Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A915825D/DD71D568A44611EF8D58A624C4F9AE02/109B1A6AC14F11EFAE8F4B0BC4F9AE02.roa
File:                     109B1A6AC14F11EFAE8F4B0BC4F9AE02.roa (raw, json)
Hash identifier:          m6Ln5a7ZSeIX81Tm2886H7n9SlKXj8hnsIcbsYsTN7o=
Subject key identifier:   5C:3E:CF:73:DB:BF:37:99:80:B5:DF:6D:68:B4:17:A9:38:DF:32:44
Certificate issuer:       /CN=A915825D/serialNumber=4CA02EC111874AE0E7D0555A25FF3302F912EB8C
Certificate serial:       52
Authority key identifier: 4C:A0:2E:C1:11:87:4A:E0:E7:D0:55:5A:25:FF:33:02:F9:12:EB:8C
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/TKAuwRGHSuDn0FVaJf8zAvkS64w.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A915825D/DD71D568A44611EF8D58A624C4F9AE02/109B1A6AC14F11EFAE8F4B0BC4F9AE02.roa
Signing time:             Tue 08 Apr 2025 05:48:04 +0000
ROA not before:           Tue 08 Apr 2025 05:48:04 +0000
ROA not after:            Mon 02 Mar 2026 00:00:00 +0000
asID:                     136396
IP address blocks:        160.191.162.0/24 maxlen: 24
                          160.191.163.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A915825D/DD71D568A44611EF8D58A624C4F9AE02/TKAuwRGHSuDn0FVaJf8zAvkS64w.crl
                          rsync://rpki.apnic.net/member_repository/A915825D/DD71D568A44611EF8D58A624C4F9AE02/TKAuwRGHSuDn0FVaJf8zAvkS64w.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/TKAuwRGHSuDn0FVaJf8zAvkS64w.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 02 May 2025 06:13:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 82 (0x52)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A915825D, serialNumber=4CA02EC111874AE0E7D0555A25FF3302F912EB8C
        Validity
            Not Before: Apr  8 05:48:04 2025 GMT
            Not After : Mar  2 00:00:00 2026 GMT
        Subject: CN=67f4b894-b9fb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:74:02:65:5e:c7:bf:c4:39:fd:0a:84:cd:e0:
                    b8:09:2a:af:37:67:09:9a:c3:da:9b:00:62:70:54:
                    e3:5b:40:37:b4:18:ab:48:c1:47:30:f1:cf:56:13:
                    e9:3d:d2:38:5f:f4:9b:f7:bb:4d:99:b0:54:39:4f:
                    44:71:53:38:13:8e:a7:f0:21:0d:79:49:84:a4:06:
                    0a:b8:e6:e8:69:cd:06:51:f4:09:e7:cc:f2:35:b4:
                    a6:07:65:d2:41:f2:5d:57:c5:2d:df:b1:7d:ca:c3:
                    c0:48:66:01:a8:75:2d:93:3e:95:45:8a:89:18:0f:
                    0e:fe:df:6a:45:8f:30:9c:23:38:d4:b3:8b:07:1c:
                    d9:4f:48:8e:d0:d2:ae:6d:40:d2:1d:03:bb:45:6a:
                    5d:6e:bb:74:d9:c5:b1:fb:66:cb:60:d8:59:c2:c5:
                    d6:f7:e8:f9:c2:56:bd:60:98:2c:ab:55:a6:6b:7f:
                    56:6d:43:71:a7:95:8d:91:6f:e6:80:8b:54:e5:e8:
                    64:46:26:bc:c1:ae:20:b3:42:a8:03:d9:82:1a:26:
                    c2:be:ad:2d:95:77:fc:27:73:37:e5:c0:27:eb:88:
                    5b:e0:2b:b2:a3:1f:e8:6c:98:ab:52:c3:f2:2b:83:
                    07:dc:ce:9e:0e:13:c8:2c:9d:dd:d7:9b:d7:61:38:
                    9e:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5C:3E:CF:73:DB:BF:37:99:80:B5:DF:6D:68:B4:17:A9:38:DF:32:44
            X509v3 Authority Key Identifier:
                keyid:4C:A0:2E:C1:11:87:4A:E0:E7:D0:55:5A:25:FF:33:02:F9:12:EB:8C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A915825D/DD71D568A44611EF8D58A624C4F9AE02/TKAuwRGHSuDn0FVaJf8zAvkS64w.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/TKAuwRGHSuDn0FVaJf8zAvkS64w.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915825D/DD71D568A44611EF8D58A624C4F9AE02/109B1A6AC14F11EFAE8F4B0BC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  160.191.162.0/23

    Signature Algorithm: sha256WithRSAEncryption
         c4:c6:aa:06:52:12:fc:c2:76:16:c4:a0:3d:fa:6b:71:79:0a:
         0b:c9:54:4f:cb:4b:eb:fe:7d:f8:99:6e:77:e4:1b:ca:2a:71:
         75:6c:a6:41:96:ca:46:6c:c8:78:48:05:82:d1:09:33:c1:4f:
         d0:a0:3a:26:b0:c2:e8:19:b0:cb:05:7d:e5:19:6b:3c:e7:c4:
         be:0e:bd:69:4a:a8:78:92:fb:3c:59:f6:a0:01:27:59:a1:36:
         99:ae:fd:6e:b6:63:f2:3e:34:cc:7d:0c:c1:43:39:b8:01:90:
         cb:d2:86:6d:5c:87:00:0e:e7:cf:31:76:9b:a5:78:80:a3:5d:
         b5:bf:48:3c:fd:67:af:c6:96:34:b9:35:57:81:2a:2c:da:75:
         fd:21:c5:1e:3a:88:d8:75:cf:b2:3d:27:37:1d:49:02:cb:7d:
         5a:57:ff:13:19:5c:47:d1:b3:60:4d:f0:f6:45:46:dc:a3:de:
         0d:e5:ff:b9:7c:56:c1:1e:43:03:cb:8a:ac:36:a2:8c:89:e7:
         09:b9:d2:85:d7:85:e6:ba:6f:c7:9f:d7:33:1e:36:32:cc:99:
         9c:cf:96:e9:fa:1a:e2:c6:21:ea:64:77:28:e2:30:f6:5b:55:
         5d:29:5c:67:7e:9a:1c:40:6a:e7:71:01:8b:c0:38:a7:6c:77:
         ef:ee:3a:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 17:13:22 2025 by rpki-client