Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A916B7FC/C73BA16403A711F0A7FF9C87C4F9AE02/B49957AA134B11F0AE18CB2BC4F9AE02.roa
File:                     B49957AA134B11F0AE18CB2BC4F9AE02.roa (raw, json)
Hash identifier:          ysrTnUlxkF1TKTdjUl7uimFokZqxTbeHcLYRk7mAwOI=
Subject key identifier:   D0:B6:23:9A:9D:4D:A4:9D:4E:E2:13:A0:CD:8A:7D:8D:40:3E:12:7C
Certificate issuer:       /CN=A916B7FC/serialNumber=857507F1D8B3915C9510D504700ECE890B06685F
Certificate serial:       0F
Authority key identifier: 85:75:07:F1:D8:B3:91:5C:95:10:D5:04:70:0E:CE:89:0B:06:68:5F
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/hXUH8dizkVyVENUEcA7OiQsGaF8.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A916B7FC/C73BA16403A711F0A7FF9C87C4F9AE02/B49957AA134B11F0AE18CB2BC4F9AE02.roa
Signing time:             Mon 07 Apr 2025 01:00:32 +0000
ROA not before:           Mon 07 Apr 2025 01:00:32 +0000
ROA not after:            Mon 02 Mar 2026 00:00:00 +0000
asID:                     138668
IP address blocks:        160.191.178.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A916B7FC/C73BA16403A711F0A7FF9C87C4F9AE02/hXUH8dizkVyVENUEcA7OiQsGaF8.crl
                          rsync://rpki.apnic.net/member_repository/A916B7FC/C73BA16403A711F0A7FF9C87C4F9AE02/hXUH8dizkVyVENUEcA7OiQsGaF8.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/hXUH8dizkVyVENUEcA7OiQsGaF8.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 02 May 2025 06:58:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 15 (0xf)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A916B7FC, serialNumber=857507F1D8B3915C9510D504700ECE890B06685F
        Validity
            Not Before: Apr  7 01:00:32 2025 GMT
            Not After : Mar  2 00:00:00 2026 GMT
        Subject: CN=67f323b0-f479
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e6:9c:37:96:1c:be:f9:e3:45:d9:07:bc:47:82:
                    4e:8c:ed:10:cb:1b:bb:fb:1f:e5:60:7e:ff:0c:f7:
                    5a:a0:35:2c:32:88:62:47:f8:e0:2c:59:a5:50:63:
                    be:67:0e:e2:49:3a:7d:5f:87:d4:2b:5e:85:65:20:
                    c4:68:97:7e:d6:5f:c0:df:a3:ba:ab:77:47:44:0f:
                    1d:1e:5b:20:e4:7f:8c:f4:7e:ec:4c:15:e6:bc:04:
                    2c:1a:18:21:02:ab:86:4a:97:fc:21:55:28:5c:40:
                    6a:80:c8:43:a5:a5:25:a4:1a:e5:e9:bd:7c:6e:84:
                    ca:04:63:3b:95:d5:d7:33:08:d9:6e:e6:26:5f:b7:
                    45:35:d9:6f:62:fc:b8:4d:4b:c8:53:e4:c1:c6:b6:
                    3b:64:58:b9:53:69:4c:5d:30:70:96:b7:5e:95:5f:
                    bb:d8:87:11:a8:15:fd:d8:34:c4:ac:81:37:cd:22:
                    68:37:15:34:2d:8a:b8:ae:80:49:34:07:c9:4c:58:
                    95:fd:65:02:36:f3:cd:68:ca:7a:e7:5f:c5:2c:23:
                    ff:c1:5e:12:21:f2:9e:5a:6e:ac:a7:5a:a3:77:82:
                    fe:d5:75:d6:6b:60:1d:f3:92:22:02:53:85:b7:bb:
                    ad:23:43:6a:3f:eb:0d:a2:e5:0d:c9:80:bc:99:d5:
                    7f:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D0:B6:23:9A:9D:4D:A4:9D:4E:E2:13:A0:CD:8A:7D:8D:40:3E:12:7C
            X509v3 Authority Key Identifier:
