Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A913664F/1E0854AEDD7D11ED91A0464DC4F9AE02/B1E75D08DD7F11ED815F9B4DC4F9AE02.roa
File:                     B1E75D08DD7F11ED815F9B4DC4F9AE02.roa (raw, json)
Hash identifier:          m0+29/xOQkLY0SUQkzyArE5bZt0Gpa6rpxJzQEzTpmY=
Subject key identifier:   03:FE:D6:93:17:23:D0:E9:0B:0D:4B:06:D4:2F:37:4C:50:8B:F5:4D
Certificate issuer:       /CN=A913664F/serialNumber=D9902C4E9472C7AD5082812FA7D077146AB7CB9C
Certificate serial:       0198
Authority key identifier: D9:90:2C:4E:94:72:C7:AD:50:82:81:2F:A7:D0:77:14:6A:B7:CB:9C
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2ZAsTpRyx61QgoEvp9B3FGq3y5w.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A913664F/1E0854AEDD7D11ED91A0464DC4F9AE02/B1E75D08DD7F11ED815F9B4DC4F9AE02.roa
Signing time:             Fri 09 May 2025 02:52:24 +0000
ROA not before:           Fri 09 May 2025 02:52:24 +0000
ROA not after:            Thu 30 Jul 2026 00:00:00 +0000
asID:                     2914
IP address blocks:        116.197.144.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A913664F/1E0854AEDD7D11ED91A0464DC4F9AE02/2ZAsTpRyx61QgoEvp9B3FGq3y5w.crl
                          rsync://rpki.apnic.net/member_repository/A913664F/1E0854AEDD7D11ED91A0464DC4F9AE02/2ZAsTpRyx61QgoEvp9B3FGq3y5w.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2ZAsTpRyx61QgoEvp9B3FGq3y5w.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 08 Jun 2025 03:14:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 408 (0x198)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A913664F, serialNumber=D9902C4E9472C7AD5082812FA7D077146AB7CB9C
        Validity
            Not Before: May  9 02:52:24 2025 GMT
            Not After : Jul 30 00:00:00 2026 GMT
        Subject: CN=681d6de8-661d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e7:03:15:e7:5b:94:cb:e2:2d:cd:f0:7a:13:65:
                    df:df:42:a9:31:05:0e:01:8b:a9:4c:6e:16:d3:ec:
                    69:3a:97:21:80:31:f3:b9:4c:56:fd:2d:ce:81:37:
                    c6:22:93:d3:cf:80:cd:26:f7:00:8a:91:f8:eb:2b:
                    f3:9e:35:fd:45:a6:b9:81:b9:24:5a:54:5b:45:96:
                    8f:20:1c:9e:2d:78:77:ca:ac:9b:4a:09:9b:a5:24:
                    72:f9:a7:7a:b9:c0:8b:e6:b6:89:51:48:9e:87:4d:
                    a9:5b:f1:59:b8:67:3f:2f:66:cb:0b:16:d6:70:d5:
                    89:4a:be:6a:d7:66:b0:57:e0:fa:18:c0:9f:d5:84:
                    d6:11:d8:33:9e:25:8e:01:e1:dc:55:bd:25:3b:e4:
                    72:4b:19:6a:f6:71:0b:d4:a0:e1:3d:6a:d7:19:22:
                    59:eb:a7:46:99:e7:f7:f4:9a:51:03:63:4d:7c:36:
                    ff:11:12:e1:c3:9f:2b:dd:8b:10:a3:9a:97:59:a4:
                    93:13:41:07:e8:60:3c:94:b9:73:9b:7f:7e:b1:53:
                    b6:da:04:cc:97:fd:a9:e9:f3:d5:d2:12:8a:f7:47:
                    e0:d4:18:79:2a:ab:f7:46:2b:b5:cb:23:ae:4a:b0:
                    d3:37:67:fc:1a:b3:fb:9b:2c:67:42:ff:94:b6:d1:
                    ce:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                03:FE:D6:93:17:23:D0:E9:0B:0D:4B:06:D4:2F:37:4C:50:8B:F5:4D
            X509v3 Authority Key Identifier:
                keyid:D9:90:2C:4E:94:72:C7:AD:50:82:81:2F:A7:D0:77:14:6A:B7:CB:9C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A913664F/1E0854AEDD7D11ED91A0464DC4F9AE02/2ZAsTpRyx61QgoEvp9B3FGq3y5w.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2ZAsTpRyx61QgoEvp9B3FGq3y5w.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913664F/1E0854AEDD7D11ED91A0464DC4F9AE02/B1E75D08DD7F11ED815F9B4DC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  116.197.144.0/22

    Signature Algorithm: sha256WithRSAEncryption
         68:c4:18:62:b6:f7:0c:54:9c:5f:ef:25:a7:ce:c2:5d:9f:dc:
         0c:5c:65:6c:44:78:75:64:3b:c2:50:86:21:b9:65:d6:e0:00:
         c7:cf:32:16:7c:3e:6c:66:c4:cc:58:14:1b:2a:d7:85:3b:3d:
         81:7d:f0:02:c3:5b:70:51:9f:fd:ba:f1:b8:11:5e:38:4e:92:
         ca:b2:78:2d:52:b1:55:21:7a:7c:40:65:04:70:b0:44:1a:87:
         02:52:9c:f9:d1:ae:b4:4d:dc:a1:e3:26:1f:d6:91:ae:21:cc:
         b3:dc:c3:22:74:a5:46:b1:1c:61:35:67:66:d5:ed:e1:ff:03:
         bf:cf:78:9f:1e:28:b9:1d:9e:a9:68:1b:2d:5e:2e:72:1b:e3:
         4c:8b:0e:ea:41:10:6a:f2:42:16:ff:ae:45:8c:cd:df:92:24:
         91:ce:d8:4f:b6:a4:44:f6:79:4a:d8:5b:17:7a:17:fb:31:61:
         77:ee:47:82:96:e9:eb:ba:0d:89:7e:96:18:67:70:7e:ff:28:
         6a:ec:6f:e6:a2:5f:8f:cb:8f:31:25:23:ae:11:86:22:c0:61:
         e9:20:1a:b2:f0:52:3f:78:2a:76:8c:7f:91:b4:43:ab:ff:5e:
         f0:91:ff:59:d4:ba:ee:b5:19:44:04:eb:1c:f1:1a:b0:f7:c6:
         ad:ed:80:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 2 07:09:36 2025 by rpki-client