Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A918F961/05B21B10FB0D11EFB2464327C4F9AE02/D0D1D812FB0D11EFABB24730C4F9AE02.roa
File:                     D0D1D812FB0D11EFABB24730C4F9AE02.roa (raw, json)
Hash identifier:          FptmFY6XaETE0B5U8dohhb5+IR8DEmGWZVTlRovACOI=
Subject key identifier:   AF:E8:75:A0:31:DE:7B:BE:AE:F0:04:B8:FD:17:1A:43:A3:7B:0E:CB
Certificate issuer:       /CN=A918F961/serialNumber=4BEEC74F476FB171DC8EDAF9491D6CC27BF80E2F
Certificate serial:       02
Authority key identifier: 4B:EE:C7:4F:47:6F:B1:71:DC:8E:DA:F9:49:1D:6C:C2:7B:F8:0E:2F
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/S-7HT0dvsXHcjtr5SR1swnv4Di8.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918F961/05B21B10FB0D11EFB2464327C4F9AE02/D0D1D812FB0D11EFABB24730C4F9AE02.roa
Signing time:             Fri 07 Mar 2025 04:37:03 +0000
ROA not before:           Fri 07 Mar 2025 04:37:03 +0000
ROA not after:            Wed 01 Jul 2026 00:00:00 +0000
asID:                     153669
IP address blocks:        163.223.36.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918F961/05B21B10FB0D11EFB2464327C4F9AE02/S-7HT0dvsXHcjtr5SR1swnv4Di8.crl
                          rsync://rpki.apnic.net/member_repository/A918F961/05B21B10FB0D11EFB2464327C4F9AE02/S-7HT0dvsXHcjtr5SR1swnv4Di8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/S-7HT0dvsXHcjtr5SR1swnv4Di8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 18 Apr 2025 07:14:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2 (0x2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918F961, serialNumber=4BEEC74F476FB171DC8EDAF9491D6CC27BF80E2F
        Validity
            Not Before: Mar  7 04:37:03 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=67ca77ef-63a7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:d4:bd:af:29:34:7a:30:66:8c:8f:44:98:88:
                    bf:21:ad:3c:46:e9:ec:c5:bc:a6:06:23:2b:61:29:
                    d4:03:ff:29:ff:7b:99:45:98:42:96:76:3a:da:bf:
                    28:7c:5e:38:9a:51:50:11:ef:3d:9a:4d:58:08:4e:
                    7f:ae:30:eb:85:47:2c:91:64:d9:f6:d9:16:3a:d6:
                    5c:21:25:5f:37:95:7b:f5:f6:0e:7e:02:fd:75:64:
                    b8:d8:c4:3c:ff:5b:5d:da:32:9e:ed:3d:b6:bd:bf:
                    c4:7a:8b:e7:ef:70:23:82:7f:87:6b:67:ec:06:a0:
                    43:d3:b4:d5:3c:fb:49:94:c2:c7:9a:67:f5:2e:8d:
                    8f:9c:d4:ae:cf:01:84:95:f3:be:b6:b2:dd:0a:09:
                    ec:ac:9c:1b:92:02:a4:bb:41:e3:98:4e:a4:38:71:
                    be:4f:43:bb:64:60:25:6d:3f:c1:d8:6b:1d:28:2b:
                    12:46:99:97:a7:86:d3:0d:4a:e3:58:e6:83:43:11:
                    b9:3d:2f:ee:41:98:4b:da:1e:78:8d:ae:73:32:6f:
                    32:dc:82:b0:1f:60:0d:aa:e6:8a:f8:a7:71:d3:79:
                    b1:6c:3c:50:4f:dd:43:80:85:51:f4:2f:e3:8e:ac:
                    cc:11:e2:ab:06:8d:29:75:99:fc:05:1b:dd:a5:21:
                    51:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AF:E8:75:A0:31:DE:7B:BE:AE:F0:04:B8:FD:17:1A:43:A3:7B:0E:CB
            X509v3 Authority Key Identifier:
                keyid:4B:EE:C7:4F:47:6F:B1:71:DC:8E:DA:F9:49:1D:6C:C2:7B:F8:0E:2F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918F961/05B21B10FB0D11EFB2464327C4F9AE02/S-7HT0dvsXHcjtr5SR1swnv4Di8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/S-7HT0dvsXHcjtr5SR1swnv4Di8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918F961/05B21B10FB0D11EFB2464327C4F9AE02/D0D1D812FB0D11EFABB24730C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  163.223.36.0/24

    Signature Algorithm: sha256WithRSAEncryption
         a1:18:70:9b:e7:29:06:40:e6:66:42:95:a1:ce:8c:75:26:8b:
         7a:4c:0c:0b:94:d4:2e:b9:04:c5:a5:5f:e2:c0:7e:d7:88:13:
         8e:fa:aa:27:89:c1:20:f4:0f:4e:37:8b:50:0b:72:29:62:00:
         46:a9:c1:a9:e7:39:a6:9f:ae:91:ca:53:74:1c:98:3b:25:d4:
         2d:f3:41:5c:f0:72:fb:11:3a:15:f3:f0:61:7e:93:7b:45:e3:
         2c:45:9f:3b:5f:84:a6:04:6a:08:3d:3a:7b:08:ac:c3:1a:54:
         a5:d6:93:7f:91:7a:a2:f8:7a:6d:99:cc:1c:f4:0d:aa:ea:62:
         0a:7b:de:88:2b:48:31:b4:3b:d7:fe:15:31:93:8e:fd:42:4a:
         09:03:f2:e4:bc:ba:48:7e:35:c7:6c:cb:48:a0:84:db:96:47:
         71:72:10:df:49:15:36:e2:d5:1a:e2:4a:9b:a9:1f:81:14:2d:
         7a:ba:87:01:89:fc:70:56:71:b1:99:c5:b7:3b:8b:2e:06:43:
         ee:ec:5f:8b:8f:5c:58:c2:91:23:77:57:cb:28:2d:eb:19:ae:
         ea:d4:c7:fd:2c:95:cb:46:89:a0:e2:bd:1b:64:1c:cb:1a:a7:
         68:36:d8:21:37:9d:f1:5d:fa:3e:f5:8c:83:d0:a4:9c:09:0c:
         72:8d:02:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 13 02:34:29 2025 by rpki-client