                keyid:85:75:07:F1:D8:B3:91:5C:95:10:D5:04:70:0E:CE:89:0B:06:68:5F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A916B7FC/C73BA16403A711F0A7FF9C87C4F9AE02/hXUH8dizkVyVENUEcA7OiQsGaF8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/hXUH8dizkVyVENUEcA7OiQsGaF8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916B7FC/C73BA16403A711F0A7FF9C87C4F9AE02/B49957AA134B11F0AE18CB2BC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  160.191.178.0/24

    Signature Algorithm: sha256WithRSAEncryption
         51:31:b0:8a:50:b1:f3:7c:61:33:86:c7:96:e3:98:23:ea:07:
         47:c9:f1:2d:38:54:64:cc:65:f5:57:41:ef:8f:fb:dd:b2:70:
         20:14:f1:c5:e1:7e:a2:4f:94:9f:a2:56:65:d5:f6:96:15:a5:
         be:3c:ca:93:48:88:84:41:bc:a7:e2:af:7b:17:a2:6c:aa:e3:
         9c:db:2e:af:68:d8:4a:77:36:f5:3c:3b:6a:23:3d:ab:7a:94:
         fd:d1:ad:8e:ec:cb:c5:14:85:c1:ca:b5:da:52:8a:bf:2e:5e:
         85:75:00:1f:f5:44:a3:28:de:ac:8c:8f:b6:48:c6:cd:fe:90:
         13:aa:c4:bd:45:d7:41:1a:bb:d6:9a:62:2b:e5:e7:b9:c4:11:
         92:cc:bf:f2:32:98:bd:93:67:40:64:97:05:f5:b2:1e:78:f8:
         cb:3c:d9:aa:91:87:26:3b:03:d6:53:bb:0c:6d:b0:97:1b:6e:
         4a:ed:7f:f7:4b:32:d7:0b:0c:84:fe:3d:9b:e6:96:e5:ba:64:
         ea:b0:f6:2d:7c:40:ad:32:ba:31:7f:0d:2d:a6:d0:a9:79:75:
         8c:99:39:0b:e8:80:d7:16:ee:eb:a2:51:9a:6d:e0:57:3b:80:
         1e:c7:86:d2:3a:28:c6:a2:98:4e:80:e4:7a:38:36:d3:3e:aa:
         2c:96:9b:26
-----BEGIN CERTIFICATE-----
MIIFcDCCBFigAwIBAgIBDzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE2
QjdGQzExMC8GA1UEBRMoODU3NTA3RjFEOEIzOTE1Qzk1MTBENTA0NzAwRUNFODkw
QjA2Njg1RjAeFw0yNTA0MDcwMTAwMzJaFw0yNjAzMDIwMDAwMDBaMBgxFjAUBgNV
BAMTDTY3ZjMyM2IwLWY0NzkwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQDmnDeWHL7540XZB7xHgk6M7RDLG7v7H+Vgfv8M91qgNSwyiGJH+OAsWaVQY75n
DuJJOn1fh9QrXoVlIMRol37WX8Dfo7qrd0dEDx0eWyDkf4z0fuxMFea8BCwaGCEC
q4ZKl/whVShcQGqAyEOlpSWkGuXpvXxuhMoEYzuV1dczCNlu5iZft0U12W9i/LhN
S8hT5MHGtjtkWLlTaUxdMHCWt16VX7vYhxGoFf3YNMSsgTfNImg3FTQtiriugEk0
B8lMWJX9ZQI2881oynrnX8UsI//BXhIh8p5abqynWqN3gv7VddZrYB3zkiICU4W3
u60jQ2o/6w2i5Q3JgLyZ1X9tAgMBAAGjggKVMIICkTAdBgNVHQ4EFgQU0LYjmp1N
pJ1O4hOgzYp9jUA+EnwwHwYDVR0jBBgwFoAUhXUH8dizkVyVENUEcA7OiQsGaF8w
DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTZCN0ZDL0M3M0JBMTY0MDNB
NzExRjBBN0ZGOUM4N0M0RjlBRTAyL2hYVUg4ZGl6a1Z5VkVOVUVjQTdPaVFzR2FG
OC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG
RDFGRjIvaFhVSDhkaXprVnlWRU5VRWNBN09pUXNHYUY4LmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwgcsGCCsGAQUFBwELBIG+MIG7MIGDBggrBgEFBQcw
C4Z3cnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2
QjdGQy9DNzNCQTE2NDAzQTcxMUYwQTdGRjlDODdDNEY5QUUwMi9CNDk5NTdBQTEz
NEIxMUYwQUUxOENCMkJDNEY5QUUwMi5yb2EwMwYIKwYBBQUHMA2GJ2h0dHBzOi8v
cnJkcC5hcG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAfBggrBgEFBQcBBwEB/wQQ
MA4wDAQCAAEwBgMEAKC/sjANBgkqhkiG9w0BAQsFAAOCAQEAUTGwilCx83xhM4bH
luOYI+oHR8nxLThUZMxl9VdB74/73bJwIBTxxeF+ok+Un6JWZdX2lhWlvjzKk0iI
hEG8p+KvexeibKrjnNsur2jYSnc29Tw7aiM9q3qU/dGtjuzLxRSFwcq12lKKvy5e
hXUAH/VEoyjerIyPtkjGzf6QE6rEvUXXQRq71ppiK+XnucQRksy/8jKYvZNnQGSX
BfWyHnj4yzzZqpGHJjsD1lO7DG2wlxtuSu1/90sy1wsMhP49m+aW5bpk6rD2LXxA
rTK6MX8NLabQqXl1jJk5C+iA1xbu66JRmm3gVzuAHseG0jooxqKYToDkejg20z6q
LJabJg==
-----END CERTIFICATE-----
Generated at Sat Apr 26 14:02:13 2025 by rpki-client