Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/F1476744719511EF9C2AB81AC4F9AE02.roa
File:                     F1476744719511EF9C2AB81AC4F9AE02.roa (raw, json)
Hash identifier:          3gGtSnPc8LFnyEEJOwFSsT6YmdgIv8LtuPI4bMhojAo=
Subject key identifier:   74:6E:DE:4C:77:A7:EE:B8:27:F7:B4:91:8A:25:38:AE:57:45:3E:DD
Certificate issuer:       /CN=A918EDB2/serialNumber=A7AE474416B0E8AD3A89E86774A640FEBE6973F9
Certificate serial:       1DF8
Authority key identifier: A7:AE:47:44:16:B0:E8:AD:3A:89:E8:67:74:A6:40:FE:BE:69:73:F9
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/p65HRBaw6K06iehndKZA_r5pc_k.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/F1476744719511EF9C2AB81AC4F9AE02.roa
Signing time:             Thu 08 May 2025 15:54:49 +0000
ROA not before:           Thu 08 May 2025 15:54:49 +0000
ROA not after:            Wed 01 Jul 2026 00:00:00 +0000
asID:                     153208
IP address blocks:        160.187.42.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/p65HRBaw6K06iehndKZA_r5pc_k.crl
                          rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/p65HRBaw6K06iehndKZA_r5pc_k.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/p65HRBaw6K06iehndKZA_r5pc_k.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 17 May 2025 15:20:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 7672 (0x1df8)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918EDB2, serialNumber=A7AE474416B0E8AD3A89E86774A640FEBE6973F9
        Validity
            Not Before: May  8 15:54:49 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=681cd3c8-63f9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:28:4d:08:62:dd:80:e3:08:80:87:cb:31:e9:
                    cc:26:ab:ce:b8:88:7f:20:bd:09:68:b2:61:5d:80:
                    78:ec:27:f7:4e:1f:69:3b:c3:a9:62:9f:cf:ca:48:
                    3f:9c:28:c4:3f:68:47:2f:97:d8:36:71:4b:c6:44:
                    a4:54:4d:4d:31:a7:a8:dc:4e:85:13:28:fd:01:23:
                    0f:e4:78:38:36:df:48:34:90:f2:2f:eb:9f:57:33:
                    6f:cd:ff:f6:b5:30:33:cc:57:c4:51:e1:a8:1e:df:
                    e4:9c:ab:62:f6:34:20:6f:e9:cf:d5:b9:ad:4c:d2:
                    11:01:47:32:df:b0:f9:00:d1:4e:e8:17:bc:0a:40:
                    0f:03:fd:c9:85:dd:4b:00:40:cd:66:1e:49:1e:b0:
                    36:28:96:b0:fb:3f:c8:e6:c4:2d:db:02:81:6c:37:
                    c9:3c:19:9b:2c:9d:f4:95:90:74:64:a1:ae:ea:70:
                    ac:46:6a:31:49:b2:92:fc:e8:53:0e:8b:2d:34:c9:
                    07:ce:57:39:e6:10:08:e6:a9:9e:95:d7:8a:e4:81:
                    25:17:6f:98:ba:4e:6b:46:fa:8f:70:ba:7f:35:8f:
                    2d:06:99:23:c4:53:b5:74:53:85:79:1d:fd:3e:4b:
                    c7:7d:f0:4d:60:54:14:1d:f9:3e:2e:fe:7b:01:e5:
                    9d:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                74:6E:DE:4C:77:A7:EE:B8:27:F7:B4:91:8A:25:38:AE:57:45:3E:DD
            X509v3 Authority Key Identifier:
                keyid:A7:AE:47:44:16:B0:E8:AD:3A:89:E8:67:74:A6:40:FE:BE:69:73:F9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/p65HRBaw6K06iehndKZA_r5pc_k.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/p65HRBaw6K06iehndKZA_r5pc_k.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/F1476744719511EF9C2AB81AC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  160.187.42.0/23

    Signature Algorithm: sha256WithRSAEncryption
         3b:16:7a:37:34:b0:5c:b7:75:19:4c:16:53:15:9b:b4:ad:3e:
         24:f4:d3:95:6f:ce:b0:7b:10:ad:4d:a4:4c:8e:d6:61:e4:4c:
         0a:7e:3e:cb:4e:6b:51:69:5f:a5:88:dd:10:60:f0:2e:68:c4:
         9f:3b:34:1f:60:5e:e3:4b:39:65:37:fc:c9:b3:71:fb:e8:9c:
         99:a4:c1:5c:58:39:d0:40:ab:1a:89:6e:a0:3e:3b:35:92:50:
         90:76:92:20:3f:41:f0:13:c8:fd:28:16:c9:c8:37:5e:1d:b0:
         be:fd:7f:65:92:ad:77:0f:0b:a0:a4:b0:1d:27:16:b1:03:f6:
         96:dd:5e:5f:d0:9c:53:ff:0e:5b:44:db:7b:03:6b:8c:1f:47:
         fa:44:55:30:b8:dd:7f:aa:aa:23:33:e6:b5:44:9c:b0:2c:a0:
         4a:2b:b3:d8:99:82:ac:e6:49:2b:cc:23:f7:ac:0f:0c:63:9e:
         1c:3d:ee:91:6b:60:ab:36:b3:74:a0:f6:bf:79:b6:b5:95:16:
         fe:3b:3c:a5:95:28:d4:fb:3e:4e:e4:77:4b:3f:a8:cb:46:d0:
         56:ff:ca:9f:20:d3:68:67:11:a7:d3:df:5c:d9:f0:10:ed:f0:
         b7:56:e3:d9:0c:83:67:39:50:cf:69:70:a4:6c:02:74:f3:9d:
         17:b3:38:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 12:26:56 2025 by rpki-client