Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A918549C/E6AB2CDE4A3111EFB7BBD51CC4F9AE02/DD5C17BA1F5611F08154983AC4F9AE02.roa
File:                     DD5C17BA1F5611F08154983AC4F9AE02.roa (raw, json)
Hash identifier:          8Snwt8B2JLJEJ5JimGWRrVqz/OGA5xhfuPXAO9BWHlA=
Subject key identifier:   0A:2C:52:2B:36:21:01:15:CF:00:C6:EE:0A:30:DD:01:02:52:73:90
Certificate issuer:       /CN=A918549C/serialNumber=52EDFEDFEA1535C13EE8A00E55FC7D51446D67D4
Certificate serial:       96
Authority key identifier: 52:ED:FE:DF:EA:15:35:C1:3E:E8:A0:0E:55:FC:7D:51:44:6D:67:D4
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Uu3-3-oVNcE-6KAOVfx9UURtZ9Q.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918549C/E6AB2CDE4A3111EFB7BBD51CC4F9AE02/DD5C17BA1F5611F08154983AC4F9AE02.roa
Signing time:             Tue 22 Apr 2025 08:50:39 +0000
ROA not before:           Tue 22 Apr 2025 08:50:39 +0000
ROA not after:            Thu 28 May 2026 00:00:00 +0000
asID:                     3754
IP address blocks:        163.223.77.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918549C/E6AB2CDE4A3111EFB7BBD51CC4F9AE02/Uu3-3-oVNcE-6KAOVfx9UURtZ9Q.crl
                          rsync://rpki.apnic.net/member_repository/A918549C/E6AB2CDE4A3111EFB7BBD51CC4F9AE02/Uu3-3-oVNcE-6KAOVfx9UURtZ9Q.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Uu3-3-oVNcE-6KAOVfx9UURtZ9Q.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 02 May 2025 05:28:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 150 (0x96)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918549C, serialNumber=52EDFEDFEA1535C13EE8A00E55FC7D51446D67D4
        Validity
            Not Before: Apr 22 08:50:39 2025 GMT
            Not After : May 28 00:00:00 2026 GMT
        Subject: CN=6807585f-cb61
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:80:f0:f2:8d:7c:9b:22:6b:e9:f1:99:63:ea:
                    41:0e:f2:f1:c4:9e:47:12:36:8f:93:c5:71:3a:ab:
                    b7:bb:10:a3:59:aa:3b:d1:f9:69:49:bd:72:6f:8f:
                    0d:e2:16:b4:f7:fe:74:1f:df:ef:09:f4:21:b9:1d:
                    ca:c4:4b:ff:78:a9:76:e1:f7:cb:ef:85:61:70:e5:
                    42:89:3f:0a:9d:9d:61:84:c8:a3:b7:f7:a0:99:aa:
                    d5:2c:47:52:30:44:d1:47:2b:aa:da:ff:02:59:16:
                    39:d3:75:6c:1e:ea:48:99:5b:ef:2e:68:51:c1:7c:
                    3a:33:ca:bd:e6:70:5a:15:38:9e:81:36:23:dc:bb:
                    0e:11:2a:77:ef:e0:4c:9b:ac:fd:c4:44:7e:68:47:
                    c5:54:25:31:6e:77:e7:86:66:fa:1a:79:88:6c:e9:
                    13:b1:10:af:e3:70:a7:de:69:7e:ff:c6:63:33:b2:
                    c9:77:5d:db:51:1a:71:a9:3f:34:6c:ea:2f:52:22:
                    89:96:9a:b3:2f:64:87:17:61:76:a3:5d:08:73:57:
                    4f:e9:74:42:f4:bc:41:df:3c:5f:5b:bf:44:be:3d:
                    44:f8:50:cb:48:1a:c6:f3:98:41:f1:26:b8:b5:58:
                    c9:db:c9:7c:a1:af:03:b2:52:b3:2b:ee:74:25:5a:
                    82:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0A:2C:52:2B:36:21:01:15:CF:00:C6:EE:0A:30:DD:01:02:52:73:90
            X509v3 Authority Key Identifier:
                keyid:52:ED:FE:DF:EA:15:35:C1:3E:E8:A0:0E:55:FC:7D:51:44:6D:67:D4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918549C/E6AB2CDE4A3111EFB7BBD51CC4F9AE02/Uu3-3-oVNcE-6KAOVfx9UURtZ9Q.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Uu3-3-oVNcE-6KAOVfx9UURtZ9Q.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918549C/E6AB2CDE4A3111EFB7BBD51CC4F9AE02/DD5C17BA1F5611F08154983AC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  163.223.77.0/24

    Signature Algorithm: sha256WithRSAEncryption
         08:e6:54:e1:c0:26:be:89:7c:ed:b6:4a:95:71:62:25:14:9e:
         f0:79:19:04:b5:54:dc:66:8f:2b:0b:5e:a0:78:f2:f9:8a:ac:
         dd:4e:b5:11:4e:44:fd:3b:06:b8:32:8b:b3:45:13:9b:36:2d:
         6f:d8:12:fd:20:c5:ee:1e:c3:ff:44:2d:9a:a7:27:5d:0d:9f:
         00:21:8b:58:86:e2:46:61:3c:81:41:db:f8:8d:e6:12:bb:ce:
         50:15:a7:63:fa:3a:cd:d4:b9:02:d0:e2:29:a6:fe:25:aa:a1:
         b8:99:71:3f:0b:2c:de:44:7a:de:8b:c4:a8:e2:85:84:8c:e1:
         8c:db:12:aa:83:f2:c5:0c:ae:2b:07:48:9d:35:6b:47:10:31:
         91:3e:4e:bf:40:89:77:96:97:69:e4:f5:cd:da:69:5f:ba:fd:
         22:3e:e8:6a:41:9a:b6:4d:99:c9:51:c3:6a:af:29:a4:f2:37:
         20:90:fe:c5:fc:f6:ac:05:00:59:6a:fb:6b:a1:27:20:cf:92:
         83:4d:9a:13:9b:0d:fe:c8:f0:39:fd:84:3a:4e:e8:89:9e:f5:
         10:97:84:43:8f:84:4c:0c:d8:2f:90:95:79:b6:9c:90:be:76:
         9d:5b:d6:c9:6e:4b:c4:84:89:58:9c:16:e9:37:01:ad:1b:fb:
         0c:b7:eb:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 13:00:26 2025 by rpki-client