Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A918549C/DE8718C44A3111EFB7BBD51CC4F9AE02/ABA45B1A740611F0B304387CC4F9AE02.roa
File:                     ABA45B1A740611F0B304387CC4F9AE02.roa (raw, json)
Hash identifier:          6m3OrJ+Nr9fWhODWggrIoilybpGVkuQ4teq6GCx+Hw0=
Subject key identifier:   79:B0:9B:40:8F:31:0C:8A:12:B0:56:38:AF:7B:A6:9A:47:FA:1B:23
Certificate issuer:       /CN=A918549C/serialNumber=43634C701BA1F1EFCE8F56AA6AD1DB2945A1DB9F
Certificate serial:       C7
Authority key identifier: 43:63:4C:70:1B:A1:F1:EF:CE:8F:56:AA:6A:D1:DB:29:45:A1:DB:9F
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Q2NMcBuh8e_Oj1aqatHbKUWh258.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918549C/DE8718C44A3111EFB7BBD51CC4F9AE02/ABA45B1A740611F0B304387CC4F9AE02.roa
Signing time:             Fri 08 Aug 2025 03:20:45 +0000
ROA not before:           Fri 08 Aug 2025 03:20:45 +0000
ROA not after:            Thu 28 May 2026 00:00:00 +0000
asID:                     153952
IP address blocks:        157.15.224.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918549C/DE8718C44A3111EFB7BBD51CC4F9AE02/Q2NMcBuh8e_Oj1aqatHbKUWh258.crl
                          rsync://rpki.apnic.net/member_repository/A918549C/DE8718C44A3111EFB7BBD51CC4F9AE02/Q2NMcBuh8e_Oj1aqatHbKUWh258.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Q2NMcBuh8e_Oj1aqatHbKUWh258.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 14 Aug 2025 05:57:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 199 (0xc7)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918549C, serialNumber=43634C701BA1F1EFCE8F56AA6AD1DB2945A1DB9F
        Validity
            Not Before: Aug  8 03:20:45 2025 GMT
            Not After : May 28 00:00:00 2026 GMT
        Subject: CN=68956d0c-a969
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:23:a8:b4:72:52:2b:ce:44:67:3a:ef:6f:21:
                    a8:d2:51:6e:f2:17:65:2f:94:93:4f:28:3d:38:22:
                    25:a4:da:bd:6e:05:94:35:bf:7c:bb:60:7f:c5:f0:
                    d1:51:2c:aa:d8:5d:8c:b5:26:a2:a0:11:25:7f:80:
                    b6:1c:18:b7:71:60:6a:e0:47:45:94:80:89:cc:8c:
                    6f:86:c9:77:ec:c5:1b:e8:c9:79:aa:5f:29:eb:dd:
                    fa:2a:41:60:aa:0d:fa:bb:92:74:2d:8d:25:92:fc:
                    eb:e4:28:30:09:1f:2e:06:62:17:d2:c6:3e:ce:2f:
                    89:d5:a4:5a:31:b6:70:7a:45:77:ab:09:16:8d:25:
                    5d:ab:82:b9:b0:5a:ae:8b:0c:1a:4f:c2:1d:d5:ac:
                    bc:76:eb:16:6f:4e:82:ff:67:24:b1:02:b1:5e:4b:
                    8e:c5:11:8d:3b:27:fc:f9:07:67:38:74:2d:4a:fe:
                    8a:19:bf:61:d3:c3:a5:e7:e3:d0:6a:dc:f8:ce:2c:
                    bf:8d:b5:d7:d2:6d:62:33:c3:39:7e:bc:d9:b4:4b:
                    84:93:1d:f6:8b:8d:47:cb:79:cb:59:b2:4e:42:ea:
                    47:51:d7:60:c8:82:6c:b1:05:e1:f1:c8:dd:a2:a2:
                    34:de:22:ff:ed:a4:c7:46:7f:82:3f:16:eb:36:eb:
                    b2:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                79:B0:9B:40:8F:31:0C:8A:12:B0:56:38:AF:7B:A6:9A:47:FA:1B:23
            X509v3 Authority Key Identifier:
                keyid:43:63:4C:70:1B:A1:F1:EF:CE:8F:56:AA:6A:D1:DB:29:45:A1:DB:9F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918549C/DE8718C44A3111EFB7BBD51CC4F9AE02/Q2NMcBuh8e_Oj1aqatHbKUWh258.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Q2NMcBuh8e_Oj1aqatHbKUWh258.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918549C/DE8718C44A3111EFB7BBD51CC4F9AE02/ABA45B1A740611F0B304387CC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  157.15.224.0/24

    Signature Algorithm: sha256WithRSAEncryption
         08:9e:3d:a8:89:d6:ce:22:db:1e:de:11:1f:70:6b:c5:1b:e6:
         6a:29:5a:dc:62:9e:20:76:d2:2b:a2:2c:ce:50:2d:15:21:5f:
         2d:55:97:90:19:25:29:e1:c8:69:4c:f5:3d:3b:a7:33:d6:94:
         3e:53:28:95:48:ba:d6:48:f8:81:a2:f4:96:89:ba:8b:a3:de:
         5a:d2:cf:f3:22:9d:ae:57:0e:a3:be:c8:b3:c9:07:2b:f3:49:
         8f:cb:5a:76:34:67:d4:e7:71:99:3c:d5:a9:ea:3b:cf:05:06:
         84:0e:43:e2:5d:3d:43:ea:ec:79:89:7b:2f:c2:25:84:da:95:
         c6:df:de:89:b1:6f:b5:b7:eb:d4:23:b9:63:d7:49:2d:0a:46:
         56:d8:96:87:44:63:02:39:7c:f9:a5:56:d0:90:1d:c7:9f:a8:
         8c:50:a1:4f:fe:e3:d0:ed:a5:be:38:bb:e1:78:49:89:b6:ba:
         50:30:17:e9:1b:17:cc:89:0c:a9:0a:a7:ff:d6:c1:00:0a:d9:
         4d:d3:a5:b6:42:f9:9f:57:bb:7e:29:a4:4f:0c:d7:69:2c:f3:
         81:05:a5:72:b6:e7:18:93:a4:6b:14:ed:93:7b:eb:88:9c:bc:
         2d:c7:71:60:c1:ca:78:64:7f:74:cd:19:bb:f9:0c:03:e3:62:
         16:9c:fd:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 11 04:31:38 2025 by rpki-client