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 17 May 2025 15:20:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 7740 (0x1e3c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918EDB2, serialNumber=A7AE474416B0E8AD3A89E86774A640FEBE6973F9
        Validity
            Not Before: May  8 15:55:50 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=681cd406-9a59
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:50:6d:d2:16:a2:45:64:ec:07:1b:2a:be:0e:
                    a9:e4:7f:6a:71:d5:9b:fb:1d:40:30:16:e4:e7:23:
                    89:20:60:fc:80:f2:80:df:b9:04:95:c0:7a:15:72:
                    55:19:17:44:9e:73:85:fd:9f:8a:b5:c2:ee:ce:7e:
                    16:5c:16:76:86:df:b0:7f:72:0a:45:0c:c0:8f:1d:
                    1c:fa:df:0b:3c:4c:d5:42:d3:cf:02:7e:64:60:39:
                    92:d7:2f:8b:c1:bf:49:36:a6:7f:b3:16:90:31:28:
                    f8:b2:4d:a7:0f:f7:41:04:2e:43:e4:c7:82:e1:bc:
                    2a:4e:b1:81:22:6d:41:ab:16:03:14:4b:6d:32:ad:
                    95:0c:fb:07:25:6d:8d:1c:d8:32:0e:05:f5:9b:e9:
                    0e:be:76:23:ea:db:2f:e5:49:d7:d9:c8:94:77:79:
                    1d:a6:58:bb:47:2e:b8:7c:b6:06:33:ea:8c:54:e6:
                    d0:13:27:ad:f3:25:29:dc:78:98:be:d2:74:03:96:
                    b5:d5:f3:b0:11:04:3e:f5:00:29:04:5e:7f:d5:1a:
                    bb:13:b1:05:ff:84:63:65:20:d3:80:15:d4:9f:43:
                    c0:26:cd:60:92:a9:62:39:1a:31:7b:0a:3c:72:e7:
                    18:c7:c6:aa:a0:30:0a:81:fe:ab:ba:85:87:77:6f:
                    96:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A4:86:30:33:E5:4E:DC:74:95:89:A7:04:7B:BB:E0:CF:D6:A4:DE:19
            X509v3 Authority Key Identifier:
                keyid:A7:AE:47:44:16:B0:E8:AD:3A:89:E8:67:74:A6:40:FE:BE:69:73:F9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/p65HRBaw6K06iehndKZA_r5pc_k.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/p65HRBaw6K06iehndKZA_r5pc_k.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/EE6978B848BF11EF96563826C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  158.144.183.0/24
                  160.30.8.0/24

    Signature Algorithm: sha256WithRSAEncryption
         3d:2e:3b:d2:1d:d2:7f:59:7d:6f:bb:aa:89:8a:d3:86:d0:0e:
         d5:46:f8:71:f0:26:41:62:b4:8f:62:44:f8:f1:e7:c7:ee:38:
         db:44:c6:2f:68:04:dd:24:28:4e:2b:07:df:97:05:f7:0b:83:
         52:8c:10:22:fa:be:41:dd:c1:35:7e:05:9d:61:d0:79:87:16:
         4a:66:d7:45:e8:e6:4a:44:c2:f7:11:b7:82:c1:13:4a:84:4d:
         97:94:bf:4e:0f:3a:51:eb:e2:0f:38:97:49:37:f4:b4:ea:05:
         a6:8c:72:4c:8e:e6:59:f7:bb:bc:d9:f1:5a:7e:12:e2:da:df:
         ce:b0:f6:98:7b:43:f7:43:52:16:c5:6e:68:2f:74:db:44:de:
         51:48:66:66:6f:1e:37:71:a3:94:3e:73:ba:9f:d9:ec:94:f9:
         6c:04:53:af:b5:cf:ce:f0:e5:f4:a4:1f:42:45:64:23:b9:3f:
         20:4e:fc:b6:4f:3f:fe:6f:b5:ed:03:d8:15:9d:24:f1:bf:66:
         ee:86:6f:d8:87:99:a4:50:79:e4:28:ed:ae:02:f9:ab:a6:8c:
         6c:7c:bb:91:68:a3:22:66:b5:99:fb:05:23:5a:32:7d:d4:f0:
         11:45:49:ac:fe:36:d7:56:f2:a6:bc:ca:c1:ff:88:71:19:26:
         36:81:e2:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 09:05:13 2025 by rpki-client