Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A915370F/7346E8A2604911E2A307578D2979BB20/22C2A76E854811EFA776AC73C4F9AE02.roa
File:                     22C2A76E854811EFA776AC73C4F9AE02.roa (raw, json)
Hash identifier:          sSX7DNQqfge4ejL0oQv0Vd+5TBaBgIDn0NKDxugYUZY=
Subject key identifier:   C2:6A:E8:0E:CF:F6:36:29:22:B9:B1:BD:87:CF:F5:4E:A7:66:B8:B1
Certificate issuer:       /CN=A915370F/serialNumber=BB5B8156B037E5D22263EAC7F6A11C052FDF633F
Certificate serial:       348B
Authority key identifier: BB:5B:81:56:B0:37:E5:D2:22:63:EA:C7:F6:A1:1C:05:2F:DF:63:3F
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/u1uBVrA35dIiY-rH9qEcBS_fYz8.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A915370F/7346E8A2604911E2A307578D2979BB20/22C2A76E854811EFA776AC73C4F9AE02.roa
Signing time:             Thu 20 Mar 2025 15:21:07 +0000
ROA not before:           Thu 20 Mar 2025 15:21:07 +0000
ROA not after:            Thu 28 May 2026 00:00:00 +0000
asID:                     174
IP address blocks:        122.8.56.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A915370F/7346E8A2604911E2A307578D2979BB20/u1uBVrA35dIiY-rH9qEcBS_fYz8.crl
                          rsync://rpki.apnic.net/member_repository/A915370F/7346E8A2604911E2A307578D2979BB20/u1uBVrA35dIiY-rH9qEcBS_fYz8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/u1uBVrA35dIiY-rH9qEcBS_fYz8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 01 May 2025 15:21:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 13451 (0x348b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A915370F, serialNumber=BB5B8156B037E5D22263EAC7F6A11C052FDF633F
        Validity
            Not Before: Mar 20 15:21:07 2025 GMT
            Not After : May 28 00:00:00 2026 GMT
        Subject: CN=67dc3263-57db
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:0d:ad:ea:02:fa:86:ce:48:0b:44:dd:ce:48:
                    5b:7e:15:85:f1:aa:a8:fc:ce:41:21:5e:8a:e1:cd:
                    d7:ec:4f:0d:92:23:7c:bb:8f:c7:ce:6c:40:f5:53:
                    4a:3c:4b:e2:aa:ed:d9:43:12:3d:a7:b0:4b:c9:76:
                    a4:73:69:ee:8f:52:d2:5f:3a:b0:6d:12:b5:54:90:
                    3e:68:25:c0:73:f8:85:4b:e6:40:b7:8a:20:44:82:
                    2b:e1:9a:86:37:3d:a5:47:62:ab:65:f9:24:91:a3:
                    c9:d1:7d:a7:14:f4:07:6c:61:e5:fc:71:d9:8b:b4:
                    77:4c:72:96:97:52:3b:bc:e6:51:df:fb:79:86:71:
                    4d:9f:f6:f6:aa:a6:5f:e1:a6:0a:98:34:e8:98:45:
                    02:f3:b1:d3:4f:06:1d:b8:0c:12:19:8f:94:dc:89:
                    47:9c:94:e2:ba:17:62:12:ee:de:ea:93:c6:8a:f4:
                    66:ef:b9:a7:40:a3:52:8d:a3:57:6d:01:61:d4:2d:
                    4a:71:33:c9:39:b4:0c:b4:44:da:cc:70:f2:0d:8b:
                    7a:55:54:2f:e8:6b:e5:42:3d:ba:d5:3a:f9:43:e3:
                    f9:21:f1:2c:4f:43:e1:c6:3d:5c:34:d4:4e:94:36:
                    40:52:aa:99:f1:25:89:73:45:fe:38:34:e7:08:64:
                    6e:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C2:6A:E8:0E:CF:F6:36:29:22:B9:B1:BD:87:CF:F5:4E:A7:66:B8:B1
            X509v3 Authority Key Identifier:
                keyid:BB:5B:81:56:B0:37:E5:D2:22:63:EA:C7:F6:A1:1C:05:2F:DF:63:3F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A915370F/7346E8A2604911E2A307578D2979BB20/u1uBVrA35dIiY-rH9qEcBS_fYz8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/u1uBVrA35dIiY-rH9qEcBS_fYz8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915370F/7346E8A2604911E2A307578D2979BB20/22C2A76E854811EFA776AC73C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  122.8.56.0/22

    Signature Algorithm: sha256WithRSAEncryption
         18:78:3c:9c:ed:18:57:b2:1e:70:c0:78:92:92:1c:9e:68:a9:
         7c:bd:9b:46:54:b5:94:48:42:d3:27:bc:ee:fa:40:de:60:99:
         34:3d:1b:37:53:38:50:93:c5:b9:e2:ec:2d:32:a4:b9:9f:de:
         74:67:d1:06:42:f7:0f:de:8d:e7:97:c6:1a:0d:ec:9d:c1:a9:
         2b:e5:99:41:c2:05:98:c1:98:87:0b:bb:bd:65:a2:cc:76:7a:
         8a:5d:26:b7:89:5e:9f:da:31:e7:87:4e:78:9a:b8:1c:6b:b5:
         55:07:08:65:41:de:c0:fd:a9:0b:66:ba:29:9d:75:8d:1b:6d:
         75:21:87:c9:fb:96:e4:ba:b5:b5:ef:12:1f:5b:6d:1c:b2:57:
         d5:36:f7:23:ca:f9:96:c1:cd:cd:84:03:f2:0c:09:89:ac:2e:
         7a:ea:76:42:c6:fe:d4:a6:48:ca:3b:ab:cd:04:a3:54:20:df:
         19:2a:f5:e4:2a:38:42:93:13:bb:1e:95:92:23:ca:e4:9f:f3:
         f3:8f:12:2d:e4:07:f0:d7:4c:11:c3:76:94:bd:80:74:63:25:
         af:e1:e2:a3:44:61:75:8e:30:91:53:41:fc:ad:90:45:b7:0c:
         34:8c:cf:1c:2b:d5:c2:8b:b7:d4:e2:42:74:be:b8:a2:e8:95:
         a2:38:1a:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 12:33:40 2025 by rpki-client