Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/FE825FFAC74311EF85A7412EC4F9AE02.roa
File:                     FE825FFAC74311EF85A7412EC4F9AE02.roa (raw, json)
Hash identifier:          pMzBFFWCLyQ+ayvH7z3m2FkO/X2+PCjno3L+gtQ7ZZQ=
Subject key identifier:   5C:55:BF:DD:A4:DF:13:D6:25:6A:C9:A8:45:68:E2:38:DA:2E:E2:A9
Certificate issuer:       /CN=A918EDB2/serialNumber=A7AE474416B0E8AD3A89E86774A640FEBE6973F9
Certificate serial:       1DC5
Authority key identifier: A7:AE:47:44:16:B0:E8:AD:3A:89:E8:67:74:A6:40:FE:BE:69:73:F9
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/p65HRBaw6K06iehndKZA_r5pc_k.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/FE825FFAC74311EF85A7412EC4F9AE02.roa
Signing time:             Thu 08 May 2025 15:54:04 +0000
ROA not before:           Thu 08 May 2025 15:54:04 +0000
ROA not after:            Wed 01 Jul 2026 00:00:00 +0000
asID:                     152501
IP address blocks:        157.66.143.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/p65HRBaw6K06iehndKZA_r5pc_k.crl
                          rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/p65HRBaw6K06iehndKZA_r5pc_k.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/p65HRBaw6K06iehndKZA_r5pc_k.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 17 May 2025 15:20:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 7621 (0x1dc5)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918EDB2, serialNumber=A7AE474416B0E8AD3A89E86774A640FEBE6973F9
        Validity
            Not Before: May  8 15:54:04 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=681cd39c-2711
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:64:59:8d:d2:4b:f2:63:2d:f0:69:ee:40:66:
                    fb:3e:62:35:5d:a8:0c:87:6a:2f:87:a9:c9:5f:de:
                    4b:23:70:1b:4b:ca:26:96:c0:2c:45:20:ed:91:0c:
                    ae:8c:a1:96:10:52:c6:ea:a4:01:14:3e:34:bf:93:
                    0c:c3:62:ac:3f:ee:f1:82:f0:5f:dc:7e:28:90:a2:
                    a3:c5:51:75:7c:15:a5:b1:aa:25:b3:a3:5b:e8:06:
                    1e:87:da:60:ed:e5:a1:d4:8f:4b:a0:6e:2c:39:46:
                    66:b7:d0:c9:c3:64:bc:42:f8:a9:27:26:96:05:65:
                    65:28:7c:15:77:fc:9a:bb:d1:f7:77:b2:e8:4b:09:
                    ba:7f:47:78:fa:ee:26:90:2b:1d:4c:e2:a9:8f:e8:
                    e3:36:b4:6d:5f:80:97:eb:d2:24:84:25:0e:33:d7:
                    80:6e:08:83:b7:40:39:53:3f:de:87:e0:f9:d7:08:
                    bc:f5:6e:79:78:d8:4d:68:d1:ca:cd:46:82:96:f1:
                    12:6f:9a:23:e5:48:b3:7e:a5:14:e2:65:80:a6:6b:
                    ce:37:6f:bc:d9:d2:c9:73:74:c9:cb:08:8f:92:a2:
                    d4:6b:3b:f9:e3:c6:16:e5:10:4f:9d:bf:76:17:02:
                    0f:74:4e:d6:fa:0c:2d:85:62:70:fa:87:27:89:85:
                    83:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5C:55:BF:DD:A4:DF:13:D6:25:6A:C9:A8:45:68:E2:38:DA:2E:E2:A9
            X509v3 Authority Key Identifier:
                keyid:A7:AE:47:44:16:B0:E8:AD:3A:89:E8:67:74:A6:40:FE:BE:69:73:F9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/p65HRBaw6K06iehndKZA_r5pc_k.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/p65HRBaw6K06iehndKZA_r5pc_k.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/FE825FFAC74311EF85A7412EC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  157.66.143.0/24

    Signature Algorithm: sha256WithRSAEncryption
         96:55:9a:a6:74:c2:0b:fc:68:2a:43:74:1e:ee:01:f2:39:67:
         ed:89:c7:bc:4c:59:be:3a:7b:6e:f5:ae:4e:b0:dc:2d:4c:77:
         4f:ee:24:83:ab:71:1f:82:c3:9c:56:3a:52:b8:19:ff:1f:e1:
         0a:66:38:da:7c:48:60:ab:0f:81:cf:60:b7:ef:d1:19:0b:54:
         e0:cc:f1:87:ce:ae:7a:cb:fd:a5:02:ca:e9:de:08:8b:f3:9a:
         14:8e:6e:87:d7:87:0f:c4:c5:b4:fe:0e:1b:a3:cd:e5:94:43:
         07:d4:ae:f9:ef:e6:1e:ad:69:76:e4:7d:70:2a:e5:27:6c:59:
         8a:4b:96:e5:9d:10:ed:23:5d:de:05:51:d8:d0:61:6a:12:27:
         8b:b4:e9:89:35:51:4d:70:35:2a:d3:03:23:08:21:c6:89:1f:
         db:71:5e:45:7a:a6:0d:1f:1a:38:f8:7e:c3:7e:83:da:3c:cc:
         68:5c:c7:94:0b:88:14:c5:0d:6d:ce:ba:74:8a:6b:00:7b:37:
         f9:21:d6:4c:45:72:e8:0f:c1:2c:a3:ef:21:45:59:5d:ed:7a:
         af:d7:d0:b3:da:44:c2:69:a0:d1:a3:a0:14:91:d9:a6:e3:5f:
         f9:73:09:74:db:6a:9b:fc:83:ec:f2:3f:40:55:e4:df:f8:9c:
         87:c2:07:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 16:27:59 2025 by rpki-client