Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A917DFDA/AF2D50E6230011EF945DE382C4F9AE02/493F98CE230111EFB4355F5FC4F9AE02.roa
File:                     493F98CE230111EFB4355F5FC4F9AE02.roa (raw, json)
Hash identifier:          KwkklQiSakEeltaaQOJwnjAgXDHwV1KOPtVGyZJnp/Q=
Subject key identifier:   E6:72:A4:11:8A:2C:8C:F3:BB:06:7D:24:CE:58:64:28:16:3D:FF:04
Certificate issuer:       /CN=A917DFDA/serialNumber=22AFD4CDD9C4F4C383762B3E93EECF1AE6FF9D16
Certificate serial:       B8
Authority key identifier: 22:AF:D4:CD:D9:C4:F4:C3:83:76:2B:3E:93:EE:CF:1A:E6:FF:9D:16
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Iq_UzdnE9MODdis-k-7PGub_nRY.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A917DFDA/AF2D50E6230011EF945DE382C4F9AE02/493F98CE230111EFB4355F5FC4F9AE02.roa
Signing time:             Wed 21 May 2025 05:16:41 +0000
ROA not before:           Wed 21 May 2025 05:16:41 +0000
ROA not after:            Thu 30 Jul 2026 00:00:00 +0000
asID:                     152692
IP address blocks:        202.37.235.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A917DFDA/AF2D50E6230011EF945DE382C4F9AE02/Iq_UzdnE9MODdis-k-7PGub_nRY.crl
                          rsync://rpki.apnic.net/member_repository/A917DFDA/AF2D50E6230011EF945DE382C4F9AE02/Iq_UzdnE9MODdis-k-7PGub_nRY.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Iq_UzdnE9MODdis-k-7PGub_nRY.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 10 Jun 2025 05:40:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 184 (0xb8)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A917DFDA, serialNumber=22AFD4CDD9C4F4C383762B3E93EECF1AE6FF9D16
        Validity
            Not Before: May 21 05:16:41 2025 GMT
            Not After : Jul 30 00:00:00 2026 GMT
        Subject: CN=682d61b9-7bf1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:b5:2d:31:0c:b7:98:af:ef:0a:9a:f7:ee:4e:
                    78:5e:75:44:82:38:18:47:aa:72:26:2f:a8:46:c7:
                    2e:82:72:09:b2:c2:fe:8c:35:1b:e3:86:0b:cb:8e:
                    d6:b2:0e:c8:72:43:2e:ff:47:d5:37:39:f5:b0:e8:
                    b1:fa:14:84:f5:6d:3b:8f:7d:81:06:df:38:19:36:
                    00:d1:0c:79:7a:12:ac:38:b9:e4:b8:8c:ac:eb:c4:
                    9f:0e:db:85:16:fc:54:f1:9e:df:bf:8c:d0:10:5a:
                    14:9e:82:9e:ff:15:08:15:8a:9a:a3:9b:b5:4f:57:
                    a5:73:e9:d6:48:99:3e:02:85:d3:e5:43:24:00:87:
                    18:81:82:ec:3b:0d:0c:f3:a3:2c:7a:25:29:95:f4:
                    c5:74:5c:bf:eb:d6:fb:cd:6e:6a:99:c4:9e:0e:21:
                    f9:be:2f:1b:5f:8e:ba:2b:86:db:61:8b:cd:ce:1b:
                    5c:06:5a:7c:e5:28:23:c6:5f:6c:18:8b:be:7d:50:
                    22:ef:e7:81:45:f1:be:07:08:03:86:eb:3f:bb:b9:
                    cb:e0:ab:f8:9d:c1:91:f8:cf:2a:10:98:35:f3:d3:
                    e9:71:11:b9:00:69:a8:3b:02:ea:e3:11:0a:d8:61:
                    c9:25:9e:d6:d4:fa:20:04:fa:76:3f:ef:6b:76:fb:
                    46:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E6:72:A4:11:8A:2C:8C:F3:BB:06:7D:24:CE:58:64:28:16:3D:FF:04
            X509v3 Authority Key Identifier:
                keyid:22:AF:D4:CD:D9:C4:F4:C3:83:76:2B:3E:93:EE:CF:1A:E6:FF:9D:16

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A917DFDA/AF2D50E6230011EF945DE382C4F9AE02/Iq_UzdnE9MODdis-k-7PGub_nRY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Iq_UzdnE9MODdis-k-7PGub_nRY.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917DFDA/AF2D50E6230011EF945DE382C4F9AE02/493F98CE230111EFB4355F5FC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  202.37.235.0/24

    Signature Algorithm: sha256WithRSAEncryption
         7f:ef:f7:a1:12:94:2c:71:db:0c:93:26:d4:a6:bb:98:b2:15:
         d1:08:5f:12:e7:3a:08:92:6a:82:4d:bd:a7:63:d0:55:53:1f:
         18:37:54:55:17:0c:bc:34:42:f4:42:32:8e:71:98:fc:dc:7c:
         e6:b1:ef:c2:9e:c0:bc:dc:9f:39:68:12:b2:f9:3c:93:1e:0e:
         b6:b2:43:70:70:e7:86:ba:8e:81:44:2c:24:d1:2c:70:f6:d8:
         c3:e5:ce:5d:38:29:f9:df:41:00:c9:14:a7:d8:eb:5b:6e:8a:
         52:2c:8c:4e:19:72:70:a7:c1:ba:f0:37:ab:35:e1:d2:10:52:
         a8:88:b7:ea:f0:4d:a0:d4:1d:19:18:10:23:23:72:8c:47:55:
         e3:e5:34:07:50:51:9b:0a:1a:6a:e0:6b:51:73:58:e4:35:a6:
         6d:b9:ec:45:04:65:7c:08:2b:07:37:b7:74:52:76:c1:d5:d9:
         aa:ff:45:d8:8a:b8:f2:94:90:8c:91:f5:b7:38:ba:41:ae:1a:
         ba:1f:22:98:5f:4c:3e:21:5b:20:4a:4b:67:25:ca:be:d3:41:
         5e:30:2a:ca:b8:b6:7e:cb:86:74:6d:29:68:1b:78:47:c6:7e:
         59:a1:45:6b:0e:15:e5:61:13:ad:90:56:66:1a:07:ab:3c:90:
         d9:0d:f4:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 4 00:05:20 2025 by rpki-client