Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A916807A/0263AB483E8811EDA61A9B2AC4F9AE02/40257FE64D0E11F082837352C4F9AE02.roa
File:                     40257FE64D0E11F082837352C4F9AE02.roa (raw, json)
Hash identifier:          HkcxWcOcJQ97ESWS97WCCLspE00RKugs+s6nj0HZv3Q=
Subject key identifier:   5B:AE:10:7D:A0:BA:28:D0:BC:68:F0:3A:8A:70:E0:A0:B8:A9:DF:01
Certificate issuer:       /CN=A916807A/serialNumber=729E2F9C1D87C214735078CFD21C638E07157B5D
Certificate serial:       024F
Authority key identifier: 72:9E:2F:9C:1D:87:C2:14:73:50:78:CF:D2:1C:63:8E:07:15:7B:5D
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cp4vnB2HwhRzUHjP0hxjjgcVe10.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A916807A/0263AB483E8811EDA61A9B2AC4F9AE02/40257FE64D0E11F082837352C4F9AE02.roa
Signing time:             Thu 19 Jun 2025 13:06:45 +0000
ROA not before:           Thu 19 Jun 2025 13:06:45 +0000
ROA not after:            Tue 30 Dec 2025 00:00:00 +0000
asID:                     214143
IP address blocks:        202.155.96.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A916807A/0263AB483E8811EDA61A9B2AC4F9AE02/cp4vnB2HwhRzUHjP0hxjjgcVe10.crl
                          rsync://rpki.apnic.net/member_repository/A916807A/0263AB483E8811EDA61A9B2AC4F9AE02/cp4vnB2HwhRzUHjP0hxjjgcVe10.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cp4vnB2HwhRzUHjP0hxjjgcVe10.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 28 Jun 2025 01:40:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 591 (0x24f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A916807A, serialNumber=729E2F9C1D87C214735078CFD21C638E07157B5D
        Validity
            Not Before: Jun 19 13:06:45 2025 GMT
            Not After : Dec 30 00:00:00 2025 GMT
        Subject: CN=68540b65-024b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:b3:e7:52:7c:3e:3b:7d:50:7e:5e:45:6b:49:
                    56:bf:59:2a:18:d9:21:87:54:07:3e:95:42:d4:5b:
                    ad:9d:35:31:13:b3:1f:37:35:ac:c2:20:c9:c8:9d:
                    2f:f6:ab:26:e4:cd:36:21:37:27:38:bf:fb:b5:06:
                    29:87:c9:f8:4d:3e:c3:65:42:7c:5f:2e:d9:92:bd:
                    11:74:f8:73:59:64:31:9f:a2:c8:99:b9:e2:34:19:
                    fe:9b:bb:16:78:2a:53:72:e6:2a:f0:59:69:65:02:
                    d3:ab:aa:69:6b:2a:a2:04:90:73:88:52:39:2f:79:
                    1a:53:1b:fc:b1:05:7e:15:60:a5:0d:7e:5e:a4:66:
                    79:f5:95:55:87:ed:d7:39:4f:32:3d:ff:b4:7d:7c:
                    e3:59:7a:82:83:83:68:8c:3a:d0:ff:9d:2d:d3:3e:
                    79:c9:24:15:7c:d3:51:3a:d7:c8:13:dc:fe:46:0e:
                    f3:4c:1a:de:6a:2e:35:4b:ec:44:b1:c0:62:d9:1d:
                    5b:49:df:59:d8:7d:5b:65:11:39:dd:9d:88:65:a5:
                    79:1f:e1:0b:d0:69:46:f2:21:71:56:97:9f:4a:fc:
                    db:3c:3d:c1:64:72:8c:d1:37:32:dc:94:bb:2a:12:
                    d9:14:a9:8b:cc:ea:07:48:9f:5f:c1:44:44:68:d3:
                    6a:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5B:AE:10:7D:A0:BA:28:D0:BC:68:F0:3A:8A:70:E0:A0:B8:A9:DF:01
            X509v3 Authority Key Identifier:
                keyid:72:9E:2F:9C:1D:87:C2:14:73:50:78:CF:D2:1C:63:8E:07:15:7B:5D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A916807A/0263AB483E8811EDA61A9B2AC4F9AE02/cp4vnB2HwhRzUHjP0hxjjgcVe10.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cp4vnB2HwhRzUHjP0hxjjgcVe10.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916807A/0263AB483E8811EDA61A9B2AC4F9AE02/40257FE64D0E11F082837352C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  202.155.96.0/22

    Signature Algorithm: sha256WithRSAEncryption
         6f:6a:b9:a2:9b:9a:13:39:3f:d2:5d:04:7a:cc:f8:b9:f4:37:
         c6:f1:d8:72:ab:c7:05:49:49:4b:a0:9c:0a:de:50:fc:17:84:
         89:5c:43:da:24:39:30:a4:9d:bf:7c:c7:06:7d:eb:92:ec:98:
         7a:90:4b:c4:3d:63:2e:f0:eb:df:52:3e:9d:cc:46:10:f8:75:
         58:e0:8c:91:9f:bf:f4:db:1c:da:1f:d4:fe:e5:f2:c6:41:b1:
         03:08:a3:88:f9:de:a2:f3:2a:99:02:86:d8:f9:a4:b3:3a:80:
         22:28:01:20:28:52:5d:e7:e6:d7:65:95:94:1a:44:af:a5:dc:
         d0:35:51:73:14:60:74:7e:ad:0b:da:f7:46:25:fc:94:71:37:
         5a:f0:f9:fe:2e:04:fd:72:19:7f:fe:4b:e7:75:10:d5:ee:ac:
         f8:c5:ea:ea:65:e4:26:aa:f8:7e:1c:7f:f7:94:ca:2f:fe:d1:
         c3:97:b5:77:75:28:e4:c8:81:87:48:97:21:cd:29:bb:46:b9:
         8e:ad:1a:ce:4c:94:60:21:87:60:b3:dd:ec:a0:ae:5f:33:ed:
         8f:b8:55:85:53:64:ce:32:30:67:8f:35:a4:2c:0c:50:02:09:
         02:99:3b:19:6c:60:db:fa:cf:5f:fe:5b:b2:a2:55:e0:b6:11:
         0a:90:63:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 22 13:12:57 2025 by rpki-client