Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91774FB/7897F816343911EF9C3D213EC4F9AE02/24142938343C11EFA0165876C4F9AE02.roa
File:                     24142938343C11EFA0165876C4F9AE02.roa (raw, json)
Hash identifier:          n7AIK79a5+aPFKSTz88y32yhIzyT87IgTPflOpV9KLI=
Subject key identifier:   1D:53:89:C1:78:5E:1A:6D:DA:38:E2:8F:6D:C5:6A:0C:F2:73:7D:BA
Certificate issuer:       /CN=A91774FB/serialNumber=5296BC801402C73909F591E19095F22465414324
Certificate serial:       AC
Authority key identifier: 52:96:BC:80:14:02:C7:39:09:F5:91:E1:90:95:F2:24:65:41:43:24
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Upa8gBQCxzkJ9ZHhkJXyJGVBQyQ.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91774FB/7897F816343911EF9C3D213EC4F9AE02/24142938343C11EFA0165876C4F9AE02.roa
Signing time:             Wed 21 May 2025 05:17:04 +0000
ROA not before:           Wed 21 May 2025 05:17:04 +0000
ROA not after:            Mon 31 Aug 2026 00:00:00 +0000
asID:                     152916
IP address blocks:        160.22.162.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91774FB/7897F816343911EF9C3D213EC4F9AE02/Upa8gBQCxzkJ9ZHhkJXyJGVBQyQ.crl
                          rsync://rpki.apnic.net/member_repository/A91774FB/7897F816343911EF9C3D213EC4F9AE02/Upa8gBQCxzkJ9ZHhkJXyJGVBQyQ.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Upa8gBQCxzkJ9ZHhkJXyJGVBQyQ.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 26 Jun 2025 05:16:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 172 (0xac)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91774FB, serialNumber=5296BC801402C73909F591E19095F22465414324
        Validity
            Not Before: May 21 05:17:04 2025 GMT
            Not After : Aug 31 00:00:00 2026 GMT
        Subject: CN=682d61d0-9c29
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:74:d2:62:e3:94:95:38:5d:c5:54:f6:d6:38:
                    89:a8:6a:06:9a:20:1e:cb:05:23:99:00:83:fe:9a:
                    ed:32:94:a8:59:5d:fa:b2:ab:a6:2e:de:e4:2d:39:
                    25:9d:05:4e:22:bb:57:43:88:12:ae:23:04:8b:40:
                    5c:7a:7b:53:0c:92:a3:75:0f:0a:98:06:c0:f5:b8:
                    30:0b:39:81:c0:2a:f4:6a:72:26:f1:43:28:fe:e6:
                    ce:b1:ef:ab:e5:36:92:2c:f8:b5:f4:bf:0b:02:78:
                    82:e2:03:37:4f:58:a6:63:0b:ff:e1:f1:5f:61:ea:
                    57:12:b3:f3:03:75:57:1b:a7:72:f3:26:d9:4c:08:
                    c5:11:f9:d3:2e:92:6f:7d:8b:ab:3e:26:17:d4:2f:
                    e0:30:de:4e:07:e0:82:df:68:78:fe:9e:e1:f4:dc:
                    c4:70:ec:9a:51:87:d0:25:e3:41:19:3c:15:f3:0a:
                    79:e9:62:39:a1:ca:4e:53:a1:ad:0b:47:4e:00:c1:
                    0a:9a:e1:0d:34:2c:ff:ec:c8:79:8b:04:87:18:b0:
                    d0:46:dd:3e:2d:34:99:06:cc:1b:c6:e0:45:6f:99:
                    eb:b0:92:af:d8:e3:eb:5f:32:d6:32:34:52:05:02:
                    aa:b3:dc:f3:c5:16:a1:1a:30:87:ab:ef:55:5b:bf:
                    38:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1D:53:89:C1:78:5E:1A:6D:DA:38:E2:8F:6D:C5:6A:0C:F2:73:7D:BA
            X509v3 Authority Key Identifier:
