Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91E17F3/9A9FB8F2FFEC11EFBF55BB6FC4F9AE02/7B3E74A6025011F096E34819C4F9AE02.roa
File:                     7B3E74A6025011F096E34819C4F9AE02.roa (raw, json)
Hash identifier:          WR0rb26sSd7NNnmbaBSVENCtgD1Go/mwg9p/vOPLcpI=
Subject key identifier:   7B:D5:7B:38:E5:FF:EC:2F:12:CD:BD:A5:5D:4C:57:98:5F:4E:35:AA
Certificate issuer:       /CN=A91E17F3/serialNumber=39241DC2A94922EAFF982D9B4080F8BE40F7B6BD
Certificate serial:       05
Authority key identifier: 39:24:1D:C2:A9:49:22:EA:FF:98:2D:9B:40:80:F8:BE:40:F7:B6:BD
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OSQdwqlJIur_mC2bQID4vkD3tr0.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91E17F3/9A9FB8F2FFEC11EFBF55BB6FC4F9AE02/7B3E74A6025011F096E34819C4F9AE02.roa
Signing time:             Sun 16 Mar 2025 10:21:54 +0000
ROA not before:           Sun 16 Mar 2025 10:21:54 +0000
ROA not after:            Wed 01 Jul 2026 00:00:00 +0000
asID:                     25160
IP address blocks:        163.223.107.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91E17F3/9A9FB8F2FFEC11EFBF55BB6FC4F9AE02/OSQdwqlJIur_mC2bQID4vkD3tr0.crl
                          rsync://rpki.apnic.net/member_repository/A91E17F3/9A9FB8F2FFEC11EFBF55BB6FC4F9AE02/OSQdwqlJIur_mC2bQID4vkD3tr0.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OSQdwqlJIur_mC2bQID4vkD3tr0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 02 May 2025 06:57:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 5 (0x5)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91E17F3, serialNumber=39241DC2A94922EAFF982D9B4080F8BE40F7B6BD
        Validity
            Not Before: Mar 16 10:21:54 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=67d6a641-5b98
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:e1:73:10:c7:69:c0:37:ac:fb:40:e0:5a:b9:
                    4f:ec:cb:50:09:b6:95:90:cc:70:82:6c:51:b9:69:
                    3e:07:f8:f4:fe:0c:d4:51:e8:ff:88:37:21:cb:17:
                    39:84:0b:86:4a:71:38:5e:c8:61:fe:7e:81:90:b5:
                    c6:de:15:23:9f:fd:66:bb:06:68:7b:b9:fe:51:f4:
                    16:b1:17:98:e2:4c:0e:d0:54:5b:fd:dd:31:56:56:
                    35:53:c0:3e:5a:78:c9:4a:51:ce:05:85:08:d5:22:
                    10:53:e8:8e:e9:51:01:a5:4f:4a:8d:02:f4:6b:9f:
                    c0:c7:94:b6:a8:0e:ca:ab:75:3e:39:37:65:18:7d:
                    f4:74:e7:62:e4:fc:1f:f1:f8:fb:46:b4:37:5b:03:
                    56:1a:62:75:b0:09:e5:69:72:91:90:d7:4f:ef:92:
                    2e:2c:6a:14:de:33:37:f4:98:8e:af:96:ed:ba:58:
                    89:9d:d8:f2:b7:29:5c:cc:17:2f:9a:dc:cd:62:c5:
                    80:d2:76:f9:5d:d6:ec:ae:b2:44:fc:84:b2:d2:2a:
                    3a:2b:f0:65:b0:b0:28:d6:90:be:38:84:a2:a7:9e:
                    44:90:e0:59:98:28:06:08:82:d5:f1:0d:fb:15:c0:
                    39:f9:91:cd:22:de:e0:c5:00:58:59:bc:b5:0b:11:
                    58:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7B:D5:7B:38:E5:FF:EC:2F:12:CD:BD:A5:5D:4C:57:98:5F:4E:35:AA
            X509v3 Authority Key Identifier:
                keyid:39:24:1D:C2:A9:49:22:EA:FF:98:2D:9B:40:80:F8:BE:40:F7:B6:BD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91E17F3/9A9FB8F2FFEC11EFBF55BB6FC4F9AE02/OSQdwqlJIur_mC2bQID4vkD3tr0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OSQdwqlJIur_mC2bQID4vkD3tr0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E17F3/9A9FB8F2FFEC11EFBF55BB6FC4F9AE02/7B3E74A6025011F096E34819C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  163.223.107.0/24

    Signature Algorithm: sha256WithRSAEncryption
         1a:57:25:d9:a0:1b:cb:30:85:5b:2b:dd:8a:84:75:79:6c:b6:
         33:bc:3b:1e:74:bc:0e:89:9d:15:4c:a0:2c:ce:3b:fc:f1:53:
         47:db:5d:34:7f:43:13:ee:e8:9c:7d:75:1c:8c:c1:5f:5e:90:
         0d:8a:b0:55:2e:0d:8c:4e:8c:5a:b7:aa:65:3e:b3:3a:88:9d:
         a2:bb:22:26:f7:ec:c5:40:c1:6d:cd:75:d7:c9:8e:27:e4:12:
         4a:dd:87:39:de:fb:52:b4:97:e2:6e:93:e5:3a:ae:3c:06:61:
         0e:0d:52:32:6e:da:18:0c:1c:53:1b:3a:d1:b6:2d:c9:d4:73:
         48:6e:71:cc:68:5c:a4:af:72:75:a1:80:36:df:36:7d:64:81:
         d0:35:f0:29:8c:7d:b1:59:e7:a1:0a:15:bd:f7:3d:7c:de:2f:
         88:e3:22:ee:b6:41:78:d9:1a:58:9c:99:78:44:df:de:3d:dc:
         a5:57:7e:b7:f3:13:c5:17:3c:9a:db:cd:fd:50:6f:3a:70:d1:
         f1:fd:33:be:bc:48:bd:2f:94:6f:55:59:1a:5a:22:f3:54:75:
         3b:eb:64:68:c9:a7:15:7d:7b:52:96:57:3e:29:59:0a:77:db:
         06:3c:19:27:84:82:95:30:3a:53:9e:5a:73:81:49:9b:14:56:
         51:fb:17:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 14:05:55 2025 by rpki-client