Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A917D048/D70811903E1111E7882A2B2EC4F9AE02/6C5BE410BD9F11EE963C753BC4F9AE02.roa
File:                     6C5BE410BD9F11EE963C753BC4F9AE02.roa (raw, json)
Hash identifier:          E8poe511tT12mN3D43tSXFWw8+TubiylMLlGYceMw8k=
Subject key identifier:   A9:D8:9A:FF:30:3E:EE:DA:EA:D9:AA:8D:45:15:30:AF:62:8D:01:4A
Certificate issuer:       /CN=A917D048/serialNumber=CC562DC526EC82E38EB6C228F3030D18B624C152
Certificate serial:       1ADA
Authority key identifier: CC:56:2D:C5:26:EC:82:E3:8E:B6:C2:28:F3:03:0D:18:B6:24:C1:52
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zFYtxSbsguOOtsIo8wMNGLYkwVI.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A917D048/D70811903E1111E7882A2B2EC4F9AE02/6C5BE410BD9F11EE963C753BC4F9AE02.roa
Signing time:             Fri 30 May 2025 16:47:04 +0000
ROA not before:           Fri 30 May 2025 16:47:04 +0000
ROA not after:            Wed 01 Jul 2026 00:00:00 +0000
asID:                     65350
IP address blocks:        202.181.18.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A917D048/D70811903E1111E7882A2B2EC4F9AE02/zFYtxSbsguOOtsIo8wMNGLYkwVI.crl
                          rsync://rpki.apnic.net/member_repository/A917D048/D70811903E1111E7882A2B2EC4F9AE02/zFYtxSbsguOOtsIo8wMNGLYkwVI.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zFYtxSbsguOOtsIo8wMNGLYkwVI.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 25 Jun 2025 16:20:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 6874 (0x1ada)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A917D048, serialNumber=CC562DC526EC82E38EB6C228F3030D18B624C152
        Validity
            Not Before: May 30 16:47:04 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=6839e108-317c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f9:46:11:1b:10:cc:04:36:ca:a1:2e:52:4a:28:
                    d1:10:81:b4:a7:23:f4:56:2d:ea:a1:bb:d5:74:80:
                    37:47:7f:f7:d2:67:b7:8f:4d:da:b4:d7:57:a8:87:
                    48:22:46:d7:60:4a:91:32:7d:3e:36:7a:a4:66:03:
                    a4:12:0e:0a:ef:84:bf:04:66:13:f4:0d:16:6a:54:
                    31:58:e2:20:a7:58:5e:0d:00:4d:1a:a0:58:68:39:
                    a3:d5:d0:1e:7a:49:af:cd:ef:c7:14:f1:ae:d5:91:
                    08:f0:4f:1b:27:68:e0:ef:53:6a:a9:72:2c:72:62:
                    17:45:39:bf:5a:da:0e:0d:21:86:ba:13:37:8f:15:
                    d5:8e:c5:08:56:67:d7:d0:5d:d7:ee:82:07:1f:f9:
                    83:3d:ba:87:69:95:d1:5a:d6:31:a1:10:8a:f9:60:
                    02:ad:f6:fe:d8:23:03:94:83:99:a0:85:f9:65:10:
                    61:13:ea:f7:91:95:be:4b:7e:d4:c3:75:0e:ac:26:
                    13:7d:5d:ee:7d:90:61:e7:78:15:7a:14:06:b3:64:
                    49:b2:92:8d:f6:59:c9:9b:cf:93:e1:0d:9e:74:b0:
                    c5:07:7f:5f:98:2d:0a:47:ee:8f:af:12:a3:59:39:
                    8b:6e:c1:78:47:7e:63:2f:d9:de:4e:73:7c:62:03:
                    00:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A9:D8:9A:FF:30:3E:EE:DA:EA:D9:AA:8D:45:15:30:AF:62:8D:01:4A
            X509v3 Authority Key Identifier:
                keyid:CC:56:2D:C5:26:EC:82:E3:8E:B6:C2:28:F3:03:0D:18:B6:24:C1:52

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A917D048/D70811903E1111E7882A2B2EC4F9AE02/zFYtxSbsguOOtsIo8wMNGLYkwVI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zFYtxSbsguOOtsIo8wMNGLYkwVI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917D048/D70811903E1111E7882A2B2EC4F9AE02/6C5BE410BD9F11EE963C753BC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  202.181.18.0/24

    Signature Algorithm: sha256WithRSAEncryption
         02:38:d4:8c:80:6d:aa:0c:1c:b6:1f:f1:bb:26:14:b0:ab:14:
         af:8c:6d:9e:6a:69:d9:29:ed:6a:4f:2a:e0:9c:0e:2d:97:fb:
         b5:3e:c3:f3:65:35:5d:f9:9a:a3:68:f5:f4:9b:0e:f2:e1:83:
         08:08:20:bb:24:11:4e:12:b2:68:1f:b0:e9:d2:6f:03:ca:22:
         0e:e6:de:84:a4:72:75:b1:ad:39:7b:80:21:29:63:97:24:88:
         a9:f5:dc:34:96:bf:70:38:14:ad:fe:7b:bb:db:82:a6:1a:a1:
         69:5f:07:b2:a8:60:d8:bc:9d:23:8b:b3:ea:f2:c4:e5:1d:74:
         d6:74:f0:25:e2:40:82:6a:00:a3:2b:8e:de:b8:5a:5c:e8:63:
         16:ea:c2:8c:7f:01:c5:3f:c6:6e:0f:a1:15:e1:c3:24:79:62:
         e2:38:bb:9f:38:30:89:d0:36:e9:4c:3c:64:51:e1:bc:60:c4:
         d2:03:36:d1:ef:9e:09:62:1c:c1:fa:f3:55:42:d9:64:4b:1d:
         ca:7d:eb:74:8d:42:77:63:6c:e3:97:03:bb:11:28:4a:e6:6e:
         8b:d2:7c:35:53:54:f7:52:29:15:e9:43:d2:5a:1f:8c:36:4d:
         c4:72:cb:15:67:66:ae:df:9c:a9:5d:c7:59:66:7a:34:8c:ce:
         65:53:d1:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 19 05:12:12 2025 by rpki-client