Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/2168B91E562011EF9AA81166C4F9AE02.roa
File:                     2168B91E562011EF9AA81166C4F9AE02.roa (raw, json)
Hash identifier:          6eJju2e12UTedWXxE2D7trLEd4ML80cYVXsWd8mTnF0=
Subject key identifier:   19:D2:AD:55:88:1D:31:BE:84:16:0D:27:03:DC:10:8D:2C:6C:04:54
Certificate issuer:       /CN=A918EDB2/serialNumber=A7AE474416B0E8AD3A89E86774A640FEBE6973F9
Certificate serial:       1DEE
Authority key identifier: A7:AE:47:44:16:B0:E8:AD:3A:89:E8:67:74:A6:40:FE:BE:69:73:F9
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/p65HRBaw6K06iehndKZA_r5pc_k.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/2168B91E562011EF9AA81166C4F9AE02.roa
Signing time:             Thu 08 May 2025 15:54:39 +0000
ROA not before:           Thu 08 May 2025 15:54:39 +0000
ROA not after:            Wed 01 Jul 2026 00:00:00 +0000
asID:                     152563
IP address blocks:        160.30.72.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/p65HRBaw6K06iehndKZA_r5pc_k.crl
                          rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/p65HRBaw6K06iehndKZA_r5pc_k.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/p65HRBaw6K06iehndKZA_r5pc_k.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 21 Jun 2025 15:22:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 7662 (0x1dee)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918EDB2, serialNumber=A7AE474416B0E8AD3A89E86774A640FEBE6973F9
        Validity
            Not Before: May  8 15:54:39 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=681cd3bf-8ff2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:a5:b2:17:a2:19:72:67:88:eb:21:bf:97:5d:
                    35:d8:e9:8f:ec:a4:77:9b:1a:6b:fc:5e:da:16:9e:
                    56:5d:6b:a8:6b:50:34:ae:97:d4:f5:27:aa:f6:95:
                    12:2e:2f:52:5a:54:2f:76:1d:f0:2b:bf:15:53:54:
                    d0:80:b5:c6:9a:aa:15:47:ad:52:e5:8e:f4:06:5b:
                    f0:48:5b:10:ca:72:89:d6:9c:f8:dc:a5:fd:17:6d:
                    80:a6:76:ed:de:b1:61:17:9b:62:6a:ec:cb:e7:b6:
                    7a:1a:da:9a:d3:b9:22:cb:b5:81:e4:4d:94:89:91:
                    db:d9:23:53:a9:b1:ed:9c:3f:b0:be:48:91:8b:25:
                    4e:1a:ff:ab:ec:31:aa:69:21:22:11:8f:8d:96:a8:
                    1a:41:07:27:d2:37:09:b0:38:bc:41:3e:14:9b:9b:
                    23:bf:2e:95:7f:e4:67:9f:64:6b:bc:99:0c:36:a4:
                    02:e8:84:ef:43:a7:af:5d:0e:0e:a7:d0:52:44:98:
                    3e:e6:a7:a2:32:33:cc:24:e2:60:cb:e9:f9:4f:8a:
                    f3:e0:92:2b:00:1f:93:c8:7a:20:a2:66:30:4c:da:
                    6d:6c:97:a0:8b:6b:7c:3a:95:93:17:ad:8a:d1:b1:
                    ce:9a:f6:40:42:92:fc:f2:5a:e0:a6:0b:1d:87:1b:
                    11:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                19:D2:AD:55:88:1D:31:BE:84:16:0D:27:03:DC:10:8D:2C:6C:04:54
            X509v3 Authority Key Identifier:
                keyid:A7:AE:47:44:16:B0:E8:AD:3A:89:E8:67:74:A6:40:FE:BE:69:73:F9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/p65HRBaw6K06iehndKZA_r5pc_k.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/p65HRBaw6K06iehndKZA_r5pc_k.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/2168B91E562011EF9AA81166C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  160.30.72.0/23

    Signature Algorithm: sha256WithRSAEncryption
         a7:1d:d7:d6:0e:0b:94:2a:6c:27:9f:5e:7a:d2:2d:9b:a7:46:
         2b:78:37:51:30:52:39:bf:f1:f6:ef:99:eb:1a:6e:10:5e:4e:
         dc:c8:c5:69:0c:7b:e7:95:b5:1b:f0:7f:19:be:ab:7b:79:3a:
         16:cc:e9:2c:f4:87:03:87:d1:9b:cc:17:16:a3:3e:e7:9b:ae:
         5f:62:09:94:45:52:43:38:a8:e6:e4:1a:52:e7:a8:03:59:8f:
         b1:09:75:b5:f5:07:90:16:c7:ee:d9:82:7e:30:9c:b7:06:52:
         82:8b:89:70:f8:09:6c:6f:30:dc:f9:3c:71:54:97:7c:5c:a3:
         f3:62:af:76:a2:31:67:c9:c7:79:73:e2:2c:ec:7b:b2:87:2b:
         cf:d6:9f:94:5f:aa:5c:45:0d:97:80:ab:d2:8b:05:9d:8c:38:
         4d:97:96:20:4d:87:ac:99:f6:ca:a2:6a:73:05:92:d2:53:37:
         36:24:7f:ae:78:55:2c:97:e9:ec:9a:e2:10:a7:a7:c8:ab:56:
         74:21:80:04:b8:e3:ad:db:6a:05:fd:13:18:54:d6:27:8c:dd:
         2b:f5:b0:de:f0:15:12:81:15:1d:1f:fe:87:d9:0e:ec:14:ab:
         f3:b5:b8:32:4b:13:24:49:83:ce:c4:b1:1c:cf:9b:34:53:f9:
         bd:86:f3:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 08:36:43 2025 by rpki-client