Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91705D7/96A36AA816D811EFBF901E5FC4F9AE02/362B52EA31C511F0B796F75DC4F9AE02.roa
File:                     362B52EA31C511F0B796F75DC4F9AE02.roa (raw, json)
Hash identifier:          CY2B70Cuo/7PA/pa+19+ZYZYV7eGsJlAt7KNzfOvYYw=
Subject key identifier:   C1:A2:2C:1D:42:67:AD:8A:17:D9:CB:84:3D:A9:74:6F:3C:80:BC:95
Certificate issuer:       /CN=A91705D7/serialNumber=AA4405B1BFA96C9C69B029033EF481D8F58A77E5
Certificate serial:       CD
Authority key identifier: AA:44:05:B1:BF:A9:6C:9C:69:B0:29:03:3E:F4:81:D8:F5:8A:77:E5
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/qkQFsb-pbJxpsCkDPvSB2PWKd-U.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91705D7/96A36AA816D811EFBF901E5FC4F9AE02/362B52EA31C511F0B796F75DC4F9AE02.roa
Signing time:             Thu 15 May 2025 19:45:53 +0000
ROA not before:           Thu 15 May 2025 19:45:53 +0000
ROA not after:            Sun 31 Aug 2025 00:00:00 +0000
asID:                     133112
IP address blocks:        160.20.117.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91705D7/96A36AA816D811EFBF901E5FC4F9AE02/qkQFsb-pbJxpsCkDPvSB2PWKd-U.crl
                          rsync://rpki.apnic.net/member_repository/A91705D7/96A36AA816D811EFBF901E5FC4F9AE02/qkQFsb-pbJxpsCkDPvSB2PWKd-U.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/qkQFsb-pbJxpsCkDPvSB2PWKd-U.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 14 Jun 2025 05:17:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 205 (0xcd)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91705D7, serialNumber=AA4405B1BFA96C9C69B029033EF481D8F58A77E5
        Validity
            Not Before: May 15 19:45:53 2025 GMT
            Not After : Aug 31 00:00:00 2025 GMT
        Subject: CN=68264471-c96b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:ef:a0:56:a8:5b:de:fd:ca:b2:94:05:c0:08:
                    62:0c:42:b3:7a:c2:4a:af:d3:40:95:c4:17:99:46:
                    ad:fd:2e:de:49:85:6c:94:e5:3a:02:59:a4:0d:08:
                    86:e6:34:ea:bb:08:11:8d:da:97:a6:6e:46:94:f2:
                    a8:3c:4d:6b:a7:a1:95:7e:cd:1c:d7:3b:2c:47:67:
                    9b:59:c6:cb:b6:82:04:02:f3:c3:94:f0:6b:88:dc:
                    04:af:1c:5c:ef:e7:87:05:53:d6:0b:f5:72:95:bf:
                    66:3a:7a:6d:da:c0:f6:ff:95:14:6a:e2:64:c9:46:
                    69:78:47:1c:95:57:9e:43:b3:88:51:81:2c:3a:a7:
                    14:00:69:ec:85:f5:e7:be:91:65:37:88:4d:0d:88:
                    21:2b:4b:3f:96:af:97:72:b3:50:37:46:e9:f4:59:
                    10:20:51:a7:ab:2f:75:ec:c8:03:20:16:34:b9:73:
                    ce:2f:d2:f5:64:dc:97:de:ce:95:03:73:b8:4e:1e:
                    8c:42:31:f1:d2:5a:d7:f5:e6:b3:b8:e2:bb:a8:e9:
                    63:78:59:4c:96:2c:ed:5c:c4:a3:ac:a8:1c:e8:10:
                    98:54:20:f8:be:16:91:c9:dd:a3:01:ae:23:fe:4e:
                    6b:07:e2:d6:76:75:8d:35:40:6e:5b:29:19:da:5f:
                    0b:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C1:A2:2C:1D:42:67:AD:8A:17:D9:CB:84:3D:A9:74:6F:3C:80:BC:95
            X509v3 Authority Key Identifier:
                keyid:AA:44:05:B1:BF:A9:6C:9C:69:B0:29:03:3E:F4:81:D8:F5:8A:77:E5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91705D7/96A36AA816D811EFBF901E5FC4F9AE02/qkQFsb-pbJxpsCkDPvSB2PWKd-U.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/qkQFsb-pbJxpsCkDPvSB2PWKd-U.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91705D7/96A36AA816D811EFBF901E5FC4F9AE02/362B52EA31C511F0B796F75DC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  160.20.117.0/24

    Signature Algorithm: sha256WithRSAEncryption
         02:6b:f6:12:81:eb:50:41:0b:b9:d9:ca:a1:46:d5:fe:d8:82:
         80:40:85:3b:79:32:3f:9e:5c:31:a8:c0:0a:d6:7f:5b:16:a0:
         5e:a0:d0:0d:04:47:0b:42:c5:75:45:6d:19:4f:67:8a:7b:24:
         5e:ad:f7:5f:03:26:fa:7c:30:cc:5a:cd:6e:a3:1a:4b:1f:30:
         7a:6e:fb:9e:e0:44:33:44:78:3b:28:7f:5a:f0:91:ae:46:0c:
         5a:3d:c2:e6:11:01:7d:5b:0f:1a:b6:9f:b4:ae:9c:24:e7:6c:
         89:8e:6d:38:30:44:9b:28:50:c2:9f:96:cd:11:d9:84:19:5a:
         d3:61:06:74:47:8c:23:f0:1b:64:2a:c2:2f:68:44:4b:8d:8f:
         39:93:8d:13:12:a1:04:ac:d1:f1:1d:2c:6e:64:b9:28:f7:aa:
         b8:9d:c9:fc:62:99:08:0c:74:b0:5d:46:bd:79:c3:50:10:f4:
         2d:6b:9c:7b:be:a2:f7:6a:95:4a:3c:68:c1:19:ec:f6:65:5c:
         96:52:be:f9:45:07:71:04:1f:5b:b4:6e:85:55:a8:dd:1e:8f:
         04:36:58:75:68:23:c0:05:cd:31:b0:8d:43:90:26:21:1a:4c:
         69:4e:77:99:42:b5:32:fc:91:6a:72:d6:19:8e:e2:84:47:80:
         26:36:1b:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 21:16:33 2025 by rpki-client