Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A917530D/DD7E091CB64B11EE91463760C4F9AE02/762CACD0B04311EF95390327C4F9AE02.roa
File:                     762CACD0B04311EF95390327C4F9AE02.roa (raw, json)
Hash identifier:          7lH097TnqT2Frr0JL7F0/A/6TnFN0hBEwwqzvbNC3Tc=
Subject key identifier:   34:0C:8E:C5:F7:2E:29:FB:0E:B2:7C:C8:8E:5F:12:90:BB:A7:82:B6
Certificate issuer:       /CN=A917530D/serialNumber=B3992F0D49BAF6A36FDA658E5B459469521E5B44
Certificate serial:       DF
Authority key identifier: B3:99:2F:0D:49:BA:F6:A3:6F:DA:65:8E:5B:45:94:69:52:1E:5B:44
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/s5kvDUm69qNv2mWOW0WUaVIeW0Q.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A917530D/DD7E091CB64B11EE91463760C4F9AE02/762CACD0B04311EF95390327C4F9AE02.roa
Signing time:             Mon 03 Feb 2025 04:58:39 +0000
ROA not before:           Mon 03 Feb 2025 04:58:39 +0000
ROA not after:            Fri 01 May 2026 00:00:00 +0000
asID:                     135660
IP address blocks:        157.10.226.0/23 maxlen: 23
                          157.10.226.0/24 maxlen: 24
                          157.10.227.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A917530D/DD7E091CB64B11EE91463760C4F9AE02/s5kvDUm69qNv2mWOW0WUaVIeW0Q.crl
                          rsync://rpki.apnic.net/member_repository/A917530D/DD7E091CB64B11EE91463760C4F9AE02/s5kvDUm69qNv2mWOW0WUaVIeW0Q.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/s5kvDUm69qNv2mWOW0WUaVIeW0Q.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 21 Feb 2025 05:15:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 223 (0xdf)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A917530D
        Validity
            Not Before: Feb  3 04:58:39 2025 GMT
            Not After : May  1 00:00:00 2026 GMT
        Subject: CN=67a04cff-83d9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:40:4d:e2:fa:07:1f:67:a1:23:69:9b:28:1b:
                    c4:98:2d:b0:f9:6c:27:f7:9c:f7:0e:9e:ea:86:83:
                    1c:e9:04:65:40:be:8e:ea:30:53:c1:f0:33:79:18:
                    82:69:fa:5f:c8:e6:92:91:c8:5c:f4:5f:df:ef:3e:
                    74:f1:ee:29:e9:fa:b2:fa:b5:73:9e:47:d2:1b:61:
                    f9:1b:02:f6:61:69:f0:fe:99:6b:3a:cf:c6:b8:43:
                    63:90:f1:aa:54:85:44:fd:c7:8c:c6:e0:3a:a8:a3:
                    db:fd:5f:70:c9:63:04:37:6f:56:25:40:c8:11:b7:
                    e8:11:f1:62:76:32:37:08:ec:68:b9:24:5d:46:26:
                    a3:43:f2:f4:ab:94:5a:12:27:2b:f9:01:f1:ea:ea:
                    2a:bf:38:46:de:66:55:93:ed:d3:82:42:6b:b2:2e:
                    aa:de:1f:60:64:bf:ee:04:18:cd:82:c2:c7:bb:6f:
                    a1:77:f5:c0:1e:7e:af:e3:b6:de:e7:76:2c:96:29:
                    55:34:d7:bb:15:56:50:19:16:7e:41:1c:e2:17:e3:
                    de:1f:4f:20:ff:cf:a4:6c:c7:f7:a9:ce:cf:2d:ae:
                    18:46:02:01:7f:47:8a:c4:8a:04:5b:4f:ee:56:1f:
                    a0:89:f2:7b:64:e4:9d:72:46:92:ba:06:8c:1d:8d:
                    f5:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                34:0C:8E:C5:F7:2E:29:FB:0E:B2:7C:C8:8E:5F:12:90:BB:A7:82:B6
            X509v3 Authority Key Identifier:
                keyid:B3:99:2F:0D:49:BA:F6:A3:6F:DA:65:8E:5B:45:94:69:52:1E:5B:44

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A917530D/DD7E091CB64B11EE91463760C4F9AE02/s5kvDUm69qNv2mWOW0WUaVIeW0Q.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/s5kvDUm69qNv2mWOW0WUaVIeW0Q.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917530D/DD7E091CB64B11EE91463760C4F9AE02/762CACD0B04311EF95390327C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  157.10.226.0/23

    Signature Algorithm: sha256WithRSAEncryption
         a8:a5:8f:da:f9:55:bc:96:db:66:8f:3a:de:91:4f:fe:ea:39:
         2a:b5:ca:55:11:5d:d2:de:1c:64:3c:db:89:b5:01:a1:94:9f:
         16:11:d5:bf:f5:38:74:6d:91:c1:31:e5:07:4a:01:e8:83:41:
         b3:fb:68:48:29:17:e0:3a:c9:e6:4f:28:4e:5b:68:c3:a3:b8:
         b7:46:96:f1:58:61:08:98:87:e2:73:7c:5e:40:95:5c:3b:9e:
         5a:ab:f0:61:e1:7a:3f:c1:e3:b8:cc:5e:ec:25:9b:7b:1e:af:
         b5:4a:f7:57:44:86:32:32:27:6a:01:1b:80:07:f1:9e:53:40:
         52:de:69:d6:ec:8b:9b:1c:af:d9:90:24:c5:16:f5:ca:c7:43:
         27:b1:8e:66:75:3a:45:1c:d7:d6:e9:d3:aa:5c:ae:52:17:d7:
         0b:a9:16:bf:9c:b4:68:6f:11:5a:1d:47:0b:70:6d:bf:56:0b:
         2d:7b:2b:2d:1f:ec:13:72:00:af:dd:66:b2:29:8f:4b:09:21:
         91:55:49:a1:81:55:1a:81:4f:0e:1b:02:e8:00:61:71:c5:f2:
         9a:39:94:81:b1:aa:f6:7c:e1:4e:d2:96:b5:9a:ac:46:c8:f4:
         1c:e0:4a:a8:7e:14:2f:ad:fa:6f:bd:43:d2:c0:9e:08:38:c1:
         62:af:61:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 20:42:17 2025 by rpki-client