Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9183B33/CD35DB1A912411EB9B72903AC4F9AE02/59018DEE340611ED9C72786AC4F9AE02.roa
File:                     59018DEE340611ED9C72786AC4F9AE02.roa (raw, json)
Hash identifier:          rP6Pu7EfL4ZTfd4hkNZXRMND1x04kCFhfmQKKfFcDnY=
Subject key identifier:   BF:30:89:1D:D1:09:25:A0:05:DC:75:86:B2:62:4F:46:5E:42:F5:35
Certificate issuer:       /CN=A9183B33/serialNumber=51AEBA23FB745A553A5E4996DF1C8173473F1798
Certificate serial:       0629
Authority key identifier: 51:AE:BA:23:FB:74:5A:55:3A:5E:49:96:DF:1C:81:73:47:3F:17:98
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ua66I_t0WlU6XkmW3xyBc0c_F5g.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9183B33/CD35DB1A912411EB9B72903AC4F9AE02/59018DEE340611ED9C72786AC4F9AE02.roa
Signing time:             Tue 18 Mar 2025 22:43:58 +0000
ROA not before:           Tue 18 Mar 2025 22:43:58 +0000
ROA not after:            Thu 28 May 2026 00:00:00 +0000
asID:                     9408
IP address blocks:        203.0.156.0/22 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9183B33/CD35DB1A912411EB9B72903AC4F9AE02/Ua66I_t0WlU6XkmW3xyBc0c_F5g.crl
                          rsync://rpki.apnic.net/member_repository/A9183B33/CD35DB1A912411EB9B72903AC4F9AE02/Ua66I_t0WlU6XkmW3xyBc0c_F5g.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ua66I_t0WlU6XkmW3xyBc0c_F5g.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 11 Apr 2025 22:50:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1577 (0x629)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9183B33
        Validity
            Not Before: Mar 18 22:43:58 2025 GMT
            Not After : May 28 00:00:00 2026 GMT
        Subject: CN=67d9f72e-9f8e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:15:9c:dc:c4:76:98:a3:aa:55:b5:41:08:90:
                    3c:e6:0c:7a:7d:6a:16:6b:aa:39:a7:48:72:68:73:
                    ac:9d:4b:1c:e7:e8:d3:1f:b9:5c:e9:03:ea:3d:3b:
                    70:94:f2:aa:05:4d:54:25:99:04:ab:cf:4c:22:b1:
                    5b:00:85:22:b5:a1:7d:9c:f9:b5:95:24:3b:33:e4:
                    1b:b3:75:5f:63:08:9a:9b:3e:2f:d8:c8:df:da:ad:
                    ab:6f:98:33:be:b8:29:5b:43:7c:e6:64:eb:64:cb:
                    2a:bf:87:39:71:e5:a1:6f:e7:ae:6a:bc:93:8f:4e:
                    6b:bd:b6:01:94:ac:51:b4:b5:7c:03:25:88:6c:90:
                    87:7e:d3:96:34:f0:96:21:88:71:56:aa:3c:4d:99:
                    b8:ef:e4:82:5c:e5:09:7b:c7:31:9d:05:66:7e:bc:
                    8a:c9:f2:66:35:23:66:ea:cc:4f:30:22:7b:e1:74:
                    43:3e:88:9c:7f:7e:bd:4d:61:7c:a8:54:37:c9:be:
                    d1:65:db:bb:4e:ac:5a:07:a2:1f:e2:7c:d1:1f:5a:
                    71:f8:15:eb:c4:52:a3:ea:c0:cd:e0:12:89:37:49:
                    e0:e5:30:80:ec:ea:2b:52:1c:fe:20:4e:bc:3e:ed:
                    7a:97:d0:ff:2d:28:7c:fd:87:0f:98:08:13:e5:76:
                    68:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BF:30:89:1D:D1:09:25:A0:05:DC:75:86:B2:62:4F:46:5E:42:F5:35
            X509v3 Authority Key Identifier:
                keyid:51:AE:BA:23:FB:74:5A:55:3A:5E:49:96:DF:1C:81:73:47:3F:17:98

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9183B33/CD35DB1A912411EB9B72903AC4F9AE02/Ua66I_t0WlU6XkmW3xyBc0c_F5g.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ua66I_t0WlU6XkmW3xyBc0c_F5g.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9183B33/CD35DB1A912411EB9B72903AC4F9AE02/59018DEE340611ED9C72786AC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  203.0.156.0/22

    Signature Algorithm: sha256WithRSAEncryption
         72:ea:b0:a3:e5:9b:bc:40:37:2e:f7:74:b7:eb:a1:34:5e:c2:
         ff:de:7b:cd:d7:cf:c5:5d:1c:1e:89:be:d8:71:22:8c:a8:6c:
         9f:2a:57:b1:ea:ef:cb:68:aa:fe:45:0f:ea:62:1d:18:6a:a7:
         d3:15:13:cb:b0:1a:91:8c:57:a2:49:e3:45:b3:d4:a0:27:96:
         db:9f:9b:98:d3:a2:dd:6c:a5:f6:a8:3b:db:f6:73:4e:3c:2b:
         96:a3:48:35:ec:30:d1:3f:9c:98:e0:ad:72:26:d0:2a:ea:d6:
         65:e6:30:25:e5:fd:f5:a8:08:63:57:46:f1:44:94:aa:23:e8:
         69:f3:3a:e8:66:5c:ab:ca:15:3a:fa:1b:4e:31:01:f4:11:31:
         2c:ae:ad:01:ad:7d:99:11:09:82:c7:c6:bd:b8:a0:d7:e7:d4:
         f8:86:76:88:af:88:12:65:e8:5f:ca:31:d0:33:48:a8:2c:91:
         39:02:bb:41:e5:eb:de:6a:a3:94:e8:5a:36:5c:7e:4b:07:c0:
         52:d2:75:7a:75:c1:0d:ad:10:cd:18:01:f6:5d:ed:96:c4:03:
         ef:b8:d2:10:9a:85:48:96:42:7e:e7:1a:dc:d9:58:95:33:24:
         bf:bb:65:f4:9b:66:49:49:eb:33:b4:97:27:ad:14:74:54:e8:
         ce:3c:29:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 06:06:58 2025 by rpki-client