Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A914DC5D/39E7146C2A3311EB929DC07CC4F9AE02/CC4A3EAC0EDF11F0915E3563C4F9AE02.roa
File:                     CC4A3EAC0EDF11F0915E3563C4F9AE02.roa (raw, json)
Hash identifier:          ZOEl/EUL9Kcp7Oe2ySY5gCeqAoMs/cWZLqeYM9bpOY4=
Subject key identifier:   B3:4A:27:97:ED:DF:D6:43:E1:43:56:8B:59:6C:16:82:93:B1:F2:E4
Certificate issuer:       /CN=A914DC5D/serialNumber=20F2531A7BA8212D2BB0900D576372D33F846928
Certificate serial:       088D
Authority key identifier: 20:F2:53:1A:7B:A8:21:2D:2B:B0:90:0D:57:63:72:D3:3F:84:69:28
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IPJTGnuoIS0rsJANV2Ny0z-EaSg.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A914DC5D/39E7146C2A3311EB929DC07CC4F9AE02/CC4A3EAC0EDF11F0915E3563C4F9AE02.roa
Signing time:             Tue 20 May 2025 21:50:59 +0000
ROA not before:           Tue 20 May 2025 21:50:59 +0000
ROA not after:            Wed 30 Sep 2026 00:00:00 +0000
asID:                     55925
IP address blocks:        203.150.163.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A914DC5D/39E7146C2A3311EB929DC07CC4F9AE02/IPJTGnuoIS0rsJANV2Ny0z-EaSg.crl
                          rsync://rpki.apnic.net/member_repository/A914DC5D/39E7146C2A3311EB929DC07CC4F9AE02/IPJTGnuoIS0rsJANV2Ny0z-EaSg.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IPJTGnuoIS0rsJANV2Ny0z-EaSg.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 07 Jun 2025 21:45:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2189 (0x88d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A914DC5D, serialNumber=20F2531A7BA8212D2BB0900D576372D33F846928
        Validity
            Not Before: May 20 21:50:59 2025 GMT
            Not After : Sep 30 00:00:00 2026 GMT
        Subject: CN=682cf942-ae2c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:90:bc:87:72:7a:ee:1a:02:34:bc:ed:f3:e2:
                    3d:e5:3b:c6:68:d4:53:ec:e2:b3:78:5d:c6:cf:f2:
                    2e:b9:09:d4:58:f6:c4:13:32:9c:f8:16:11:20:3b:
                    0f:06:14:d2:2c:10:cd:be:c2:53:b8:4e:72:80:e9:
                    60:24:fe:bf:a0:9d:cb:8c:21:75:00:4e:ea:ba:fc:
                    e9:9a:40:47:fc:a4:67:60:2d:7c:dd:8d:55:e7:0d:
                    55:67:6f:31:d6:cb:54:d1:ec:5c:21:57:80:14:95:
                    da:6d:40:b5:11:ed:e2:4b:31:39:30:29:62:c4:49:
                    66:dc:c6:aa:1d:80:ab:f7:20:33:71:6c:3d:d1:85:
                    a8:06:f2:b0:26:74:0b:bf:a4:4d:90:b8:bc:f2:55:
                    36:a7:fd:2b:ae:5b:a7:9c:de:6a:e7:35:ad:62:af:
                    00:c7:68:f1:3b:09:06:87:ef:1d:3e:59:a7:d8:34:
                    8c:29:ce:ea:b1:59:24:4b:e0:8a:e6:74:70:2b:50:
                    21:56:ef:c0:be:66:5f:c5:cf:a6:b4:29:43:2f:49:
                    ad:22:0e:33:66:ed:0d:78:f9:34:db:65:09:b0:21:
                    7c:e0:63:9a:f7:21:78:5f:b4:98:20:52:7c:c9:25:
                    0a:5e:2d:90:f3:45:e7:bf:27:64:87:b3:32:75:b7:
                    9f:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B3:4A:27:97:ED:DF:D6:43:E1:43:56:8B:59:6C:16:82:93:B1:F2:E4
            X509v3 Authority Key Identifier:
                keyid:20:F2:53:1A:7B:A8:21:2D:2B:B0:90:0D:57:63:72:D3:3F:84:69:28

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A914DC5D/39E7146C2A3311EB929DC07CC4F9AE02/IPJTGnuoIS0rsJANV2Ny0z-EaSg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IPJTGnuoIS0rsJANV2Ny0z-EaSg.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914DC5D/39E7146C2A3311EB929DC07CC4F9AE02/CC4A3EAC0EDF11F0915E3563C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  203.150.163.0/24

    Signature Algorithm: sha256WithRSAEncryption
         bc:5f:99:0f:2a:39:f7:8f:ab:a3:5a:55:28:e8:5a:cb:7b:7c:
         fc:35:f4:ac:bc:58:37:88:61:62:57:3a:dc:77:14:b5:cc:de:
         8b:2c:c9:17:26:b3:7e:9e:45:55:e6:06:5a:9f:fd:3e:02:94:
         8c:fc:da:a8:05:3c:45:ae:68:53:e9:39:5c:0d:61:2a:c1:d4:
         a1:4f:79:06:1d:41:93:2f:90:a0:cb:cd:2f:dc:dd:4b:25:08:
         00:1c:90:fb:b2:c3:12:a2:a3:42:7c:ae:ca:ce:b7:4d:23:2b:
         2d:ef:98:ec:0a:a0:54:24:be:d8:f6:93:23:fe:19:8e:7b:4b:
         a2:b5:a3:1e:f6:e3:f9:53:06:37:4d:f1:0c:cc:3d:b8:2a:e6:
         97:f9:66:48:97:91:75:04:36:90:47:dc:a1:1b:cc:a7:7c:cb:
         5b:ca:4e:d0:2c:18:99:ab:0b:66:a5:f5:8d:88:9c:57:da:5b:
         70:7e:35:43:35:0e:24:16:49:c1:af:7a:3d:51:16:94:11:90:
         e9:98:c9:bd:d3:74:2d:b4:d6:ae:46:10:20:1d:7a:e3:f7:b4:
         5f:6f:cc:2a:59:95:57:2b:72:66:5e:31:4b:86:7b:19:da:b2:
         eb:2b:8f:b8:1b:b4:90:c1:c2:e1:1a:d1:32:15:76:c3:dd:47:
         3b:bd:22:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 2 06:31:51 2025 by rpki-client