Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9137ABC/713D9FB01D7811E282868DC408B02CD2/4D541B161E0111E9A590C837C4F9AE02.roa
File:                     4D541B161E0111E9A590C837C4F9AE02.roa (raw, json)
Hash identifier:          rgBpUBNwsnxnqsvs0+ajKx25x8eYR5Lw3b/g5UJkjDk=
Subject key identifier:   23:A8:99:37:7A:09:92:28:41:B3:B9:BA:F7:85:31:E6:3D:B4:FE:3D
Certificate issuer:       /CN=A9137ABC/serialNumber=61BF3ED4C3BFBC0916EF9480AAFF222A437AF02C
Certificate serial:       39FC
Authority key identifier: 61:BF:3E:D4:C3:BF:BC:09:16:EF:94:80:AA:FF:22:2A:43:7A:F0:2C
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Yb8-1MO_vAkW75SAqv8iKkN68Cw.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9137ABC/713D9FB01D7811E282868DC408B02CD2/4D541B161E0111E9A590C837C4F9AE02.roa
Signing time:             Mon 14 Jul 2025 14:51:15 +0000
ROA not before:           Mon 14 Jul 2025 14:51:15 +0000
ROA not after:            Wed 30 Sep 2026 00:00:00 +0000
asID:                     45200
IP address blocks:        61.91.73.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9137ABC/713D9FB01D7811E282868DC408B02CD2/Yb8-1MO_vAkW75SAqv8iKkN68Cw.crl
                          rsync://rpki.apnic.net/member_repository/A9137ABC/713D9FB01D7811E282868DC408B02CD2/Yb8-1MO_vAkW75SAqv8iKkN68Cw.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Yb8-1MO_vAkW75SAqv8iKkN68Cw.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 27 Jul 2025 14:20:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 14844 (0x39fc)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9137ABC, serialNumber=61BF3ED4C3BFBC0916EF9480AAFF222A437AF02C
        Validity
            Not Before: Jul 14 14:51:15 2025 GMT
            Not After : Sep 30 00:00:00 2026 GMT
        Subject: CN=68751963-0599
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:b8:6a:d6:50:d7:4a:22:4f:ea:1e:07:09:9f:
                    1a:b4:47:84:e2:16:49:d6:96:ca:17:af:20:17:3e:
                    1a:49:34:7d:c6:bc:71:2a:41:51:d9:b1:35:99:15:
                    ef:84:cd:83:39:ca:a9:8e:73:cd:f4:4a:98:99:58:
                    f2:a2:26:cd:f7:22:b7:24:c0:2b:ca:1b:3e:29:9a:
                    b3:ee:4a:35:26:5e:63:6a:91:d1:59:bd:28:79:9c:
                    23:5d:e3:a6:c9:5d:e4:b9:74:42:68:78:82:28:ee:
                    aa:3b:ab:3d:c7:6c:4f:2d:f5:a8:45:8b:26:e9:0f:
                    06:7f:e1:2c:19:a0:51:a6:ff:c7:71:71:75:7c:1e:
                    0c:47:59:d3:0e:17:b2:41:51:1a:2c:ff:9c:58:22:
                    39:4e:c3:5a:2e:96:5c:d6:8e:cf:62:b0:6c:94:0b:
                    6d:05:9b:f7:10:ff:39:61:c7:ed:56:01:3a:6c:52:
                    a6:cc:28:6c:1f:ad:0b:80:0b:76:c5:1a:47:11:ad:
                    69:34:05:87:01:73:44:df:c9:50:e9:f0:a4:4a:fd:
                    85:26:55:05:58:4c:4f:89:a7:c3:13:47:7b:f1:76:
                    8e:e7:fa:26:c5:7f:74:b1:f9:cc:11:ff:13:8a:93:
                    8d:10:d2:d4:b6:e4:e1:06:62:2a:df:48:be:c9:5c:
                    77:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                23:A8:99:37:7A:09:92:28:41:B3:B9:BA:F7:85:31:E6:3D:B4:FE:3D
            X509v3 Authority Key Identifier:
