Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/B7BC5FF86E8D11EFAA4A7516C4F9AE02.roa
File:                     B7BC5FF86E8D11EFAA4A7516C4F9AE02.roa (raw, json)
Hash identifier:          f4BVrRQRs+WXks4pVBG3ua8X/3tg5N1vZIr9ZrzoQe8=
Subject key identifier:   C4:09:21:24:45:A5:AC:85:3C:D1:EE:4E:FD:17:6B:73:2C:44:CE:14
Certificate issuer:       /CN=A918EDB2/serialNumber=A7AE474416B0E8AD3A89E86774A640FEBE6973F9
Certificate serial:       1D88
Authority key identifier: A7:AE:47:44:16:B0:E8:AD:3A:89:E8:67:74:A6:40:FE:BE:69:73:F9
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/p65HRBaw6K06iehndKZA_r5pc_k.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/B7BC5FF86E8D11EFAA4A7516C4F9AE02.roa
Signing time:             Thu 08 May 2025 15:53:10 +0000
ROA not before:           Thu 08 May 2025 15:53:10 +0000
ROA not after:            Wed 01 Jul 2026 00:00:00 +0000
asID:                     142469
IP address blocks:        160.30.242.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/p65HRBaw6K06iehndKZA_r5pc_k.crl
                          rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/p65HRBaw6K06iehndKZA_r5pc_k.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/p65HRBaw6K06iehndKZA_r5pc_k.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 10 Jun 2025 12:41:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 7560 (0x1d88)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918EDB2, serialNumber=A7AE474416B0E8AD3A89E86774A640FEBE6973F9
        Validity
            Not Before: May  8 15:53:10 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=681cd366-1153
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:68:e2:2b:4d:88:44:b8:53:fa:ee:b2:81:78:
                    21:69:9c:13:c8:7d:64:98:80:b3:e2:de:cf:58:c7:
                    3e:fb:aa:1a:a7:4c:ce:99:bc:34:b0:cd:3b:69:e4:
                    36:79:a5:0a:47:9d:fd:e9:e8:cf:3e:1d:3b:16:0e:
                    0f:e9:cd:59:d5:97:50:03:31:52:60:67:a8:c7:66:
                    76:42:39:47:90:16:56:40:fe:86:10:fe:d9:ec:79:
                    28:0b:e2:e4:d1:2f:1b:6a:a9:56:5d:47:e3:f9:16:
                    d6:af:af:34:79:4d:79:14:b8:98:e0:df:7b:bc:cf:
                    53:65:40:8f:b1:fd:0b:c6:fa:dd:4e:e9:ba:24:fe:
                    cf:4d:16:71:00:6e:18:47:c2:c0:ed:e1:41:ae:63:
                    d5:d9:e1:c5:42:5f:2a:ff:ad:f8:35:6f:3b:32:59:
                    8f:c0:bd:6e:5e:0e:d9:05:94:36:f3:88:0c:8e:22:
                    bd:d2:55:37:8d:ef:1e:2f:88:cb:4c:c0:6c:15:b7:
                    ad:b1:cf:26:17:a0:49:0a:dd:f9:20:13:06:07:c1:
                    0e:a4:ea:f5:72:1e:ec:31:0c:0b:6e:15:c7:90:9c:
                    bd:d4:9c:72:28:c3:e7:6d:5e:fe:5c:48:a8:50:b5:
                    b7:89:1f:ee:0b:cc:c0:b9:2f:0f:62:aa:d9:7f:fc:
                    8f:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C4:09:21:24:45:A5:AC:85:3C:D1:EE:4E:FD:17:6B:73:2C:44:CE:14
            X509v3 Authority Key Identifier:
                keyid:A7:AE:47:44:16:B0:E8:AD:3A:89:E8:67:74:A6:40:FE:BE:69:73:F9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/p65HRBaw6K06iehndKZA_r5pc_k.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/p65HRBaw6K06iehndKZA_r5pc_k.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/B7BC5FF86E8D11EFAA4A7516C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  160.30.242.0/24

    Signature Algorithm: sha256WithRSAEncryption
         9c:df:14:ba:cc:a9:97:4b:0c:54:84:71:92:23:3a:85:4d:82:
         31:6a:2c:d1:e6:bc:df:0c:93:0c:6a:cf:37:4b:bb:85:c2:b2:
         36:7f:02:b5:c2:41:31:85:ac:a5:f9:d6:fa:53:20:a6:05:bf:
         b0:8f:59:ee:97:9e:59:62:10:5c:09:15:1a:a7:4f:45:68:b5:
         3a:f8:93:08:9b:8c:9e:bc:fd:41:22:4b:67:ff:26:38:50:de:
         34:83:22:a3:ee:57:61:96:05:77:fe:cc:5e:5a:03:ea:a6:3f:
         01:2a:f2:3f:89:70:a7:5e:fe:a8:e6:7c:79:8e:4f:fc:b3:35:
         ac:2b:3c:70:0b:e0:bd:af:18:cf:73:b9:70:5e:35:e7:5b:a4:
         5b:7b:1b:af:6e:f7:4e:23:6d:1c:ec:2d:13:ea:b0:a9:18:ac:
         62:58:3c:b4:9d:52:46:39:2b:82:92:c9:2f:66:65:49:12:68:
         36:2c:c0:83:e6:6d:73:39:b0:c1:32:74:a7:82:84:fc:1c:fd:
         06:ed:78:75:75:26:ad:b8:97:3c:02:be:1f:43:97:eb:25:ca:
         94:b3:16:16:51:57:2c:82:0a:b6:cd:ac:c6:9d:fa:df:db:dd:
         fd:c6:df:33:f3:d4:2d:3d:c2:3c:47:85:20:e2:b7:86:c2:3f:
         bc:80:78:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 4 12:02:29 2025 by rpki-client