Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9166123/10BE9E22F48C11EDA8895453C4F9AE02/38891D6C159111EEA7190965C4F9AE02.roa
File:                     38891D6C159111EEA7190965C4F9AE02.roa (raw, json)
Hash identifier:          meLyoohFJXeq9xZyDhHsYBao6mMdxERyGjcvbUw1nUs=
Subject key identifier:   8E:18:0F:FC:9C:74:77:5C:97:7B:CA:EB:DA:B1:9B:BA:7F:78:D9:75
Certificate issuer:       /CN=A9166123/serialNumber=3DE6781D675ECA79F2FE3D17AB243CB74B7B9622
Certificate serial:       014F
Authority key identifier: 3D:E6:78:1D:67:5E:CA:79:F2:FE:3D:17:AB:24:3C:B7:4B:7B:96:22
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/PeZ4HWdeynny_j0XqyQ8t0t7liI.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9166123/10BE9E22F48C11EDA8895453C4F9AE02/38891D6C159111EEA7190965C4F9AE02.roa
Signing time:             Mon 03 Feb 2025 03:26:33 +0000
ROA not before:           Mon 03 Feb 2025 03:26:33 +0000
ROA not after:            Tue 31 Mar 2026 00:00:00 +0000
asID:                     59349
IP address blocks:        157.120.160.0/19 maxlen: 19
                          157.120.160.0/24 maxlen: 24
                          157.120.162.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9166123/10BE9E22F48C11EDA8895453C4F9AE02/PeZ4HWdeynny_j0XqyQ8t0t7liI.crl
                          rsync://rpki.apnic.net/member_repository/A9166123/10BE9E22F48C11EDA8895453C4F9AE02/PeZ4HWdeynny_j0XqyQ8t0t7liI.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/PeZ4HWdeynny_j0XqyQ8t0t7liI.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 14 Apr 2025 02:50:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 335 (0x14f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9166123
        Validity
            Not Before: Feb  3 03:26:33 2025 GMT
            Not After : Mar 31 00:00:00 2026 GMT
        Subject: CN=67a03769-d4b3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:4a:bc:28:6d:2a:e6:37:8f:58:f4:e5:23:e0:
                    cb:e8:09:e7:d9:c7:93:cb:96:d0:49:e2:3a:f0:04:
                    c9:40:f7:52:dd:c4:63:1c:4c:77:7c:78:a6:28:5d:
                    15:fd:f0:26:0f:df:b3:1e:cc:d3:f6:a1:f6:95:1f:
                    db:07:e9:ab:c5:28:ab:2d:ec:cb:22:af:41:c7:db:
                    04:1b:72:d0:fe:03:59:da:66:1a:ac:cf:bf:85:a0:
                    e0:0d:d2:14:7f:0f:fd:75:58:f6:e4:1c:9e:15:74:
                    d3:c8:c1:e4:32:61:4a:89:e4:3f:01:aa:a7:03:85:
                    02:54:75:86:bc:28:78:e5:d7:e4:b3:59:bb:66:3e:
                    fb:51:c5:e8:b5:ad:03:cd:00:b6:a9:d8:52:84:ac:
                    ec:ac:bf:67:55:c3:0f:ab:56:4d:87:60:3f:33:bf:
                    f9:94:11:32:39:04:87:de:8c:24:fd:92:be:93:14:
                    77:55:e3:75:53:31:f3:cd:c4:8c:42:fd:75:6e:40:
                    f1:fc:f1:64:4f:ad:b0:f2:df:d3:ae:9d:07:62:25:
                    60:a2:eb:78:03:1e:f8:f6:39:f8:d0:37:18:b2:d9:
                    3c:21:1b:ad:cf:32:7d:4a:c0:cf:1c:0f:fc:ba:0f:
                    97:b0:1d:5c:94:49:4e:ab:d8:8e:7e:5c:47:1e:ed:
                    ee:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8E:18:0F:FC:9C:74:77:5C:97:7B:CA:EB:DA:B1:9B:BA:7F:78:D9:75
            X509v3 Authority Key Identifier:
                keyid:3D:E6:78:1D:67:5E:CA:79:F2:FE:3D:17:AB:24:3C:B7:4B:7B:96:22

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9166123/10BE9E22F48C11EDA8895453C4F9AE02/PeZ4HWdeynny_j0XqyQ8t0t7liI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/PeZ4HWdeynny_j0XqyQ8t0t7liI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9166123/10BE9E22F48C11EDA8895453C4F9AE02/38891D6C159111EEA7190965C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  157.120.160.0/19

    Signature Algorithm: sha256WithRSAEncryption
         9d:1e:db:73:6c:d3:a5:9d:ab:78:99:e0:46:2e:7a:72:18:2d:
         2a:80:e1:c0:7c:0d:0b:7d:33:a6:f9:e8:d3:3e:b6:cb:d1:05:
         8c:cc:3d:ef:27:76:9c:42:87:2f:6b:54:f4:5b:c0:6f:4f:81:
         ba:24:ae:4c:d8:d6:3b:d8:14:65:66:9c:17:15:38:91:27:9b:
         40:1c:80:c8:21:24:79:f0:42:e3:7e:95:67:e4:58:3c:e7:f5:
         89:dc:79:03:dd:ba:d0:13:77:f8:d6:59:1b:b8:e7:e2:d2:ea:
         94:cd:36:a1:2d:7f:95:72:d9:19:49:5a:10:0d:42:17:d2:39:
         5c:a2:db:49:0b:a0:ca:a5:7e:db:d4:45:df:e0:90:e3:86:a8:
         ba:50:24:cc:54:4d:80:9c:b6:7c:4d:3f:c1:79:5c:be:59:bd:
         b3:b5:ab:fb:7b:0d:cf:c3:3c:7d:67:68:d9:f6:89:9f:99:55:
         54:e5:56:06:5f:2f:a7:d6:69:3b:b7:0e:e8:8f:76:2c:5b:86:
         c5:9f:68:18:7d:48:42:33:7c:83:0f:e6:25:d6:b8:fc:ca:a6:
         43:0f:eb:18:3a:b4:a2:81:0d:5c:7a:b1:e6:1a:3c:71:f9:4e:
         31:60:13:c1:5a:85:d6:9e:89:6d:13:6d:85:98:dc:0e:c0:96:
         cd:61:43:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 05:36:56 2025 by rpki-client