Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/907D41FE3A1C11F0AE94962AC4F9AE02.roa
File:                     907D41FE3A1C11F0AE94962AC4F9AE02.roa (raw, json)
Hash identifier:          OjJ5OpH/GhTZ627ZOc5JB/63fcs1vHekkqYfex2hXW8=
Subject key identifier:   23:6F:91:22:4F:B2:31:0A:E2:4F:51:07:E6:6D:91:EC:4D:75:A0:D4
Certificate issuer:       /CN=A918EDB2/serialNumber=A7AE474416B0E8AD3A89E86774A640FEBE6973F9
Certificate serial:       1E61
Authority key identifier: A7:AE:47:44:16:B0:E8:AD:3A:89:E8:67:74:A6:40:FE:BE:69:73:F9
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/p65HRBaw6K06iehndKZA_r5pc_k.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/907D41FE3A1C11F0AE94962AC4F9AE02.roa
Signing time:             Mon 26 May 2025 10:31:21 +0000
ROA not before:           Mon 26 May 2025 10:31:21 +0000
ROA not after:            Wed 01 Jul 2026 00:00:00 +0000
asID:                     149240
IP address blocks:        160.187.140.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/p65HRBaw6K06iehndKZA_r5pc_k.crl
                          rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/p65HRBaw6K06iehndKZA_r5pc_k.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/p65HRBaw6K06iehndKZA_r5pc_k.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 24 Jun 2025 10:52:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 7777 (0x1e61)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918EDB2, serialNumber=A7AE474416B0E8AD3A89E86774A640FEBE6973F9
        Validity
            Not Before: May 26 10:31:21 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=683442f8-c600
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e9:13:07:6e:7d:bc:ec:17:3d:59:fd:05:c6:8b:
                    ed:9f:a7:cd:fb:ee:8c:08:9a:52:8b:14:9c:6f:2a:
                    70:ca:4b:9b:88:3f:07:47:e9:0c:9d:80:3c:09:24:
                    5f:40:56:c0:8f:af:fc:df:e2:89:8e:6f:14:11:4e:
                    06:c0:aa:21:4e:e3:99:93:9c:06:55:f1:e1:42:cb:
                    aa:c2:46:5f:84:e9:d0:4e:12:eb:55:46:14:9d:78:
                    c1:3f:68:9f:17:2f:b4:4b:d7:7b:2e:12:04:c5:7b:
                    4f:cc:96:23:08:48:c4:58:26:c6:a0:9a:08:cc:f5:
                    e2:0a:04:1d:8b:89:2f:e1:26:7e:16:46:45:31:e4:
                    6f:18:7c:8b:f4:82:fa:3f:13:64:b0:d1:6e:53:1e:
                    60:c9:61:92:19:76:b6:b3:d1:88:c0:48:ad:76:ba:
                    83:c1:34:9c:3d:d8:de:f5:03:e8:af:9d:fa:56:a7:
                    27:f1:bc:fa:de:ed:64:f1:e8:9f:58:56:9d:0b:b8:
                    71:45:d3:28:64:b6:dd:8f:ce:9d:d8:df:42:95:68:
                    4a:46:6f:93:5d:88:f6:8b:d2:2c:68:86:66:8d:79:
                    ec:8f:46:26:bc:27:c8:b8:25:82:8c:b7:b4:5e:f7:
                    9d:f0:84:10:52:41:68:bd:82:fa:55:43:5c:4f:96:
                    a5:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                23:6F:91:22:4F:B2:31:0A:E2:4F:51:07:E6:6D:91:EC:4D:75:A0:D4
            X509v3 Authority Key Identifier:
