Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9161A95/8C44A9342BD911F0AB443122C4F9AE02/EDADA2842BD911F0BD5FC622C4F9AE02.roa
File:                     EDADA2842BD911F0BD5FC622C4F9AE02.roa (raw, json)
Hash identifier:          EbKDh3m7E8KIWacScwgzzTIeUCwyZGPRJhI5B+4pFX0=
Subject key identifier:   E6:B0:82:F8:08:D2:A8:84:55:13:98:E5:1E:37:4F:F2:BF:99:A7:17
Certificate issuer:       /CN=A9161A95/serialNumber=B6AC587EC27D535ECF4D8FDE171176579DAF4D4F
Certificate serial:       02
Authority key identifier: B6:AC:58:7E:C2:7D:53:5E:CF:4D:8F:DE:17:11:76:57:9D:AF:4D:4F
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/tqxYfsJ9U17PTY_eFxF2V52vTU8.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9161A95/8C44A9342BD911F0AB443122C4F9AE02/EDADA2842BD911F0BD5FC622C4F9AE02.roa
Signing time:             Thu 08 May 2025 06:59:04 +0000
ROA not before:           Thu 08 May 2025 06:59:04 +0000
ROA not after:            Fri 01 May 2026 00:00:00 +0000
asID:                     153548
IP address blocks:        161.248.232.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9161A95/8C44A9342BD911F0AB443122C4F9AE02/tqxYfsJ9U17PTY_eFxF2V52vTU8.crl
                          rsync://rpki.apnic.net/member_repository/A9161A95/8C44A9342BD911F0AB443122C4F9AE02/tqxYfsJ9U17PTY_eFxF2V52vTU8.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/tqxYfsJ9U17PTY_eFxF2V52vTU8.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 12 Jun 2025 07:27:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2 (0x2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9161A95, serialNumber=B6AC587EC27D535ECF4D8FDE171176579DAF4D4F
        Validity
            Not Before: May  8 06:59:04 2025 GMT
            Not After : May  1 00:00:00 2026 GMT
        Subject: CN=681c5638-5606
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:e2:9d:e6:1b:c7:64:4e:fa:43:79:7c:ce:b0:
                    96:b5:bf:9e:0e:eb:4f:54:0b:68:4d:87:1a:4c:bb:
                    68:10:ef:0a:b7:11:b6:cc:f9:fa:6d:2c:dd:19:33:
                    2c:3f:89:e2:8d:f9:8e:d1:56:a6:91:b9:42:1e:1a:
                    02:4a:ca:07:47:76:13:45:01:cb:0a:1e:f4:23:8c:
                    b7:e6:28:45:69:77:ed:b1:91:4d:87:0d:36:74:6a:
                    f3:3b:5d:e0:bf:5e:a7:5d:dc:39:91:f8:57:f8:7e:
                    ef:9d:90:1e:d0:ed:23:f1:40:3a:93:d1:14:d8:35:
                    3a:d6:cd:65:88:a9:0b:25:0e:41:28:97:6f:4e:29:
                    d3:58:f1:f5:01:43:e9:9e:b3:e8:2e:4a:7e:36:f8:
                    dd:1a:fd:98:42:44:6a:89:b6:c3:eb:b8:72:a9:82:
                    8b:ba:ff:b4:ba:9c:65:0c:bb:55:8d:30:e0:e5:2c:
                    39:ce:2b:57:e0:9b:00:1c:b9:5c:d1:cb:01:b1:c7:
                    cc:39:6d:8e:83:c5:5c:df:ed:5e:cc:6e:ea:4c:9b:
                    27:67:a3:ed:c8:d7:93:a5:42:82:02:36:87:c9:83:
                    52:ea:99:08:2a:2a:9a:bd:1e:d4:f4:ce:9d:ee:ea:
                    af:1d:07:6c:97:5a:ac:f5:82:58:51:9e:cf:15:90:
                    9f:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E6:B0:82:F8:08:D2:A8:84:55:13:98:E5:1E:37:4F:F2:BF:99:A7:17
            X509v3 Authority Key Identifier:
                keyid:B6:AC:58:7E:C2:7D:53:5E:CF:4D:8F:DE:17:11:76:57:9D:AF:4D:4F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9161A95/8C44A9342BD911F0AB443122C4F9AE02/tqxYfsJ9U17PTY_eFxF2V52vTU8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/tqxYfsJ9U17PTY_eFxF2V52vTU8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9161A95/8C44A9342BD911F0AB443122C4F9AE02/EDADA2842BD911F0BD5FC622C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  161.248.232.0/24

    Signature Algorithm: sha256WithRSAEncryption
         7c:ef:79:08:32:4c:96:c5:46:98:18:a1:5f:b9:1a:87:69:19:
         64:d1:4f:67:86:5c:8e:b2:ef:19:55:c2:20:02:85:22:16:21:
         ee:fb:2f:56:0c:92:a8:9a:0f:26:13:83:8f:a3:34:90:c2:24:
         4b:33:5d:82:b2:98:85:d1:c2:16:d4:1c:35:21:66:10:5e:eb:
         d8:4f:92:ef:2e:7c:af:76:85:cd:f1:8a:33:3f:d2:cf:66:27:
         b5:d9:85:5f:17:8c:9a:5f:27:4a:79:8d:f1:eb:b6:0a:42:f1:
         64:86:0c:ae:9f:02:7e:47:f0:fb:fa:98:e4:4f:06:f5:da:ae:
         5c:ab:fa:f6:5e:d7:ae:1d:d7:26:fb:39:f8:59:58:d4:fb:4c:
         f4:f1:70:8b:5e:61:b8:dd:b0:e9:51:00:ad:c3:a6:e6:13:e3:
         93:41:9a:b5:dc:19:05:1b:fc:0e:53:65:59:54:1c:af:06:5b:
         26:0d:cc:92:11:b4:bf:49:0d:69:7a:91:02:86:55:9f:b9:b4:
         15:b1:ea:9b:17:bd:ea:9e:5f:1e:9d:f2:94:3a:25:60:1a:54:
         40:38:cf:dd:6f:64:bc:88:f8:14:2f:0b:dd:6a:c3:98:cc:1d:
         7a:4c:03:0e:e4:02:bf:f9:a9:2e:82:bb:63:7c:3b:ff:f8:60:
         cf:8b:a7:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 5 19:55:33 2025 by rpki-client