Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91705D7/96A36AA816D811EFBF901E5FC4F9AE02/4FEDDA6831C511F0996C265EC4F9AE02.roa
File:                     4FEDDA6831C511F0996C265EC4F9AE02.roa (raw, json)
Hash identifier:          olMs+rDjG9xf551jbGQPxWRwvhz93Jq7nLiMc5zAfD0=
Subject key identifier:   92:6F:5C:13:D3:C8:FB:70:79:19:3A:81:A4:6C:5C:36:AB:FA:FC:D3
Certificate issuer:       /CN=A91705D7/serialNumber=AA4405B1BFA96C9C69B029033EF481D8F58A77E5
Certificate serial:       CF
Authority key identifier: AA:44:05:B1:BF:A9:6C:9C:69:B0:29:03:3E:F4:81:D8:F5:8A:77:E5
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/qkQFsb-pbJxpsCkDPvSB2PWKd-U.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91705D7/96A36AA816D811EFBF901E5FC4F9AE02/4FEDDA6831C511F0996C265EC4F9AE02.roa
Signing time:             Thu 15 May 2025 19:46:37 +0000
ROA not before:           Thu 15 May 2025 19:46:37 +0000
ROA not after:            Sun 31 Aug 2025 00:00:00 +0000
asID:                     9825
IP address blocks:        160.20.116.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91705D7/96A36AA816D811EFBF901E5FC4F9AE02/qkQFsb-pbJxpsCkDPvSB2PWKd-U.crl
                          rsync://rpki.apnic.net/member_repository/A91705D7/96A36AA816D811EFBF901E5FC4F9AE02/qkQFsb-pbJxpsCkDPvSB2PWKd-U.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/qkQFsb-pbJxpsCkDPvSB2PWKd-U.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 12 Jun 2025 05:08:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 207 (0xcf)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91705D7, serialNumber=AA4405B1BFA96C9C69B029033EF481D8F58A77E5
        Validity
            Not Before: May 15 19:46:37 2025 GMT
            Not After : Aug 31 00:00:00 2025 GMT
        Subject: CN=6826449d-adda
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:7b:c9:f7:93:5c:3e:da:76:d7:e3:40:e1:30:
                    c6:7f:e0:21:98:2e:2b:f5:7c:97:9e:50:86:98:2e:
                    f3:2b:69:44:f2:c0:93:ef:a7:a8:0b:bf:3b:6b:43:
                    bc:8b:77:d2:d5:bc:cf:db:f1:a1:0d:2f:00:be:0e:
                    ba:11:0a:f4:1b:9f:36:97:13:4d:6f:39:e7:ec:28:
                    e9:52:32:b8:21:eb:51:ac:70:4a:fc:0d:45:82:76:
                    1b:36:8c:7d:38:c6:8c:14:c3:81:84:68:e8:aa:48:
                    79:e8:4c:68:9f:30:2c:db:a8:f8:a9:d6:c9:4c:1a:
                    9f:fb:ca:32:ea:83:22:f3:92:60:23:f3:fa:20:af:
                    53:be:2d:d3:e2:82:42:f6:be:b9:ab:c5:25:36:30:
                    ed:d1:3f:1e:2c:ba:40:ff:ae:5d:b9:98:9d:49:9b:
                    a4:b6:d7:f8:5e:14:ac:8e:91:b4:4a:39:e0:fd:1b:
                    7c:3d:9f:b5:30:14:c5:83:54:b5:6d:89:bd:25:00:
                    d7:0d:0d:7e:cd:57:6b:73:06:43:9b:63:e2:de:b3:
                    14:55:cd:8b:99:5d:0a:00:aa:44:fa:e3:a2:bf:a4:
                    bb:ec:d4:40:c5:8c:c8:9b:3e:e7:78:a1:d1:6c:c9:
                    98:97:27:aa:3f:74:cb:a1:77:a0:d0:19:43:10:13:
                    7c:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                92:6F:5C:13:D3:C8:FB:70:79:19:3A:81:A4:6C:5C:36:AB:FA:FC:D3
            X509v3 Authority Key Identifier:
                keyid:AA:44:05:B1:BF:A9:6C:9C:69:B0:29:03:3E:F4:81:D8:F5:8A:77:E5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91705D7/96A36AA816D811EFBF901E5FC4F9AE02/qkQFsb-pbJxpsCkDPvSB2PWKd-U.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/qkQFsb-pbJxpsCkDPvSB2PWKd-U.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91705D7/96A36AA816D811EFBF901E5FC4F9AE02/4FEDDA6831C511F0996C265EC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  160.20.116.0/24

    Signature Algorithm: sha256WithRSAEncryption
         02:f4:a4:99:87:50:b1:1d:64:17:de:31:63:ea:2b:2d:8d:89:
         87:d1:6a:6b:2a:58:75:9a:a7:96:6f:84:5e:2d:57:5f:a0:5b:
         2d:f5:e4:23:84:8d:2e:14:ea:f8:13:98:33:21:84:0d:24:11:
         21:cd:53:69:d5:23:f2:6a:6a:5e:8b:e0:40:58:a7:46:ec:7a:
         64:ad:a6:94:19:d8:5a:91:62:6f:a6:29:bc:ba:e9:ef:04:2d:
         e4:0f:d6:a8:6a:c3:90:21:bb:4d:54:0d:d1:02:8f:0b:a7:6e:
         e5:8c:8e:b6:00:89:6d:f8:83:33:05:90:2b:38:ca:52:30:1c:
         70:34:04:09:f7:62:38:b9:b7:63:54:ba:94:09:b7:b6:a7:3a:
         ae:61:c7:4d:e4:ec:46:4b:cb:82:c4:ad:3a:ea:84:6f:f0:d8:
         48:70:58:54:20:7d:f6:18:a0:29:b5:45:c1:b9:3d:fc:82:9c:
         62:4f:14:26:58:e6:98:e2:c3:0b:21:ab:76:e3:5b:65:fa:08:
         b3:f1:f3:e3:fb:f6:ef:9f:c1:98:a4:b2:92:6f:8e:36:fe:80:
         bc:b0:dd:53:a6:95:8f:0e:d8:44:f8:9a:21:50:b5:5e:b6:69:
         3d:e2:85:85:80:c9:eb:8b:d4:0a:58:47:dd:4e:ac:35:4b:8b:
         b9:c8:ae:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 5 19:15:03 2025 by rpki-client