Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/F5CB5B68B2CC11EF8F5E9C31C4F9AE02.roa
File:                     F5CB5B68B2CC11EF8F5E9C31C4F9AE02.roa (raw, json)
Hash identifier:          duvDXIgUYHkO0bd/xudDbguN69uRgtBQeuQPQ+nHZ1Q=
Subject key identifier:   51:35:04:20:AB:C6:44:A6:44:F5:A0:69:8B:24:0B:D7:41:4D:66:0E
Certificate issuer:       /CN=A918EDB2/serialNumber=A7AE474416B0E8AD3A89E86774A640FEBE6973F9
Certificate serial:       1E35
Authority key identifier: A7:AE:47:44:16:B0:E8:AD:3A:89:E8:67:74:A6:40:FE:BE:69:73:F9
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/p65HRBaw6K06iehndKZA_r5pc_k.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/F5CB5B68B2CC11EF8F5E9C31C4F9AE02.roa
Signing time:             Thu 08 May 2025 15:55:43 +0000
ROA not before:           Thu 08 May 2025 15:55:43 +0000
ROA not after:            Wed 01 Jul 2026 00:00:00 +0000
asID:                     58702
IP address blocks:        160.30.71.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/p65HRBaw6K06iehndKZA_r5pc_k.crl
                          rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/p65HRBaw6K06iehndKZA_r5pc_k.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/p65HRBaw6K06iehndKZA_r5pc_k.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 17 May 2025 15:20:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 7733 (0x1e35)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918EDB2, serialNumber=A7AE474416B0E8AD3A89E86774A640FEBE6973F9
        Validity
            Not Before: May  8 15:55:43 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=681cd3ff-c008
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:f5:6d:4d:fe:45:ca:a4:21:ab:51:86:18:d1:
                    20:ab:13:a8:55:87:30:aa:86:38:03:ee:f0:a7:4b:
                    a0:44:88:85:91:7f:53:a0:79:02:5e:82:ee:a4:0e:
                    28:59:68:86:a8:e6:87:dc:78:72:be:11:cc:84:38:
                    6f:2a:25:89:d0:9c:45:3d:4f:3e:08:33:2d:48:cd:
                    69:13:50:ff:f1:ab:f2:8f:10:8b:c4:b4:9a:d4:b6:
                    ce:6e:07:c9:b2:26:61:3d:80:8e:fc:6a:fe:d0:ee:
                    c8:35:a5:9c:94:eb:7f:d9:a7:25:d7:d8:13:66:4b:
                    28:fa:9f:27:2e:b0:af:1e:2a:0e:7f:82:02:62:5e:
                    c2:25:56:4d:cf:4a:90:bb:6c:f7:9c:47:76:5c:ed:
                    b4:8c:ee:66:81:d7:2c:fc:3e:86:d1:c9:fa:6d:71:
                    82:b4:c8:07:dd:10:9e:d6:45:54:3d:5b:f8:d2:2f:
                    08:08:51:f9:d3:09:16:95:7a:ea:2f:d5:59:0c:04:
                    83:d8:90:aa:bb:4c:e5:3b:22:d8:26:93:b4:49:93:
                    a1:10:d4:65:3a:07:63:4a:b8:cd:c0:d8:b7:7e:3c:
                    cd:a1:db:ee:86:b5:fb:c5:18:4d:bc:7f:76:09:9d:
                    29:96:21:20:c0:6c:fd:6f:53:4d:ed:18:6a:f1:6f:
                    e5:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                51:35:04:20:AB:C6:44:A6:44:F5:A0:69:8B:24:0B:D7:41:4D:66:0E
            X509v3 Authority Key Identifier:
                keyid:A7:AE:47:44:16:B0:E8:AD:3A:89:E8:67:74:A6:40:FE:BE:69:73:F9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/p65HRBaw6K06iehndKZA_r5pc_k.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/p65HRBaw6K06iehndKZA_r5pc_k.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/F5CB5B68B2CC11EF8F5E9C31C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  160.30.71.0/24

    Signature Algorithm: sha256WithRSAEncryption
         1c:7d:f9:98:3e:e9:bd:e5:48:10:a5:c8:8e:bf:3b:f4:33:dd:
         b6:85:71:45:e7:e0:d4:e6:46:cd:78:21:d9:02:df:28:a9:c9:
         d8:c5:d6:d2:24:38:b8:e8:30:da:21:03:ad:b5:4e:e8:dd:54:
         f7:46:da:e7:91:97:6c:39:6b:81:9c:ee:08:b1:94:32:bb:a9:
         d8:3a:f0:e6:86:4b:f8:6b:bb:a9:7a:4d:b8:8e:9c:7b:f6:b9:
         c4:c4:75:a0:f3:a2:eb:de:07:84:f5:d1:34:6e:2c:18:c7:80:
         87:26:14:77:30:55:4a:fd:40:d9:12:30:20:c3:b0:90:0a:f7:
         62:42:84:1b:72:42:96:c6:cf:9b:7b:9b:ba:e3:7c:55:30:78:
         e9:f1:26:88:62:b3:9c:f5:26:cf:7b:58:b9:87:11:8c:e7:1d:
         5c:10:35:38:52:5b:fb:9e:16:b1:95:75:ef:6f:b1:ec:70:3e:
         fe:07:ec:0b:27:28:32:90:05:62:22:94:b8:07:66:c1:28:a0:
         bf:1a:19:51:bc:11:e4:d0:2f:c2:62:1d:e2:0a:dc:56:7e:53:
         2a:a8:13:a4:3f:b5:36:13:b6:30:03:bc:b2:55:7d:1d:e6:4e:
         b7:1c:29:e3:c6:53:a5:e1:dd:ae:da:82:dd:5f:1f:9a:f5:6e:
         c8:b6:3c:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 02:53:49 2025 by rpki-client