Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91275FD/E1EFD9B6DECE11E4A14F0068C4F9AE02/AD5A136A39E511F0AC386379C4F9AE02.roa
File:                     AD5A136A39E511F0AC386379C4F9AE02.roa (raw, json)
Hash identifier:          RIcJzU/Ujywx/n2sjAzr0iwZDSz+JUE9CPr4nQgwl+I=
Subject key identifier:   AC:DD:7B:EA:A5:6B:43:08:D1:2F:4D:72:D4:FD:15:21:96:32:FB:32
Certificate issuer:       /CN=A91275FD/serialNumber=4E10F13F295FBF2B359C84DDD1651BC851AA8AF5
Certificate serial:       2738
Authority key identifier: 4E:10:F1:3F:29:5F:BF:2B:35:9C:84:DD:D1:65:1B:C8:51:AA:8A:F5
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ThDxPylfvys1nITd0WUbyFGqivU.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91275FD/E1EFD9B6DECE11E4A14F0068C4F9AE02/AD5A136A39E511F0AC386379C4F9AE02.roa
Signing time:             Mon 26 May 2025 03:58:27 +0000
ROA not before:           Mon 26 May 2025 03:58:27 +0000
ROA not after:            Thu 30 Jul 2026 00:00:00 +0000
asID:                     24306
IP address blocks:        202.81.160.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91275FD/E1EFD9B6DECE11E4A14F0068C4F9AE02/ThDxPylfvys1nITd0WUbyFGqivU.crl
                          rsync://rpki.apnic.net/member_repository/A91275FD/E1EFD9B6DECE11E4A14F0068C4F9AE02/ThDxPylfvys1nITd0WUbyFGqivU.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ThDxPylfvys1nITd0WUbyFGqivU.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 09 Jun 2025 15:50:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 10040 (0x2738)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91275FD, serialNumber=4E10F13F295FBF2B359C84DDD1651BC851AA8AF5
        Validity
            Not Before: May 26 03:58:27 2025 GMT
            Not After : Jul 30 00:00:00 2026 GMT
        Subject: CN=6833e6e2-1c25
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:99:41:64:2b:96:34:61:44:d6:ee:57:d9:d6:
                    b1:6f:cd:3d:77:89:3b:7d:36:3d:20:ab:63:25:be:
                    b9:a3:67:42:af:6e:a0:e9:ff:21:7b:f0:9d:1b:39:
                    f3:5f:66:54:30:91:42:85:85:49:0b:ce:27:f8:35:
                    50:3a:b1:0f:b4:a3:53:67:fc:81:43:f0:eb:7f:0f:
                    df:67:2a:db:fb:c5:bd:61:0f:21:90:dc:93:d9:f6:
                    e8:c4:28:f3:4d:d5:a0:18:9b:45:63:d8:0e:96:37:
                    54:73:39:2e:e9:8d:cf:3d:0b:c8:2c:4f:67:ab:4f:
                    ff:39:09:a6:3d:e9:d3:78:30:40:44:c6:1e:f1:40:
                    df:8b:2c:6f:fc:b1:81:dd:02:91:b5:a7:10:1d:74:
                    18:e1:bb:2a:13:d6:b4:30:66:ac:77:f2:d2:0d:ba:
                    02:e3:89:f4:7c:fb:b1:b9:ac:2e:b1:f0:b5:47:36:
                    3e:31:62:de:89:d8:f3:a3:d7:40:5c:40:41:14:b6:
                    4b:75:2c:1d:55:63:4b:2e:1f:65:ce:76:0e:6d:90:
                    35:0c:5a:60:0e:21:72:5e:3c:d8:e2:a2:10:37:b6:
                    57:83:a4:62:92:11:46:9a:f2:8d:44:75:c1:e2:f8:
                    1d:49:48:4c:3d:1f:87:7f:91:43:e4:6a:46:d6:90:
                    66:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AC:DD:7B:EA:A5:6B:43:08:D1:2F:4D:72:D4:FD:15:21:96:32:FB:32
            X509v3 Authority Key Identifier:
                keyid:4E:10:F1:3F:29:5F:BF:2B:35:9C:84:DD:D1:65:1B:C8:51:AA:8A:F5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91275FD/E1EFD9B6DECE11E4A14F0068C4F9AE02/ThDxPylfvys1nITd0WUbyFGqivU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ThDxPylfvys1nITd0WUbyFGqivU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91275FD/E1EFD9B6DECE11E4A14F0068C4F9AE02/AD5A136A39E511F0AC386379C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  202.81.160.0/22

    Signature Algorithm: sha256WithRSAEncryption
         99:88:f4:e4:88:0f:6d:01:1d:e7:7b:91:5a:dd:0d:77:bf:d8:
         0b:56:a5:0e:11:36:2d:97:1a:4c:73:5d:c0:0c:85:78:89:f8:
         a6:3d:34:c8:a3:10:c8:4b:71:29:20:3a:75:5d:e0:40:96:62:
         51:bf:8f:a4:55:7c:e0:72:6c:5e:df:bb:83:13:89:5f:8a:71:
         34:a3:b3:7c:1e:29:ad:92:3a:05:51:93:90:6e:cb:1c:db:bf:
         60:e0:4e:77:3e:ba:6e:6d:cd:cf:d9:ee:21:5b:d1:54:e2:36:
         11:3e:fd:dd:99:6c:c6:e1:c4:7d:f0:0c:37:ac:3d:ad:0d:0f:
         e1:ad:48:c0:ac:a4:48:61:9c:64:24:9a:eb:9b:8d:a3:38:55:
         ed:63:5a:42:07:53:bb:bb:c0:b1:9c:2a:c6:47:79:c6:91:24:
         19:85:a2:b2:63:00:e5:8c:21:be:e8:68:04:ac:84:a5:74:80:
         ad:1c:9d:64:b4:f6:6f:fd:1c:b4:f1:8b:9f:f2:88:48:93:90:
         20:ea:63:8b:de:d9:f2:13:58:90:f5:30:1d:ae:3a:62:08:54:
         c5:09:29:06:03:7b:58:84:fc:fd:f3:f5:5f:65:a4:4b:6c:f7:
         bc:11:6d:41:1c:48:7a:26:0b:81:7d:32:36:51:db:27:64:42:
         9a:df:40:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 3 23:49:57 2025 by rpki-client