                keyid:61:BF:3E:D4:C3:BF:BC:09:16:EF:94:80:AA:FF:22:2A:43:7A:F0:2C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9137ABC/713D9FB01D7811E282868DC408B02CD2/Yb8-1MO_vAkW75SAqv8iKkN68Cw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Yb8-1MO_vAkW75SAqv8iKkN68Cw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9137ABC/713D9FB01D7811E282868DC408B02CD2/4D541B161E0111E9A590C837C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  61.91.73.0/24

    Signature Algorithm: sha256WithRSAEncryption
         9b:ca:0f:ea:79:a2:da:6d:49:61:8b:b0:25:33:07:fe:2d:d5:
         90:91:fa:80:5d:88:07:34:99:b9:d4:08:86:c7:ab:49:8d:93:
         0d:8a:12:c4:8d:88:39:68:62:27:9a:94:43:75:1a:11:c0:ef:
         07:93:1b:02:ae:d8:a3:76:98:c5:76:62:b9:72:fe:14:a9:82:
         a5:61:07:e9:86:57:f6:41:b0:7f:b2:8e:54:21:74:c8:3e:59:
         9b:8c:65:3a:a4:59:79:7c:de:2d:9b:08:e8:f1:5f:3c:0a:75:
         4d:a7:cd:fe:a8:60:55:e2:9e:c0:a3:02:c0:4f:c5:c4:7c:5b:
         0e:87:c8:17:53:b9:ad:a4:e8:b7:22:6d:e8:8e:5f:34:34:74:
         c1:28:88:ff:ec:af:10:b0:a2:9b:0f:37:41:74:70:1f:31:1b:
         64:ac:8d:78:33:7b:a3:3f:c1:90:ff:55:6e:17:de:58:fc:f2:
         5b:b9:25:5d:55:d6:e7:aa:37:7b:7e:59:4d:87:95:0c:3f:8b:
         1b:14:96:54:6f:bd:4f:1c:f9:1e:a5:f8:28:6b:5c:5a:d7:a4:
         b9:ed:a0:70:1d:6d:4a:7f:6e:6b:c8:25:d0:16:91:c1:5f:4d:
         a2:4b:f2:46:28:ee:cf:5b:ee:da:a5:25:4c:70:a7:9f:f3:49:
         30:38:ee:6e
-----BEGIN CERTIFICATE-----
MIIFcTCCBFmgAwIBAgICOfwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MzdBQkMxMTAvBgNVBAUTKDYxQkYzRUQ0QzNCRkJDMDkxNkVGOTQ4MEFBRkYyMjJB
NDM3QUYwMkMwHhcNMjUwNzE0MTQ1MTE1WhcNMjYwOTMwMDAwMDAwWjAYMRYwFAYD
VQQDEw02ODc1MTk2My0wNTk5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAqrhq1lDXSiJP6h4HCZ8atEeE4hZJ1pbKF68gFz4aSTR9xrxxKkFR2bE1mRXv
hM2DOcqpjnPN9EqYmVjyoibN9yK3JMAryhs+KZqz7ko1Jl5japHRWb0oeZwjXeOm
yV3kuXRCaHiCKO6qO6s9x2xPLfWoRYsm6Q8Gf+EsGaBRpv/HcXF1fB4MR1nTDhey
QVEaLP+cWCI5TsNaLpZc1o7PYrBslAttBZv3EP85YcftVgE6bFKmzChsH60LgAt2
xRpHEa1pNAWHAXNE38lQ6fCkSv2FJlUFWExPiafDE0d78XaO5/omxX90sfnMEf8T
ipONENLUtuThBmIq30i+yVx3DQIDAQABo4IClTCCApEwHQYDVR0OBBYEFCOomTd6
CZIoQbO5uveFMeY9tP49MB8GA1UdIwQYMBaAFGG/PtTDv7wJFu+UgKr/IipDevAs
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzN0FCQy83MTNEOUZCMDFE
NzgxMUUyODI4NjhEQzQwOEIwMkNEMi9ZYjgtMU1PX3ZBa1c3NVNBcXY4aUtrTjY4
Q3cuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL1liOC0xTU9fdkFrVzc1U0FxdjhpS2tONjhDdy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
MzdBQkMvNzEzRDlGQjAxRDc4MTFFMjgyODY4REM0MDhCMDJDRDIvNEQ1NDFCMTYx
RTAxMTFFOUE1OTBDODM3QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E
EDAOMAwEAgABMAYDBAA9W0kwDQYJKoZIhvcNAQELBQADggEBAJvKD+p5otptSWGL
sCUzB/4t1ZCR+oBdiAc0mbnUCIbHq0mNkw2KEsSNiDloYiealEN1GhHA7weTGwKu
2KN2mMV2Yrly/hSpgqVhB+mGV/ZBsH+yjlQhdMg+WZuMZTqkWXl83i2bCOjxXzwK
dU2nzf6oYFXinsCjAsBPxcR8Ww6HyBdTua2k6LcibeiOXzQ0dMEoiP/srxCwopsP
N0F0cB8xG2SsjXgze6M/wZD/VW4X3lj88lu5JV1V1ueqN3t+WU2HlQw/ixsUllRv
vU8c+R6l+ChrXFrXpLntoHAdbUp/bmvIJdAWkcFfTaJL8kYo7s9b7tqlJUxwp5/z
STA47m4=
-----END CERTIFICATE-----
Generated at Sun Jul 20 22:43:41 2025 by rpki-client