Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A913DC32/7B750BFEFCFD11EFADB86115C4F9AE02/22E5730815AC11F0BA789D40C4F9AE02.roa
File:                     22E5730815AC11F0BA789D40C4F9AE02.roa (raw, json)
Hash identifier:          iWmeds3ikQddJ0zOLOMR2/nAx9kIXx/domN/vEqWgPM=
Subject key identifier:   6A:20:D5:A3:9F:1B:7A:CB:3B:9F:BA:4E:50:A9:97:74:9F:A8:39:9E
Certificate issuer:       /CN=A913DC32/serialNumber=7907242670A3B89D348D5A841DAC8D182EB6607E
Certificate serial:       18
Authority key identifier: 79:07:24:26:70:A3:B8:9D:34:8D:5A:84:1D:AC:8D:18:2E:B6:60:7E
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/eQckJnCjuJ00jVqEHayNGC62YH4.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A913DC32/7B750BFEFCFD11EFADB86115C4F9AE02/22E5730815AC11F0BA789D40C4F9AE02.roa
Signing time:             Thu 10 Apr 2025 01:35:51 +0000
ROA not before:           Thu 10 Apr 2025 01:35:51 +0000
ROA not after:            Fri 01 May 2026 00:00:00 +0000
asID:                     4848
IP address blocks:        152.103.0.0/16 maxlen: 16
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A913DC32/7B750BFEFCFD11EFADB86115C4F9AE02/eQckJnCjuJ00jVqEHayNGC62YH4.crl
                          rsync://rpki.apnic.net/member_repository/A913DC32/7B750BFEFCFD11EFADB86115C4F9AE02/eQckJnCjuJ00jVqEHayNGC62YH4.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/eQckJnCjuJ00jVqEHayNGC62YH4.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 02 May 2025 06:56:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 24 (0x18)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A913DC32, serialNumber=7907242670A3B89D348D5A841DAC8D182EB6607E
        Validity
            Not Before: Apr 10 01:35:51 2025 GMT
            Not After : May  1 00:00:00 2026 GMT
        Subject: CN=67f72077-6036
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:b1:71:15:81:36:4d:b8:81:17:b5:52:80:5e:
                    0f:4e:a6:dd:33:ef:6f:75:86:8f:12:5a:33:2d:78:
                    cc:a2:98:d4:cc:71:51:9d:a4:14:c5:10:5c:23:b2:
                    49:a1:a9:f4:64:24:81:a7:55:48:e6:11:56:3f:5b:
                    60:30:09:9c:8a:51:ef:e8:fe:b3:c3:25:cb:47:a0:
                    f7:f6:e5:14:87:d0:cf:d3:80:8b:c0:64:57:9e:94:
                    5a:5d:da:6c:e2:4a:1a:df:27:27:f3:d3:e4:78:66:
                    0b:f0:97:bc:af:e6:ff:c5:3c:d7:4b:ed:9e:91:73:
                    5a:ac:34:ae:9b:ee:39:dd:da:8e:02:6a:31:6f:68:
                    e8:66:f9:b7:75:97:11:b1:6e:91:af:0b:35:68:24:
                    c7:f6:ff:ae:d8:3b:11:c8:b0:40:72:70:66:0c:ae:
                    09:58:26:d0:96:9f:f0:16:38:d5:1d:e8:63:fc:8b:
                    4f:71:7d:24:95:05:f7:fa:b8:ee:65:52:31:67:41:
                    ee:cb:a4:58:05:cf:ea:41:e4:2a:b9:69:fa:2a:03:
                    90:05:32:67:e3:98:c9:7e:f3:0c:31:f4:12:95:e5:
                    11:13:e6:0e:1c:9f:c0:1a:90:a4:86:42:29:e5:a0:
                    2e:42:0d:61:27:dd:b8:b3:67:8b:03:92:5d:e2:e0:
                    20:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6A:20:D5:A3:9F:1B:7A:CB:3B:9F:BA:4E:50:A9:97:74:9F:A8:39:9E
            X509v3 Authority Key Identifier:
                keyid:79:07:24:26:70:A3:B8:9D:34:8D:5A:84:1D:AC:8D:18:2E:B6:60:7E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A913DC32/7B750BFEFCFD11EFADB86115C4F9AE02/eQckJnCjuJ00jVqEHayNGC62YH4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/eQckJnCjuJ00jVqEHayNGC62YH4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913DC32/7B750BFEFCFD11EFADB86115C4F9AE02/22E5730815AC11F0BA789D40C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  152.103.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         ce:21:97:5f:84:bf:aa:88:81:75:3e:4b:a8:84:75:bc:9d:1b:
         18:a8:78:09:bd:8c:c6:23:76:36:71:78:fa:aa:b3:2b:84:e4:
         31:35:1a:62:e1:65:45:22:40:8c:52:02:a7:79:70:54:ea:93:
         00:71:6b:5f:fc:f0:03:5c:23:95:d9:a2:9a:d5:4f:7c:54:d7:
         54:31:66:25:65:96:8d:da:71:ec:7b:81:5d:79:0f:b8:e0:c7:
         b6:30:d4:02:f2:91:78:45:3b:6a:c8:31:e6:97:fd:f8:f3:4b:
         3b:b4:c9:fb:c6:e0:57:16:4d:9f:3d:68:a6:d1:eb:7b:17:b4:
         ae:8e:a8:eb:e0:76:80:43:1c:bc:1d:38:13:56:75:83:9a:10:
         c7:7b:e3:99:82:15:eb:d4:d3:05:57:2a:c4:f8:25:17:3e:a5:
         f4:8a:0a:cc:34:88:0a:88:ad:09:e1:30:59:9e:31:ae:83:63:
         f8:79:30:ad:4f:a0:a8:36:1f:34:54:93:f4:89:29:22:3c:d4:
         88:e7:35:58:ab:04:5f:0b:0e:c0:c6:e7:0e:f3:9c:19:fe:30:
         6a:8d:88:a1:bc:28:59:61:dd:fc:d0:13:f9:3c:27:54:6d:51:
         92:06:17:ba:4e:d7:4b:86:be:cd:c1:64:c8:44:53:fb:65:0a:
         f7:c5:80:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 13:06:29 2025 by rpki-client