Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91B758E/DDEC8124D53D11EE8F1E8A85C4F9AE02/C63D0814097B11F0B1329480C4F9AE02.roa
File:                     C63D0814097B11F0B1329480C4F9AE02.roa (raw, json)
Hash identifier:          BxZpcifR3l7qhnt+56VpPmZ3hTQmgPYYxX/h3b9rorE=
Subject key identifier:   5B:85:DE:9D:BD:51:D9:4E:7F:9E:81:40:A7:7F:7B:6B:62:15:E6:FC
Certificate issuer:       /CN=A91B758E/serialNumber=D3BC842802DAD22D5C30C28265F7D108BD478E70
Certificate serial:       EE
Authority key identifier: D3:BC:84:28:02:DA:D2:2D:5C:30:C2:82:65:F7:D1:08:BD:47:8E:70
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/07yEKALa0i1cMMKCZffRCL1HjnA.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91B758E/DDEC8124D53D11EE8F1E8A85C4F9AE02/C63D0814097B11F0B1329480C4F9AE02.roa
Signing time:             Tue 13 May 2025 04:56:15 +0000
ROA not before:           Tue 13 May 2025 04:56:15 +0000
ROA not after:            Thu 28 May 2026 00:00:00 +0000
asID:                     137453
IP address blocks:        157.15.228.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91B758E/DDEC8124D53D11EE8F1E8A85C4F9AE02/07yEKALa0i1cMMKCZffRCL1HjnA.crl
                          rsync://rpki.apnic.net/member_repository/A91B758E/DDEC8124D53D11EE8F1E8A85C4F9AE02/07yEKALa0i1cMMKCZffRCL1HjnA.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/07yEKALa0i1cMMKCZffRCL1HjnA.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 12 Jun 2025 04:42:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 238 (0xee)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91B758E, serialNumber=D3BC842802DAD22D5C30C28265F7D108BD478E70
        Validity
            Not Before: May 13 04:56:15 2025 GMT
            Not After : May 28 00:00:00 2026 GMT
        Subject: CN=6822d0ef-7d24
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e2:71:f7:99:06:03:ec:7b:87:bb:03:47:e9:1a:
                    fd:27:a2:e3:7e:f2:43:6c:de:50:45:be:59:7b:cc:
                    71:b3:ff:78:1b:b6:17:69:0d:04:84:cc:46:90:be:
                    24:0d:cb:f0:bb:ca:04:01:36:a1:a1:d2:b5:a5:e5:
                    5d:53:4a:15:27:72:aa:3d:a0:7a:2c:fe:b1:5d:26:
                    8c:88:b2:6b:22:81:8b:5c:5b:35:1c:e6:0c:d9:31:
                    a5:a9:98:19:73:87:61:b9:30:7e:cb:35:a0:97:af:
                    2b:36:e1:e0:8c:e3:c6:ff:cf:2b:69:ca:f6:31:01:
                    41:e6:6d:c1:4e:52:41:43:ec:c1:47:c6:ef:af:90:
                    46:41:43:8a:a5:d3:64:c1:91:10:a0:3c:7a:f9:04:
                    4c:f4:af:dc:eb:28:ce:3e:39:9b:b2:04:00:21:3f:
                    68:67:93:ae:87:ef:85:35:af:f3:39:97:5a:9b:c0:
                    aa:3e:19:76:01:71:af:48:56:b5:86:a5:5f:85:19:
                    82:56:7f:15:f1:76:77:e8:35:24:1f:4b:44:b3:f1:
                    b2:e6:70:2b:6e:51:a1:7d:c6:05:b9:55:ae:4b:0e:
                    1d:88:57:1e:9b:cf:b9:20:b9:37:23:36:07:59:0a:
                    e9:d5:cb:d6:24:b6:f2:14:f7:24:4b:c3:e2:fc:08:
                    3f:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5B:85:DE:9D:BD:51:D9:4E:7F:9E:81:40:A7:7F:7B:6B:62:15:E6:FC
            X509v3 Authority Key Identifier:
                keyid:D3:BC:84:28:02:DA:D2:2D:5C:30:C2:82:65:F7:D1:08:BD:47:8E:70

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91B758E/DDEC8124D53D11EE8F1E8A85C4F9AE02/07yEKALa0i1cMMKCZffRCL1HjnA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/07yEKALa0i1cMMKCZffRCL1HjnA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B758E/DDEC8124D53D11EE8F1E8A85C4F9AE02/C63D0814097B11F0B1329480C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  157.15.228.0/24

    Signature Algorithm: sha256WithRSAEncryption
         bb:1c:9a:0a:b7:2e:96:28:83:b8:e5:a5:bf:d3:a3:b4:40:00:
         3f:3a:4f:d2:47:e2:6c:1b:c4:1d:9c:42:2b:da:9f:d1:2b:98:
         bb:bd:c5:15:79:e5:bc:aa:a7:f8:fc:a6:d4:43:fd:c2:9a:39:
         43:af:70:18:c1:41:9c:b9:89:06:c6:ce:29:07:42:be:2c:63:
         10:27:6e:a7:ee:fb:d9:6b:8e:20:2c:d8:f7:6c:86:46:fc:e5:
         77:14:97:da:8c:d1:31:91:eb:4e:27:a0:45:fb:5a:08:bd:a0:
         dd:71:71:4e:5e:07:ba:fd:29:37:4b:b1:b0:0b:bf:68:fb:8a:
         1b:5b:5b:d4:1a:2b:41:79:c1:97:ec:04:15:22:9a:d5:93:06:
         ea:2f:bb:be:35:f1:67:96:db:07:f3:8d:e1:f5:7e:be:23:a5:
         00:85:60:90:a7:4a:40:03:31:e3:77:9f:6c:16:c0:c5:8a:24:
         e9:70:ad:40:5f:39:a8:f5:c1:3e:79:e4:38:56:7e:df:60:67:
         cd:28:c7:5e:6e:8f:6a:46:87:7a:29:96:e3:0a:c1:c1:0f:56:
         c9:a0:94:f7:cd:e2:31:b2:72:8f:20:be:09:34:2b:b8:35:8a:
         16:ba:3f:5d:78:b4:92:47:a1:ba:31:3d:ab:ef:d7:a9:ff:ec:
         90:91:37:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 5 19:13:17 2025 by rpki-client