Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/80C1920870FD11EFA40B145DC4F9AE02.roa
File:                     80C1920870FD11EFA40B145DC4F9AE02.roa (raw, json)
Hash identifier:          eUUzBWSDIwbQ4+wYo0gfTp/6QMMc7Dh5m7wF6V2vyr8=
Subject key identifier:   B6:06:4E:C3:60:5A:A9:81:DB:51:6B:44:3C:D5:57:E8:FF:1D:51:F9
Certificate issuer:       /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Certificate serial:       B929
Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/80C1920870FD11EFA40B145DC4F9AE02.roa
Signing time:             Thu 08 May 2025 16:27:23 +0000
ROA not before:           Thu 08 May 2025 16:27:23 +0000
ROA not after:            Wed 01 Jul 2026 00:00:00 +0000
asID:                     151693
IP address blocks:        203.145.48.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
                          rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 19 May 2025 18:54:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 47401 (0xb929)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918EDB2, serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
        Validity
            Not Before: May  8 16:27:23 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=681cdb6b-1ed8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:af:04:67:20:4f:c9:ce:0f:ef:39:07:bf:1c:
                    a7:71:12:70:ce:4d:2a:10:8f:c5:86:31:49:df:4e:
                    65:73:13:0d:f9:59:39:df:68:9d:ae:7e:55:3d:3c:
                    d8:ed:7d:a7:57:ec:44:d7:29:1d:ab:8f:25:c3:f0:
                    91:23:55:5b:95:98:6c:fa:c0:c8:bb:3e:f4:99:f9:
                    c2:aa:1d:26:16:c5:3a:8e:ab:81:a4:d4:e9:82:19:
                    e2:90:3b:44:ad:56:36:04:9c:86:0a:77:16:06:20:
                    c7:ff:58:bb:56:4e:85:03:ce:bc:20:36:0e:5f:5f:
                    c7:53:22:d8:71:d9:7b:79:30:ba:d6:6b:af:92:e7:
                    c4:cd:21:e0:49:f2:28:27:83:c3:ff:1a:32:52:4a:
                    b5:4c:15:e4:5a:19:3e:c2:cf:92:4a:9a:e2:01:f8:
                    a2:0f:00:ae:f7:c1:36:e1:0b:42:bd:0c:73:ce:d8:
                    db:ea:4f:ab:7a:71:ba:ca:36:eb:ce:12:88:08:46:
                    e8:01:6f:d2:6c:a2:b4:cb:f8:6f:2e:bc:96:a4:cf:
                    ba:19:8a:20:53:8a:4c:d3:99:29:21:4e:28:f0:aa:
                    c9:53:89:69:7c:7d:1f:0d:79:f8:a1:5e:3f:34:70:
                    a5:47:94:57:96:bb:57:58:dd:2d:0a:9c:8f:11:73:
                    aa:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B6:06:4E:C3:60:5A:A9:81:DB:51:6B:44:3C:D5:57:E8:FF:1D:51:F9
            X509v3 Authority Key Identifier:
                keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/80C1920870FD11EFA40B145DC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  203.145.48.0/24

    Signature Algorithm: sha256WithRSAEncryption
         77:c2:cc:7d:e3:cd:08:a4:71:ff:70:a1:6e:23:a1:da:9c:a8:
         74:6b:d6:2e:13:16:02:3f:42:87:f2:e1:df:02:d9:8e:12:22:
         e0:11:41:b1:a1:70:95:e7:36:41:01:b9:ab:ec:0d:f4:7c:70:
         fa:b0:52:64:dc:6d:03:e8:b6:8b:f0:3b:95:e8:9b:22:8f:ad:
         28:6b:f7:49:f4:82:69:a7:e5:9f:59:44:9e:17:68:30:f1:3c:
         c0:33:31:b0:df:c3:06:e9:6e:19:08:ae:46:b2:9d:ff:ce:f1:
         c2:98:65:70:8a:64:a7:b1:95:2f:41:1c:d5:46:7a:0c:84:47:
         15:61:31:26:40:7d:51:b6:d8:c8:88:d4:02:74:42:41:dd:1d:
         8f:d5:b0:17:2d:9b:27:0e:a8:f0:ec:d0:f4:cf:3f:bd:1e:3d:
         b5:b9:43:fa:4b:24:09:79:22:e7:97:fa:cf:5e:7a:17:cb:c6:
         84:10:f4:f2:01:1a:1e:52:7d:4a:c2:a8:29:c2:96:7f:a5:bc:
         bd:a5:3d:16:80:2a:4d:19:92:bd:8a:17:87:e1:e4:25:df:1f:
         4e:37:6e:8a:03:4c:f6:54:c4:60:19:15:98:01:79:d9:c8:4a:
         fd:dc:f1:41:39:07:3b:50:96:37:2b:a8:96:29:5b:97:fc:2c:
         39:93:a0:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 13 02:27:15 2025 by rpki-client