Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91462B5/6D5FED92CC2F11EC85538037C4F9AE02/06C73A8EFBE511EFA186694BC4F9AE02.roa
File:                     06C73A8EFBE511EFA186694BC4F9AE02.roa (raw, json)
Hash identifier:          gtu3Q8byYUFn3G8ghu+WaqFnDCahrh14LRgRGbgW9vM=
Subject key identifier:   AB:77:DB:0C:97:95:81:8C:4F:FA:B6:D2:89:CD:FE:EC:FC:2D:95:44
Certificate issuer:       /CN=A91462B5/serialNumber=6483198A5054D4AB7A0161CD6391FA6C14B00208
Certificate serial:       0389
Authority key identifier: 64:83:19:8A:50:54:D4:AB:7A:01:61:CD:63:91:FA:6C:14:B0:02:08
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZIMZilBU1Kt6AWHNY5H6bBSwAgg.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91462B5/6D5FED92CC2F11EC85538037C4F9AE02/06C73A8EFBE511EFA186694BC4F9AE02.roa
Signing time:             Wed 21 May 2025 01:18:22 +0000
ROA not before:           Wed 21 May 2025 01:18:22 +0000
ROA not after:            Thu 30 Jul 2026 00:00:00 +0000
asID:                     138571
IP address blocks:        157.119.22.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91462B5/6D5FED92CC2F11EC85538037C4F9AE02/ZIMZilBU1Kt6AWHNY5H6bBSwAgg.crl
                          rsync://rpki.apnic.net/member_repository/A91462B5/6D5FED92CC2F11EC85538037C4F9AE02/ZIMZilBU1Kt6AWHNY5H6bBSwAgg.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZIMZilBU1Kt6AWHNY5H6bBSwAgg.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 08 Jun 2025 01:23:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 905 (0x389)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91462B5, serialNumber=6483198A5054D4AB7A0161CD6391FA6C14B00208
        Validity
            Not Before: May 21 01:18:22 2025 GMT
            Not After : Jul 30 00:00:00 2026 GMT
        Subject: CN=682d29de-1b66
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:29:77:b4:ce:43:ad:6f:21:77:84:0d:b0:1a:
                    72:cb:62:99:de:06:c0:d5:69:28:d7:a4:53:e0:44:
                    2b:6c:cb:55:3d:8d:e7:7c:e3:79:1b:b2:66:35:cb:
                    05:1c:79:6d:de:ac:28:3b:e5:a6:1c:f8:50:3d:74:
                    be:6d:0f:8c:5c:4b:21:60:c4:ce:87:45:a0:73:c3:
                    40:b6:5a:9e:2a:83:ba:5d:e7:1a:b5:c1:a5:da:bd:
                    f3:b7:62:06:7a:7f:a9:3e:8b:81:05:53:9a:3e:e2:
                    83:6b:a8:2e:13:d5:4d:1e:97:6c:af:4d:75:1d:99:
                    90:b7:0b:94:af:28:29:d4:82:7d:22:cd:5a:d2:7f:
                    1f:a6:6d:6a:8e:56:8b:31:df:65:91:11:2e:ab:f0:
                    0d:de:e7:84:bb:c8:b7:28:5a:46:0f:a8:40:49:97:
                    d1:8c:46:55:7c:76:41:52:da:e2:3c:81:de:8f:7e:
                    19:69:68:14:23:90:f7:c4:8c:d6:61:c1:f4:8a:12:
                    cf:96:bf:c3:87:5d:aa:40:9c:93:a5:3b:e7:8b:f8:
                    57:da:1c:e0:59:cb:3c:87:7a:4b:d3:38:2b:2f:67:
                    f9:0a:b7:b9:31:fc:25:8d:6f:8a:51:07:00:6c:ee:
                    91:3e:da:81:6a:f7:8a:af:7b:f8:47:6d:26:0d:0e:
                    a2:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AB:77:DB:0C:97:95:81:8C:4F:FA:B6:D2:89:CD:FE:EC:FC:2D:95:44
            X509v3 Authority Key Identifier:
                keyid:64:83:19:8A:50:54:D4:AB:7A:01:61:CD:63:91:FA:6C:14:B0:02:08

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91462B5/6D5FED92CC2F11EC85538037C4F9AE02/ZIMZilBU1Kt6AWHNY5H6bBSwAgg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZIMZilBU1Kt6AWHNY5H6bBSwAgg.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91462B5/6D5FED92CC2F11EC85538037C4F9AE02/06C73A8EFBE511EFA186694BC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  157.119.22.0/24

    Signature Algorithm: sha256WithRSAEncryption
         1f:24:c3:0d:2e:73:76:bf:f4:0f:6c:2c:2c:99:e6:24:44:dc:
         ed:bb:8e:a0:5b:a5:de:a9:23:c2:4b:1f:51:58:3d:03:28:40:
         2b:ce:87:4b:36:e9:6e:d8:2f:b7:9f:58:09:05:5a:f3:19:cd:
         61:69:c5:b4:af:ab:e6:e8:ca:12:06:d6:19:c1:1b:c2:b4:ab:
         f2:41:49:f6:f7:ee:5a:90:fa:dc:d9:f3:a6:92:47:ed:f7:e4:
         a8:f2:11:9b:2e:32:4d:2f:6b:a7:59:c0:15:fa:04:f9:bf:af:
         25:57:1e:ad:11:25:ea:95:3f:26:70:68:70:4a:b0:eb:2d:f9:
         22:49:74:1b:e6:51:cf:c4:7d:cc:86:a2:51:31:26:9c:68:d0:
         ad:d8:f2:e4:9e:67:f5:56:c2:00:cb:21:14:ee:ea:17:dc:96:
         45:84:55:0f:a4:b7:02:bf:af:e6:f6:96:a2:6c:f1:ff:d3:6b:
         14:72:b9:54:a9:8d:5f:f3:62:28:ec:ed:00:6a:3d:09:41:cf:
         fc:35:a7:cd:c7:94:0d:36:cf:3d:53:6c:30:8a:8f:4f:75:28:
         ce:41:eb:89:2d:29:6c:e2:fb:a6:11:bd:8d:e5:e8:1e:37:f7:
         cf:6d:7b:d8:04:d3:e8:95:fd:e4:b7:15:f2:4f:e4:2f:67:d6:
         9c:47:3e:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 2 06:32:20 2025 by rpki-client