Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A916807A/0263AB483E8811EDA61A9B2AC4F9AE02/0424E2A2391811F0BD320332C4F9AE02.roa
File:                     0424E2A2391811F0BD320332C4F9AE02.roa (raw, json)
Hash identifier:          3gLUj8duXZr1fAsGq8Q98uLnFAI+cAF7wiBd3NIkWDU=
Subject key identifier:   07:22:73:3A:67:A1:CC:89:0F:7A:F4:16:6D:A5:DA:71:92:C9:0A:95
Certificate issuer:       /CN=A916807A/serialNumber=729E2F9C1D87C214735078CFD21C638E07157B5D
Certificate serial:       0231
Authority key identifier: 72:9E:2F:9C:1D:87:C2:14:73:50:78:CF:D2:1C:63:8E:07:15:7B:5D
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cp4vnB2HwhRzUHjP0hxjjgcVe10.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A916807A/0263AB483E8811EDA61A9B2AC4F9AE02/0424E2A2391811F0BD320332C4F9AE02.roa
Signing time:             Sun 25 May 2025 03:26:16 +0000
ROA not before:           Sun 25 May 2025 03:26:16 +0000
ROA not after:            Tue 30 Dec 2025 00:00:00 +0000
asID:                     138868
IP address blocks:        202.155.116.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A916807A/0263AB483E8811EDA61A9B2AC4F9AE02/cp4vnB2HwhRzUHjP0hxjjgcVe10.crl
                          rsync://rpki.apnic.net/member_repository/A916807A/0263AB483E8811EDA61A9B2AC4F9AE02/cp4vnB2HwhRzUHjP0hxjjgcVe10.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cp4vnB2HwhRzUHjP0hxjjgcVe10.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 08 Jun 2025 02:16:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 561 (0x231)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A916807A, serialNumber=729E2F9C1D87C214735078CFD21C638E07157B5D
        Validity
            Not Before: May 25 03:26:16 2025 GMT
            Not After : Dec 30 00:00:00 2025 GMT
        Subject: CN=68328dd8-5c0c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:af:50:ff:9a:bd:64:c3:ed:eb:97:51:d5:11:
                    ad:f5:75:6d:79:21:49:02:3b:e9:ff:ef:67:99:9f:
                    c2:6e:1e:71:20:ea:16:c4:ae:0f:ec:03:76:cf:a7:
                    97:e6:85:46:e3:10:0e:a2:a3:eb:50:df:dc:0c:14:
                    52:6e:8d:25:39:6c:bd:de:35:70:a4:2d:76:af:b8:
                    31:6f:14:9d:0e:50:8b:72:f6:fe:92:67:e1:54:0e:
                    94:5b:d5:33:55:71:15:12:bb:52:a9:52:5f:62:13:
                    9b:84:ff:76:5f:ac:a5:28:66:85:60:63:20:09:fd:
                    5d:37:c6:c7:13:64:62:5d:ba:97:7a:c8:53:c0:d1:
                    96:1f:91:ef:81:29:9d:1d:47:6b:03:3c:ba:3f:75:
                    80:e9:76:ef:ac:c0:3d:dd:3a:7a:fd:36:88:7b:29:
                    11:d2:f5:cd:14:c3:63:f9:22:4d:ca:5f:bb:3c:5c:
                    7f:72:45:58:ea:11:67:47:44:66:fb:23:84:b6:7c:
                    14:0b:3d:bf:b7:f4:7d:58:87:9f:57:e3:6c:60:2d:
                    21:c7:49:de:19:07:7d:45:65:52:b4:be:48:3b:51:
                    74:46:fa:75:b9:1d:73:77:87:8d:96:be:40:06:33:
                    62:09:52:9b:09:66:e5:c9:7a:3b:74:3c:5c:05:b5:
                    83:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                07:22:73:3A:67:A1:CC:89:0F:7A:F4:16:6D:A5:DA:71:92:C9:0A:95
            X509v3 Authority Key Identifier:
                keyid:72:9E:2F:9C:1D:87:C2:14:73:50:78:CF:D2:1C:63:8E:07:15:7B:5D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A916807A/0263AB483E8811EDA61A9B2AC4F9AE02/cp4vnB2HwhRzUHjP0hxjjgcVe10.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cp4vnB2HwhRzUHjP0hxjjgcVe10.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916807A/0263AB483E8811EDA61A9B2AC4F9AE02/0424E2A2391811F0BD320332C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  202.155.116.0/22

    Signature Algorithm: sha256WithRSAEncryption
         59:04:0e:9b:82:e6:29:fe:a9:46:be:43:4a:d4:d9:e1:9c:c2:
         12:44:3d:ab:ee:3e:48:52:27:ad:3d:1e:6f:c8:f6:8b:8e:23:
         61:98:aa:35:a7:07:04:9c:57:fb:27:c7:44:56:2c:c9:ef:de:
         58:f9:14:1f:e8:ca:29:ce:9c:d4:81:14:0e:84:94:c5:ff:91:
         1c:4d:b5:4e:a9:41:7a:43:e4:b0:5a:0f:45:f0:81:13:d8:7a:
         55:b1:5a:85:73:e4:0f:c8:3f:4e:1c:69:d5:9e:df:c6:7a:1b:
         dc:77:38:e3:19:b7:59:5e:eb:d9:96:fe:4b:91:d9:3e:64:d0:
         51:19:92:15:67:74:d8:c1:4e:57:8b:5a:ab:a0:fc:6c:43:81:
         45:13:9a:c0:1c:70:ce:d5:ff:df:c9:73:8f:b2:6c:e9:8c:65:
         54:96:0f:cd:35:a9:28:7b:3c:16:d1:78:67:0e:02:f1:fd:3a:
         f3:22:69:5d:c6:c6:2a:9e:52:de:16:49:46:e8:e6:40:da:b0:
         2c:cc:a1:d2:b8:fd:cd:e0:fb:b5:0e:6a:95:1f:be:c9:02:d7:
         0c:28:98:c3:df:aa:6b:85:6d:ea:56:bb:87:42:bb:42:83:dc:
         eb:c8:bb:e9:c6:e2:bc:66:ad:a4:f3:17:dd:e0:b6:11:bf:50:
         46:4e:67:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 2 07:14:23 2025 by rpki-client