Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9112320/28C6CCE6A9F011EE9315ED6CC4F9AE02/7EE26732EB2411EEBDA7715FC4F9AE02.roa
File:                     7EE26732EB2411EEBDA7715FC4F9AE02.roa (raw, json)
Hash identifier:          Kj01wL6hxzZNZ8dZAbJKpipOYkN2WV1ZM26ZUUjGKvU=
Subject key identifier:   E0:27:70:E1:7D:39:0C:ED:BA:3A:4A:72:3F:53:43:6D:BF:3F:21:8F
Certificate issuer:       /CN=A9112320/serialNumber=77EC48692D042702978DCD0B68E940B8D7723E52
Certificate serial:       0117
Authority key identifier: 77:EC:48:69:2D:04:27:02:97:8D:CD:0B:68:E9:40:B8:D7:72:3E:52
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/d-xIaS0EJwKXjc0LaOlAuNdyPlI.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9112320/28C6CCE6A9F011EE9315ED6CC4F9AE02/7EE26732EB2411EEBDA7715FC4F9AE02.roa
Signing time:             Sat 14 Jun 2025 23:23:19 +0000
ROA not before:           Sat 14 Jun 2025 23:23:19 +0000
ROA not after:            Mon 31 Aug 2026 00:00:00 +0000
asID:                     140344
IP address blocks:        157.10.54.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9112320/28C6CCE6A9F011EE9315ED6CC4F9AE02/d-xIaS0EJwKXjc0LaOlAuNdyPlI.crl
                          rsync://rpki.apnic.net/member_repository/A9112320/28C6CCE6A9F011EE9315ED6CC4F9AE02/d-xIaS0EJwKXjc0LaOlAuNdyPlI.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/d-xIaS0EJwKXjc0LaOlAuNdyPlI.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 25 Jun 2025 23:20:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 279 (0x117)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9112320, serialNumber=77EC48692D042702978DCD0B68E940B8D7723E52
        Validity
            Not Before: Jun 14 23:23:19 2025 GMT
            Not After : Aug 31 00:00:00 2026 GMT
        Subject: CN=684e0466-943f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:b6:fd:07:8e:c0:89:4c:98:70:fd:2b:e1:fc:
                    4b:bf:6a:70:c2:51:b3:45:52:55:44:01:d4:1f:9d:
                    fb:a3:da:0b:2a:55:4f:64:16:47:da:5d:d5:67:a3:
                    08:b7:e4:9a:13:b1:43:54:04:eb:fc:b3:86:71:e8:
                    5b:39:14:75:4a:99:61:4c:34:36:71:f5:03:22:9a:
                    5f:98:42:43:cc:0c:aa:9b:32:ac:3c:c6:9c:ca:a9:
                    22:bb:37:18:41:c9:03:63:6f:46:d1:8e:f8:a4:49:
                    b2:bd:ab:fe:f0:39:0e:bc:1a:05:51:38:5e:2c:4a:
                    73:8f:b8:d9:a1:2b:b3:55:a0:5a:59:4c:20:d9:0d:
                    cd:88:a1:f5:9f:cf:4b:c8:45:2f:ea:e3:e1:da:2d:
                    dd:34:9f:76:9a:1e:67:88:1a:24:20:9a:54:96:e8:
                    f4:1a:ac:82:98:bf:3b:3b:99:35:c3:90:df:0e:d8:
                    eb:0b:c8:94:f0:13:df:f8:eb:af:4b:6c:de:07:30:
                    c1:db:a3:a6:c7:c2:ed:a3:aa:0a:ea:82:46:f3:95:
                    7f:ab:76:43:cc:d8:d7:7a:cc:63:62:e0:30:40:cc:
                    4c:d0:ca:91:59:9f:9b:79:fb:74:51:bd:4e:11:5b:
                    96:70:bc:6f:00:4d:70:a1:28:64:6a:a0:79:20:00:
                    ab:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E0:27:70:E1:7D:39:0C:ED:BA:3A:4A:72:3F:53:43:6D:BF:3F:21:8F
            X509v3 Authority Key Identifier:
                keyid:77:EC:48:69:2D:04:27:02:97:8D:CD:0B:68:E9:40:B8:D7:72:3E:52

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9112320/28C6CCE6A9F011EE9315ED6CC4F9AE02/d-xIaS0EJwKXjc0LaOlAuNdyPlI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/d-xIaS0EJwKXjc0LaOlAuNdyPlI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9112320/28C6CCE6A9F011EE9315ED6CC4F9AE02/7EE26732EB2411EEBDA7715FC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  157.10.54.0/23

    Signature Algorithm: sha256WithRSAEncryption
         5b:bf:64:75:f4:65:21:05:3e:df:59:c3:12:2d:c4:ee:28:1e:
         d4:d9:0c:a3:93:18:72:b7:ce:00:3c:eb:c6:04:6b:c6:b1:6c:
         98:f5:a0:4c:9a:62:c7:48:3b:ad:37:93:ac:66:a2:34:f4:8c:
         e3:ba:bd:03:41:8d:45:96:7b:2a:fb:3d:e3:c2:46:73:e2:bb:
         6c:73:7e:73:27:e1:7b:6b:9d:d6:f9:3e:e9:58:cf:ad:41:cd:
         4d:14:aa:3c:21:25:71:e3:a6:77:2c:92:c1:bd:90:77:f0:4d:
         69:9a:e9:be:b8:0f:32:7c:4f:93:4b:79:74:77:54:d9:ff:d9:
         39:1d:f7:cd:37:dc:76:a4:bd:cc:ad:08:d5:94:b0:82:a9:c0:
         5b:13:3e:30:bb:03:d2:9d:9f:ee:05:14:79:6b:d6:13:03:74:
         a7:dd:6b:d1:4b:08:8c:46:2a:3b:4e:3e:0f:ce:05:64:2c:17:
         3e:4e:b5:f9:49:2f:2d:d1:0b:ee:60:f0:ba:a5:f4:cc:d9:b7:
         07:68:cb:62:6d:5a:48:6c:ff:83:40:b6:65:8e:78:6c:d9:13:
         7c:b6:e0:32:3c:f1:ad:67:2b:42:70:c3:4d:ff:83:82:c1:94:
         4f:4c:6c:82:fe:3a:12:91:78:ae:bd:a9:3b:36:85:85:e2:d5:
         fe:35:97:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 20 07:14:34 2025 by rpki-client