Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9134B4A/E26499A22F8911EFA3D04A6BC4F9AE02/523AAEA40CB311F08E42662DC4F9AE02.roa
File:                     523AAEA40CB311F08E42662DC4F9AE02.roa (raw, json)
Hash identifier:          9DgRkue2IG6PlA9gaF0mjtWWRI/+DDmDgdzUY8V29tU=
Subject key identifier:   B1:24:CE:1E:92:A0:54:CB:A0:A6:D7:8B:47:C3:C0:0F:35:CB:F9:6E
Certificate issuer:       /CN=A9134B4A/serialNumber=3C3587DC3AF2E937ECDB65A83892759A41C8850B
Certificate serial:       9C
Authority key identifier: 3C:35:87:DC:3A:F2:E9:37:EC:DB:65:A8:38:92:75:9A:41:C8:85:0B
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/PDWH3Dry6Tfs22WoOJJ1mkHIhQs.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9134B4A/E26499A22F8911EFA3D04A6BC4F9AE02/523AAEA40CB311F08E42662DC4F9AE02.roa
Signing time:             Mon 31 Mar 2025 03:16:16 +0000
ROA not before:           Mon 31 Mar 2025 03:16:16 +0000
ROA not after:            Tue 30 Sep 2025 00:00:00 +0000
asID:                     63150
IP address blocks:        160.22.142.0/24 maxlen: 24
                          160.22.143.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9134B4A/E26499A22F8911EFA3D04A6BC4F9AE02/PDWH3Dry6Tfs22WoOJJ1mkHIhQs.crl
                          rsync://rpki.apnic.net/member_repository/A9134B4A/E26499A22F8911EFA3D04A6BC4F9AE02/PDWH3Dry6Tfs22WoOJJ1mkHIhQs.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/PDWH3Dry6Tfs22WoOJJ1mkHIhQs.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 02 May 2025 05:13:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 156 (0x9c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9134B4A, serialNumber=3C3587DC3AF2E937ECDB65A83892759A41C8850B
        Validity
            Not Before: Mar 31 03:16:16 2025 GMT
            Not After : Sep 30 00:00:00 2025 GMT
        Subject: CN=67ea0900-f8a8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:e4:71:81:a0:f1:64:ba:96:40:40:52:6e:42:
                    73:e2:57:4b:1a:a2:b7:22:45:bf:ae:ca:6b:dc:48:
                    55:98:9b:b0:e7:a1:c9:a7:6e:c2:40:d9:ba:d5:1e:
                    40:9d:9b:3c:4e:70:e5:28:2d:4a:aa:df:25:b5:1e:
                    bb:62:53:67:7d:91:f6:06:61:81:cb:95:e7:9f:b1:
                    36:7f:85:af:99:53:5a:ea:7b:15:aa:59:d0:38:4f:
                    f7:a7:6b:c9:e4:fe:26:ad:f2:73:17:25:61:83:ff:
                    ae:d8:4f:2b:fe:c5:8a:d9:8b:39:bb:e6:e5:50:11:
                    a7:1a:f9:46:b1:5c:47:c6:a3:99:22:78:a5:64:36:
                    b4:5c:50:af:74:db:8c:64:c3:17:c7:52:14:75:ee:
                    43:d2:a4:cf:49:1a:9f:d1:3d:52:e5:8a:9d:7d:d6:
                    c6:60:8f:80:59:7e:1f:74:41:a2:85:da:dc:8d:c0:
                    68:a7:20:26:99:00:f9:83:7b:1d:82:89:e1:5f:4f:
                    a3:78:90:08:b0:06:91:0d:22:8d:d9:64:81:76:ca:
                    69:0a:85:6b:5f:0e:3e:20:13:b7:35:6c:2a:a9:33:
                    dd:ea:8a:2e:06:b2:35:c1:9c:4c:01:6b:f0:1f:b8:
                    f4:49:dd:52:17:db:18:77:0b:1b:18:db:a0:69:dd:
                    af:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B1:24:CE:1E:92:A0:54:CB:A0:A6:D7:8B:47:C3:C0:0F:35:CB:F9:6E
            X509v3 Authority Key Identifier:
                keyid:3C:35:87:DC:3A:F2:E9:37:EC:DB:65:A8:38:92:75:9A:41:C8:85:0B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9134B4A/E26499A22F8911EFA3D04A6BC4F9AE02/PDWH3Dry6Tfs22WoOJJ1mkHIhQs.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/PDWH3Dry6Tfs22WoOJJ1mkHIhQs.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9134B4A/E26499A22F8911EFA3D04A6BC4F9AE02/523AAEA40CB311F08E42662DC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  160.22.142.0/23

    Signature Algorithm: sha256WithRSAEncryption
         8a:43:62:a8:81:64:54:b1:8c:c4:5b:a5:15:d0:f0:c1:d2:df:
         ae:40:f2:fc:e3:1f:47:cd:62:cb:10:24:50:2b:10:b3:a4:f3:
         14:7b:2c:4d:4b:7c:2c:ab:78:21:65:4b:12:de:b1:ae:d5:a4:
         b4:df:6b:36:27:45:97:df:94:63:0e:17:6f:f0:c0:91:50:65:
         f3:87:f8:58:68:35:46:89:64:d2:a4:b7:fe:86:4f:e2:12:c6:
         12:fa:3c:13:9b:24:36:e3:30:44:35:b5:43:fc:f2:87:fa:e4:
         f5:97:64:d3:e0:c0:db:cb:cc:45:ee:78:5f:31:de:a2:1f:32:
         b3:21:05:71:f2:3d:f8:22:1d:ed:81:13:fd:53:f1:f6:d1:29:
         aa:22:c9:d8:7b:97:2f:5b:5e:9f:55:8e:59:cb:8e:76:43:2f:
         26:5e:91:0c:f8:ed:b1:f6:60:9d:f9:27:2b:1f:a6:7a:93:5e:
         f1:90:97:1b:e7:68:0e:9d:73:6e:ff:22:7d:41:b9:a7:71:6f:
         c2:08:5a:27:c4:3b:c5:8c:94:45:4a:6f:30:b9:17:80:e2:db:
         4c:cb:fa:24:81:8a:c0:24:e0:1a:36:f6:59:60:78:50:53:e3:
         cd:a7:93:dc:f7:f6:43:af:ed:a5:01:86:c8:80:e6:65:c8:ac:
         0d:ea:7b:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 15:07:32 2025 by rpki-client