Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91D0B40/1FA0225038E011EF94B84D7FC4F9AE02/F8CD5EAA4CB511F0B121AE45C4F9AE02.roa
File:                     F8CD5EAA4CB511F0B121AE45C4F9AE02.roa (raw, json)
Hash identifier:          clF6JNb3xxwZ4+TvE/qZQW2JPLeVEQfwTMXzv7FMnBA=
Subject key identifier:   0A:86:EA:D7:DA:C6:35:43:45:C9:41:FA:81:14:2B:BE:E8:63:18:6D
Certificate issuer:       /CN=A91D0B40/serialNumber=2D7484A17F4E9E69410051EF53B7BE71937F9F9C
Certificate serial:       B7
Authority key identifier: 2D:74:84:A1:7F:4E:9E:69:41:00:51:EF:53:B7:BE:71:93:7F:9F:9C
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/LXSEoX9OnmlBAFHvU7e-cZN_n5w.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91D0B40/1FA0225038E011EF94B84D7FC4F9AE02/F8CD5EAA4CB511F0B121AE45C4F9AE02.roa
Signing time:             Thu 19 Jun 2025 02:34:50 +0000
ROA not before:           Thu 19 Jun 2025 02:34:50 +0000
ROA not after:            Fri 01 May 2026 00:00:00 +0000
asID:                     174
IP address blocks:        157.15.106.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91D0B40/1FA0225038E011EF94B84D7FC4F9AE02/LXSEoX9OnmlBAFHvU7e-cZN_n5w.crl
                          rsync://rpki.apnic.net/member_repository/A91D0B40/1FA0225038E011EF94B84D7FC4F9AE02/LXSEoX9OnmlBAFHvU7e-cZN_n5w.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/LXSEoX9OnmlBAFHvU7e-cZN_n5w.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 26 Jun 2025 05:18:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 183 (0xb7)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91D0B40, serialNumber=2D7484A17F4E9E69410051EF53B7BE71937F9F9C
        Validity
            Not Before: Jun 19 02:34:50 2025 GMT
            Not After : May  1 00:00:00 2026 GMT
        Subject: CN=68537749-3537
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:f0:6c:c6:b5:53:05:fa:42:32:80:68:34:c1:
                    6d:5a:28:e5:74:73:96:6e:ce:15:d9:ab:41:ae:60:
                    6b:5d:54:b8:40:46:fb:58:20:99:93:f5:5c:62:62:
                    13:49:f0:e2:61:96:75:71:fc:e5:6f:1b:3e:34:2e:
                    c4:26:b1:f2:4c:06:d3:82:87:b8:c3:0d:ea:3b:8b:
                    0d:22:a1:37:1d:af:a1:27:c9:1b:73:ec:9b:54:80:
                    1d:e6:81:db:a6:2c:d9:fd:30:a7:05:fb:92:3c:9a:
                    d1:e7:91:71:22:c1:6f:dd:70:bb:22:63:e7:52:42:
                    0c:c6:4e:d2:20:0f:e6:09:eb:71:ff:2a:f6:9d:d8:
                    04:30:ce:b2:3a:a2:27:5b:12:eb:58:42:a2:d5:93:
                    a0:c5:b2:7f:4c:f3:1d:64:a2:13:03:07:14:c5:14:
                    65:c0:15:60:47:12:be:ee:34:b4:b0:62:9d:19:e6:
                    ed:81:db:15:68:c6:63:d7:50:65:c9:96:86:23:8a:
                    99:74:6e:6d:53:20:67:96:07:1e:aa:cb:d7:fd:b0:
                    71:f0:fe:ab:6e:f3:c9:9e:98:30:e7:e5:9a:57:7c:
                    c0:da:7f:65:b4:44:64:1d:48:73:58:ac:71:7a:1f:
                    c3:f9:71:36:86:a2:52:20:32:94:61:5a:47:81:e5:
                    81:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0A:86:EA:D7:DA:C6:35:43:45:C9:41:FA:81:14:2B:BE:E8:63:18:6D
            X509v3 Authority Key Identifier:
                keyid:2D:74:84:A1:7F:4E:9E:69:41:00:51:EF:53:B7:BE:71:93:7F:9F:9C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91D0B40/1FA0225038E011EF94B84D7FC4F9AE02/LXSEoX9OnmlBAFHvU7e-cZN_n5w.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/LXSEoX9OnmlBAFHvU7e-cZN_n5w.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D0B40/1FA0225038E011EF94B84D7FC4F9AE02/F8CD5EAA4CB511F0B121AE45C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  157.15.106.0/24

    Signature Algorithm: sha256WithRSAEncryption
         7d:b4:bc:3c:f9:ff:74:84:12:e0:36:a9:5c:fa:da:f4:04:cd:
         7f:0b:4f:0a:3b:ea:50:44:21:ba:da:e5:28:a8:1a:83:3c:5b:
         4a:c7:4b:be:c6:e5:51:3c:e4:a0:b0:4a:47:de:8d:07:1d:52:
         d2:49:ae:0c:30:8a:4c:c3:6c:07:8f:79:33:51:9d:65:fd:d9:
         2a:e7:d3:66:78:97:7a:93:fd:82:e2:ab:25:80:f2:9e:2b:b0:
         9c:53:26:7e:eb:ad:f9:ee:27:bd:e7:c1:bb:97:61:cd:66:99:
         d8:8d:12:1f:92:64:a9:ce:4b:6a:18:76:bc:d2:9c:f3:35:cf:
         67:d7:6d:38:9c:41:c1:d0:48:01:77:5c:ee:a1:34:c5:d3:0a:
         ef:9f:e7:c5:eb:8f:d9:5f:fa:ad:2c:b0:b2:78:7a:c2:81:92:
         b6:a0:4e:a1:9f:75:8a:73:77:c2:0e:a0:8a:be:ba:8e:37:04:
         af:52:01:cd:8b:da:36:01:5a:37:8c:0a:60:3a:51:0b:fd:6a:
         de:74:81:0b:40:13:8d:9c:65:a9:cb:d7:c6:9e:75:2f:c9:9c:
         e5:24:b0:61:cd:08:5b:ad:b1:86:50:23:ed:18:32:da:b2:e4:
         e1:04:4a:09:30:b6:15:10:7b:69:26:0b:50:8b:74:b3:23:88:
         0c:26:d4:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 20 05:30:19 2025 by rpki-client