Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9114FD8/F3512A0AFCC511EFA9090852C4F9AE02/691B3B36FCC611EF8337B652C4F9AE02.roa
File:                     691B3B36FCC611EF8337B652C4F9AE02.roa (raw, json)
Hash identifier:          9OScaduExEngNPz5wsuWcHvwLQIw8gltPcbBA5tFHWk=
Subject key identifier:   1A:CF:5F:62:97:35:4E:B4:3C:ED:E0:92:31:8C:A4:E6:19:F0:82:18
Certificate issuer:       /CN=A9114FD8/serialNumber=80463074D83F5E80354D1970586F54A8965E18D2
Certificate serial:       02
Authority key identifier: 80:46:30:74:D8:3F:5E:80:35:4D:19:70:58:6F:54:A8:96:5E:18:D2
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gEYwdNg_XoA1TRlwWG9UqJZeGNI.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9114FD8/F3512A0AFCC511EFA9090852C4F9AE02/691B3B36FCC611EF8337B652C4F9AE02.roa
Signing time:             Sun 09 Mar 2025 09:10:57 +0000
ROA not before:           Sun 09 Mar 2025 09:10:57 +0000
ROA not after:            Fri 01 May 2026 00:00:00 +0000
asID:                     153623
IP address blocks:        163.61.192.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9114FD8/F3512A0AFCC511EFA9090852C4F9AE02/gEYwdNg_XoA1TRlwWG9UqJZeGNI.crl
                          rsync://rpki.apnic.net/member_repository/A9114FD8/F3512A0AFCC511EFA9090852C4F9AE02/gEYwdNg_XoA1TRlwWG9UqJZeGNI.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gEYwdNg_XoA1TRlwWG9UqJZeGNI.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 05 Apr 2025 05:08:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2 (0x2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9114FD8
        Validity
            Not Before: Mar  9 09:10:57 2025 GMT
            Not After : May  1 00:00:00 2026 GMT
        Subject: CN=67cd5b21-b64a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:50:46:28:96:4f:bc:76:c7:01:d0:6e:c4:1a:
                    55:38:35:d4:11:f3:6d:53:5f:ab:f7:bc:25:1a:f8:
                    78:0f:cc:0a:e0:ad:0f:43:28:ce:c8:e5:dc:e3:42:
                    36:59:5c:7a:6f:f6:e7:e2:04:f8:25:04:68:7b:c7:
                    24:8f:1d:b8:ac:aa:f6:3b:6f:cd:7d:8d:4e:38:af:
                    fa:00:df:8e:22:43:fd:a2:fa:64:69:4a:07:25:be:
                    2e:86:b6:3c:a3:52:b0:a2:e6:a4:26:10:8f:ec:27:
                    17:9b:f2:06:e2:17:60:b2:56:76:9d:6c:07:4b:e6:
                    89:42:55:0e:7e:cd:c6:98:72:60:31:d9:0e:08:4e:
                    9a:aa:69:dc:c6:3b:8b:50:ae:e6:58:d3:09:d7:4e:
                    68:59:ab:0b:41:eb:e1:c5:bf:a9:13:42:85:f0:2d:
                    30:78:3e:08:d7:56:98:49:de:7b:4c:a1:22:f9:2c:
                    62:05:90:95:15:af:a4:3c:de:65:ed:13:df:44:78:
                    c5:2a:1c:db:3d:8b:8e:3f:49:60:27:c6:ba:54:46:
                    9d:55:9d:07:e5:79:86:31:03:68:86:70:9b:ad:a4:
                    34:74:2a:af:1c:bb:2a:78:e3:65:30:95:25:ed:43:
                    9c:fb:88:8a:2f:3b:ba:17:e6:07:bd:d8:12:4f:a1:
                    33:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1A:CF:5F:62:97:35:4E:B4:3C:ED:E0:92:31:8C:A4:E6:19:F0:82:18
            X509v3 Authority Key Identifier:
                keyid:80:46:30:74:D8:3F:5E:80:35:4D:19:70:58:6F:54:A8:96:5E:18:D2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9114FD8/F3512A0AFCC511EFA9090852C4F9AE02/gEYwdNg_XoA1TRlwWG9UqJZeGNI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gEYwdNg_XoA1TRlwWG9UqJZeGNI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9114FD8/F3512A0AFCC511EFA9090852C4F9AE02/691B3B36FCC611EF8337B652C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  163.61.192.0/23

    Signature Algorithm: sha256WithRSAEncryption
         04:7a:de:48:8d:6b:07:e1:cc:11:e2:8a:ff:9e:05:5b:e3:d3:
         12:3d:95:68:ad:b9:92:4f:76:e8:fe:16:8c:24:bc:f3:17:e4:
         60:30:a0:38:50:d6:18:19:ba:f9:47:29:b1:30:6d:40:d6:07:
         ca:b6:f8:c6:9b:71:d3:f2:a0:65:49:46:7e:20:61:6d:2f:be:
         c1:71:9d:7d:93:2e:53:05:dd:56:f4:28:bb:1f:2e:1a:72:a7:
         31:43:79:a4:8f:eb:77:1e:9a:ce:44:5a:a9:00:77:d8:2a:d9:
         37:b9:58:2f:fa:53:66:a6:9b:fc:7a:88:6d:7b:b3:db:e2:69:
         51:93:3d:8b:3a:a5:8c:26:de:f7:10:9e:d8:45:33:c6:f0:5c:
         8e:b5:68:d0:e7:63:61:47:47:86:c7:47:72:12:18:24:c3:70:
         86:fc:d7:d3:99:d7:5c:c3:d1:b6:b6:b1:95:04:36:cb:25:59:
         a0:d9:46:92:54:88:33:80:17:7c:a5:01:0c:42:63:bf:d5:29:
         15:71:56:68:b3:63:4d:dc:43:76:57:aa:41:bf:f5:35:bb:c5:
         b3:0f:28:da:19:21:17:5d:4e:ef:85:23:f2:62:a1:fb:0f:9a:
         e3:5f:15:83:92:dd:67:c8:75:2b:27:c5:1d:f1:27:b1:6e:17:
         96:83:2d:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 02:22:43 2025 by rpki-client