                keyid:52:96:BC:80:14:02:C7:39:09:F5:91:E1:90:95:F2:24:65:41:43:24

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91774FB/7897F816343911EF9C3D213EC4F9AE02/Upa8gBQCxzkJ9ZHhkJXyJGVBQyQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Upa8gBQCxzkJ9ZHhkJXyJGVBQyQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91774FB/7897F816343911EF9C3D213EC4F9AE02/24142938343C11EFA0165876C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  160.22.162.0/23

    Signature Algorithm: sha256WithRSAEncryption
         64:dc:cc:1e:a4:db:37:b5:ab:57:da:85:6f:46:4c:23:24:32:
         1b:53:e4:90:56:16:0f:67:2b:0d:48:aa:87:80:ab:06:08:f2:
         7e:c5:46:c9:ea:7a:a7:d3:dd:b1:b9:5a:30:76:18:65:d3:44:
         33:c8:cc:d9:75:c5:f7:63:0f:63:18:92:cb:3d:4b:4a:4f:30:
         e6:82:60:d3:d1:bc:f6:c3:cb:6d:d5:36:06:40:ab:ea:aa:20:
         6f:b5:50:b0:d1:cd:75:10:38:a2:11:b5:56:5d:df:57:23:62:
         fb:44:ba:59:b7:5f:44:b3:fb:1f:5e:f6:fa:91:41:94:24:66:
         71:01:b7:75:46:dd:ab:1e:2c:16:81:99:8c:fe:6f:7c:49:c4:
         e2:a9:ae:f5:54:68:ff:5f:2e:0c:41:c8:78:e5:bc:35:3f:71:
         6b:60:26:4f:63:c0:79:f4:5b:50:7a:14:bd:c9:cc:70:0d:97:
         7d:e3:44:67:ac:39:05:cd:13:dd:db:fe:c2:ce:90:f1:1d:f9:
         3d:13:38:4f:c5:42:80:01:b7:ba:5f:a0:15:11:a9:5c:42:a3:
         5e:58:db:73:2a:1f:39:95:90:d2:f3:be:a9:0b:a5:55:3f:2f:
         a3:a5:88:86:df:eb:17:db:d2:01:84:b4:d3:27:5f:ee:de:44:
         5e:54:54:d8
-----BEGIN CERTIFICATE-----
MIIFcTCCBFmgAwIBAgICAKwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
Nzc0RkIxMTAvBgNVBAUTKDUyOTZCQzgwMTQwMkM3MzkwOUY1OTFFMTkwOTVGMjI0
NjU0MTQzMjQwHhcNMjUwNTIxMDUxNzA0WhcNMjYwODMxMDAwMDAwWjAYMRYwFAYD
VQQDEw02ODJkNjFkMC05YzI5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAqXTSYuOUlThdxVT21jiJqGoGmiAeywUjmQCD/prtMpSoWV36squmLt7kLTkl
nQVOIrtXQ4gSriMEi0BcentTDJKjdQ8KmAbA9bgwCzmBwCr0anIm8UMo/ubOse+r
5TaSLPi19L8LAniC4gM3T1imYwv/4fFfYepXErPzA3VXG6dy8ybZTAjFEfnTLpJv
fYurPiYX1C/gMN5OB+CC32h4/p7h9NzEcOyaUYfQJeNBGTwV8wp56WI5ocpOU6Gt
C0dOAMEKmuENNCz/7Mh5iwSHGLDQRt0+LTSZBswbxuBFb5nrsJKv2OPrXzLWMjRS
BQKqs9zzxRahGjCHq+9VW784+QIDAQABo4IClTCCApEwHQYDVR0OBBYEFB1TicF4
Xhpt2jjij23Fagzyc326MB8GA1UdIwQYMBaAFFKWvIAUAsc5CfWR4ZCV8iRlQUMk
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3NzRGQi83ODk3RjgxNjM0
MzkxMUVGOUMzRDIxM0VDNEY5QUUwMi9VcGE4Z0JRQ3h6a0o5Wkhoa0pYeUpHVkJR
eVEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy
RkQxRkYyL1VwYThnQlFDeHprSjlaSGhrSlh5SkdWQlF5US5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
Nzc0RkIvNzg5N0Y4MTYzNDM5MTFFRjlDM0QyMTNFQzRGOUFFMDIvMjQxNDI5Mzgz
NDNDMTFFRkEwMTY1ODc2QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E
EDAOMAwEAgABMAYDBAGgFqIwDQYJKoZIhvcNAQELBQADggEBAGTczB6k2ze1q1fa
hW9GTCMkMhtT5JBWFg9nKw1IqoeAqwYI8n7FRsnqeqfT3bG5WjB2GGXTRDPIzNl1
xfdjD2MYkss9S0pPMOaCYNPRvPbDy23VNgZAq+qqIG+1ULDRzXUQOKIRtVZd31cj
YvtEulm3X0Sz+x9e9vqRQZQkZnEBt3VG3aseLBaBmYz+b3xJxOKprvVUaP9fLgxB
yHjlvDU/cWtgJk9jwHn0W1B6FL3JzHANl33jRGesOQXNE93b/sLOkPEd+T0TOE/F
QoABt7pfoBURqVxCo15Y23MqHzmVkNLzvqkLpVU/L6OliIbf6xfb0gGEtNMnX+7e
RF5UVNg=
-----END CERTIFICATE-----
Generated at Fri Jun 20 16:30:34 2025 by rpki-client