Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91827C5/D065ABB48AD911EF981C8283C4F9AE02/CC5DED701ED011F087716517C4F9AE02.roa
File:                     CC5DED701ED011F087716517C4F9AE02.roa (raw, json)
Hash identifier:          /r/z36JtiDDnCVXQeI6m7NOKWTwHjbV5JqKL9GGA5Gc=
Subject key identifier:   B7:D0:A0:F9:30:41:EB:09:68:0E:DD:F3:33:BB:0C:11:7C:6B:4F:61
Certificate issuer:       /CN=A91827C5/serialNumber=575A6ED30C373AD434D15A665DDA2E764EC89ACA
Certificate serial:       69
Authority key identifier: 57:5A:6E:D3:0C:37:3A:D4:34:D1:5A:66:5D:DA:2E:76:4E:C8:9A:CA
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/V1pu0ww3OtQ00VpmXdoudk7Imso.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91827C5/D065ABB48AD911EF981C8283C4F9AE02/CC5DED701ED011F087716517C4F9AE02.roa
Signing time:             Mon 21 Apr 2025 16:50:58 +0000
ROA not before:           Mon 21 Apr 2025 16:50:58 +0000
ROA not after:            Fri 31 Oct 2025 00:00:00 +0000
asID:                     18811
IP address blocks:        160.30.104.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91827C5/D065ABB48AD911EF981C8283C4F9AE02/V1pu0ww3OtQ00VpmXdoudk7Imso.crl
                          rsync://rpki.apnic.net/member_repository/A91827C5/D065ABB48AD911EF981C8283C4F9AE02/V1pu0ww3OtQ00VpmXdoudk7Imso.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/V1pu0ww3OtQ00VpmXdoudk7Imso.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 02 May 2025 05:59:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 105 (0x69)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91827C5, serialNumber=575A6ED30C373AD434D15A665DDA2E764EC89ACA
        Validity
            Not Before: Apr 21 16:50:58 2025 GMT
            Not After : Oct 31 00:00:00 2025 GMT
        Subject: CN=68067772-1e56
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:c6:22:18:62:41:15:ee:a4:86:05:da:ab:28:
                    49:73:dc:38:33:ef:67:c9:eb:51:8d:02:82:12:06:
                    ec:76:f5:a3:47:2f:40:f2:57:5a:1f:5d:7d:69:9e:
                    3a:26:18:20:3d:4b:90:47:fd:60:b5:31:43:42:1c:
                    c7:5a:83:02:31:fb:0d:4a:ef:65:b7:a3:27:fe:87:
                    8d:c7:7a:39:ad:a2:35:f1:fe:6a:dd:21:ab:7b:21:
                    71:2e:2a:bf:95:9d:56:69:81:04:da:98:b1:3b:7b:
                    9d:e7:d7:cd:11:56:53:bf:62:3d:50:b8:18:15:3f:
                    24:ab:05:16:ef:30:56:1d:3b:13:62:bb:82:f9:d2:
                    c6:1b:1d:f2:99:bc:b4:f0:47:ce:7a:f8:d2:4e:a3:
                    eb:ba:a1:c4:52:a6:6e:83:a8:eb:d3:e8:02:e6:1e:
                    d3:85:4d:cc:ce:e5:b3:fa:06:e0:b8:0f:15:87:9b:
                    a3:7f:e7:16:0a:0e:99:df:28:98:45:d5:62:2f:b9:
                    82:3c:74:24:c6:b5:7d:6b:44:5d:4a:ce:3b:3b:5f:
                    1b:d7:d0:9d:b6:fb:5c:c5:68:b1:c3:e9:f2:71:32:
                    da:b9:e9:bb:53:56:54:30:75:a3:d2:21:6a:12:4a:
                    dd:44:64:bb:93:0c:81:d2:b7:94:42:09:2a:39:a9:
                    7b:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B7:D0:A0:F9:30:41:EB:09:68:0E:DD:F3:33:BB:0C:11:7C:6B:4F:61
            X509v3 Authority Key Identifier:
                keyid:57:5A:6E:D3:0C:37:3A:D4:34:D1:5A:66:5D:DA:2E:76:4E:C8:9A:CA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91827C5/D065ABB48AD911EF981C8283C4F9AE02/V1pu0ww3OtQ00VpmXdoudk7Imso.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/V1pu0ww3OtQ00VpmXdoudk7Imso.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91827C5/D065ABB48AD911EF981C8283C4F9AE02/CC5DED701ED011F087716517C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  160.30.104.0/23

    Signature Algorithm: sha256WithRSAEncryption
         03:05:07:61:99:57:29:57:87:40:d0:ae:70:72:8e:51:5e:90:
         ae:6d:a5:fa:49:ce:79:ca:05:41:c2:f1:ad:92:9f:5d:b8:d4:
         bf:0d:95:35:5a:02:ea:71:b0:42:68:55:d3:fc:ba:58:da:4a:
         b6:4b:20:3f:99:46:ee:77:98:62:82:8b:0e:25:af:66:59:fc:
         c5:68:8a:e8:66:6f:b0:27:08:0c:d9:c0:b8:f0:38:18:dc:f3:
         71:76:17:2e:57:c2:af:fa:f3:51:ac:d4:26:62:3b:52:d3:3c:
         72:aa:5f:3a:9a:5f:df:d4:67:44:c2:8a:55:dd:e7:39:5a:7e:
         80:8f:5c:98:f3:3f:ac:fa:d5:fd:6c:e3:4d:d9:80:1a:f3:cc:
         0e:3a:ee:bd:09:ec:20:95:13:af:6f:db:3e:0f:74:84:0d:b1:
         f2:a1:6c:b2:67:8c:18:a0:05:dd:3c:87:f4:ea:86:ea:3c:80:
         08:e3:eb:1e:c2:0a:8d:f3:23:88:d9:02:c6:94:75:86:85:04:
         d8:cb:f9:f8:ce:22:b3:93:14:b0:16:df:61:75:3c:c4:f9:57:
         7c:9c:f8:8f:fc:0b:a7:eb:c5:83:48:0b:2f:98:30:cc:3c:9d:
         9a:f6:dc:97:b3:a7:e0:5f:0c:d5:3d:58:2d:00:46:16:ed:dc:
         23:e1:eb:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 13:36:26 2025 by rpki-client