Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9180127/16AF1D205B7F11EEBE320E35C4F9AE02/80A66D902A6411F09ACA5C61C4F9AE02.roa
File:                     80A66D902A6411F09ACA5C61C4F9AE02.roa (raw, json)
Hash identifier:          VkiCTpbHNMdBRPiF1oBiRg7dOTIy/YEbnzSkLjMcvbc=
Subject key identifier:   F6:38:9D:B0:9F:EF:A0:39:A5:5A:35:5A:80:E6:D7:8C:F5:9F:78:83
Certificate issuer:       /CN=A9180127/serialNumber=3215C5516AFB54D8E612D1EC3D5182D321E53171
Certificate serial:       013B
Authority key identifier: 32:15:C5:51:6A:FB:54:D8:E6:12:D1:EC:3D:51:82:D3:21:E5:31:71
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MhXFUWr7VNjmEtHsPVGC0yHlMXE.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9180127/16AF1D205B7F11EEBE320E35C4F9AE02/80A66D902A6411F09ACA5C61C4F9AE02.roa
Signing time:             Mon 19 May 2025 04:04:48 +0000
ROA not before:           Mon 19 May 2025 04:04:48 +0000
ROA not after:            Thu 30 Jul 2026 00:00:00 +0000
asID:                     24453
IP address blocks:        202.151.40.0/21 maxlen: 21
                          2403:4c00::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9180127/16AF1D205B7F11EEBE320E35C4F9AE02/MhXFUWr7VNjmEtHsPVGC0yHlMXE.crl
                          rsync://rpki.apnic.net/member_repository/A9180127/16AF1D205B7F11EEBE320E35C4F9AE02/MhXFUWr7VNjmEtHsPVGC0yHlMXE.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MhXFUWr7VNjmEtHsPVGC0yHlMXE.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 12 Jun 2025 03:44:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 315 (0x13b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9180127, serialNumber=3215C5516AFB54D8E612D1EC3D5182D321E53171
        Validity
            Not Before: May 19 04:04:48 2025 GMT
            Not After : Jul 30 00:00:00 2026 GMT
        Subject: CN=682aaddf-dbb7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:6b:4f:1b:0d:0a:eb:98:d8:84:9c:0c:e3:ee:
                    60:94:ef:73:f0:42:4a:76:f2:f1:20:87:06:d4:a4:
                    9a:89:ac:4a:1d:5d:ab:64:de:d5:a9:98:2c:a4:5f:
                    92:ec:d0:94:0f:2e:e8:a1:79:5a:5e:fb:58:91:25:
                    e0:ad:ab:71:81:25:9a:24:d9:cf:8a:81:b6:48:bb:
                    84:0a:e1:94:f6:c6:9e:5d:29:8b:7b:7c:8e:1d:e6:
                    38:6b:b6:57:94:6b:4d:17:a6:7c:83:45:e0:54:23:
                    49:c7:5d:29:da:d7:cb:2a:44:cf:2b:2e:68:c5:c5:
                    9f:f9:60:89:1b:7c:d7:62:e3:cd:b7:5c:8e:52:12:
                    74:e8:e7:2c:7d:42:52:18:ea:1e:e1:5f:bc:c7:b2:
                    24:c6:6b:44:9e:ca:4a:2c:7a:9b:66:76:71:e2:bb:
                    85:5b:51:aa:30:34:f0:2c:99:61:6d:95:4e:4b:da:
                    6a:0d:35:1c:16:f4:4b:b5:48:63:b2:55:26:e1:00:
                    9e:35:ab:d4:bd:f0:17:4b:3f:7d:95:41:a8:6d:80:
                    b5:c4:7a:d2:63:ef:a4:5e:5a:25:72:41:8d:89:cd:
                    35:31:3a:17:e8:d4:13:db:16:93:41:72:20:90:9b:
                    96:f5:6d:ab:d7:c7:3a:a9:b5:d7:37:1a:5e:5b:26:
                    dd:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F6:38:9D:B0:9F:EF:A0:39:A5:5A:35:5A:80:E6:D7:8C:F5:9F:78:83
            X509v3 Authority Key Identifier:
                keyid:32:15:C5:51:6A:FB:54:D8:E6:12:D1:EC:3D:51:82:D3:21:E5:31:71

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9180127/16AF1D205B7F11EEBE320E35C4F9AE02/MhXFUWr7VNjmEtHsPVGC0yHlMXE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MhXFUWr7VNjmEtHsPVGC0yHlMXE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9180127/16AF1D205B7F11EEBE320E35C4F9AE02/80A66D902A6411F09ACA5C61C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  202.151.40.0/21
                IPv6:
                  2403:4c00::/32

    Signature Algorithm: sha256WithRSAEncryption
         49:73:fb:59:42:1b:8a:0a:97:41:46:4a:35:e7:e7:42:9c:6c:
         7c:8a:32:55:ee:6f:3b:cf:31:a1:6a:54:bc:25:90:09:73:00:
         1b:db:77:a1:1c:ed:71:ae:f2:4f:dd:70:f9:8e:ec:de:7c:f8:
         e6:0b:e1:80:0c:fb:c1:19:a6:f4:ad:87:de:d4:ef:83:4a:34:
         e0:74:78:a9:69:b9:c4:12:1a:f4:7f:fe:b3:74:92:07:eb:f5:
         5c:e5:e4:72:5a:8e:54:d3:50:a7:97:63:3d:c1:94:60:f6:48:
         14:47:c4:3c:81:ca:6c:c0:21:33:26:27:75:5d:e9:82:d2:42:
         87:3f:d8:9c:92:83:2b:32:a2:a1:86:47:f3:e2:e4:9b:ac:5c:
         7a:24:7c:f5:7c:a1:2d:54:9e:ee:ea:77:c9:c1:15:1a:7b:c6:
         34:ff:65:d4:20:d0:81:66:f7:1d:61:28:5f:2e:8a:11:c7:55:
         6e:99:7c:ef:03:f3:eb:61:9b:9f:c5:f9:19:cf:da:25:62:ec:
         d8:5d:3a:7e:24:c8:5a:76:b0:41:2a:47:60:91:68:b5:6d:72:
         2c:16:73:f1:fe:f0:99:03:d9:95:b9:64:78:aa:74:5e:09:39:
         dc:a0:92:1e:70:bc:44:a7:8a:a1:20:de:ff:94:ed:7e:e7:13:
         ef:be:46:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 5 19:50:06 2025 by rpki-client