                keyid:A7:AE:47:44:16:B0:E8:AD:3A:89:E8:67:74:A6:40:FE:BE:69:73:F9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/p65HRBaw6K06iehndKZA_r5pc_k.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/p65HRBaw6K06iehndKZA_r5pc_k.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/907D41FE3A1C11F0AE94962AC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  160.187.140.0/23

    Signature Algorithm: sha256WithRSAEncryption
         a9:3b:19:05:68:d9:2c:e1:98:c5:01:1b:6a:35:a6:c2:98:dd:
         6a:c6:7b:01:91:7d:d3:c1:26:17:8d:e6:0b:e4:1b:56:1b:91:
         6e:5c:e2:cc:c8:95:dc:10:58:d7:b0:4b:62:51:31:9b:00:f7:
         54:eb:40:0d:3e:c0:85:34:ad:cd:2c:95:a6:78:9d:07:ec:1e:
         ba:59:4f:a6:23:f7:e6:97:5f:ec:02:70:ca:6c:30:60:33:d2:
         0a:16:00:bc:dc:38:d4:5a:d0:30:9d:44:e9:91:e8:b7:8f:a8:
         1e:30:b7:59:fd:21:8d:b8:8c:5d:ce:4c:09:6b:45:05:74:90:
         a7:b2:af:d0:3a:05:3a:97:a5:d6:d3:d7:a8:b5:63:6a:45:9a:
         2c:61:5f:8a:e2:45:17:07:6f:0f:f6:09:12:00:03:0c:b6:62:
         19:18:25:ff:1b:93:78:5c:7f:5c:04:8b:e6:27:b9:61:a9:d0:
         b0:25:d3:24:22:fb:fe:ff:b6:ad:e4:eb:6e:64:9a:5c:13:42:
         dc:1b:c9:c7:cc:ef:44:b1:2b:11:4d:63:53:ba:91:ce:23:97:
         e2:6c:25:35:67:fe:c8:e5:41:36:4f:b5:e5:17:c1:9b:09:c0:
         55:59:80:d8:6e:ac:45:3b:ac:6d:e7:80:f3:40:16:1b:dd:63:
         71:c0:9f:54
-----BEGIN CERTIFICATE-----
MIIFcTCCBFmgAwIBAgICHmEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
OEVEQjIxMTAvBgNVBAUTKEE3QUU0NzQ0MTZCMEU4QUQzQTg5RTg2Nzc0QTY0MEZF
QkU2OTczRjkwHhcNMjUwNTI2MTAzMTIxWhcNMjYwNzAxMDAwMDAwWjAYMRYwFAYD
VQQDEw02ODM0NDJmOC1jNjAwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA6RMHbn287Bc9Wf0Fxovtn6fN++6MCJpSixScbypwykubiD8HR+kMnYA8CSRf
QFbAj6/83+KJjm8UEU4GwKohTuOZk5wGVfHhQsuqwkZfhOnQThLrVUYUnXjBP2if
Fy+0S9d7LhIExXtPzJYjCEjEWCbGoJoIzPXiCgQdi4kv4SZ+FkZFMeRvGHyL9IL6
PxNksNFuUx5gyWGSGXa2s9GIwEitdrqDwTScPdje9QPor536Vqcn8bz63u1k8eif
WFadC7hxRdMoZLbdj86d2N9ClWhKRm+TXYj2i9IsaIZmjXnsj0YmvCfIuCWCjLe0
Xved8IQQUkFovYL6VUNcT5alWwIDAQABo4IClTCCApEwHQYDVR0OBBYEFCNvkSJP
sjEK4k9RB+ZtkexNdaDUMB8GA1UdIwQYMBaAFKeuR0QWsOitOonoZ3SmQP6+aXP5
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4RURCMi8xQzU3Q0VBQzcw
RTkxMUUyQjM2RDRCNkIyOTc5QkIyMC9wNjVIUkJhdzZLMDZpZWhuZEtaQV9yNXBj
X2suY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy
RkQxRkYyL3A2NUhSQmF3NkswNmllaG5kS1pBX3I1cGNfay5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
OEVEQjIvMUM1N0NFQUM3MEU5MTFFMkIzNkQ0QjZCMjk3OUJCMjAvOTA3RDQxRkUz
QTFDMTFGMEFFOTQ5NjJBQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E
EDAOMAwEAgABMAYDBAGgu4wwDQYJKoZIhvcNAQELBQADggEBAKk7GQVo2SzhmMUB
G2o1psKY3WrGewGRfdPBJheN5gvkG1YbkW5c4szIldwQWNewS2JRMZsA91TrQA0+
wIU0rc0slaZ4nQfsHrpZT6Yj9+aXX+wCcMpsMGAz0goWALzcONRa0DCdROmR6LeP
qB4wt1n9IY24jF3OTAlrRQV0kKeyr9A6BTqXpdbT16i1Y2pFmixhX4riRRcHbw/2
CRIAAwy2YhkYJf8bk3hcf1wEi+YnuWGp0LAl0yQi+/7/tq3k625kmlwTQtwbycfM
70SxKxFNY1O6kc4jl+JsJTVn/sjlQTZPteUXwZsJwFVZgNhurEU7rG3ngPNAFhvd
Y3HAn1Q=
-----END CERTIFICATE-----
Generated at Wed Jun 18 09:52:52 2025 by rpki-client