Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9137ABC/713D9FB01D7811E282868DC408B02CD2/561E3BF01E0111E9A590C837C4F9AE02.roa
File:                     561E3BF01E0111E9A590C837C4F9AE02.roa (raw, json)
Hash identifier:          OHZeSapodaoTOtIumZ6AjGLOfheD0gNUT1UTwUhrUiM=
Subject key identifier:   AA:64:A0:5F:49:4E:E2:15:88:67:42:A3:C6:1F:A9:43:1B:7C:C5:B2
Certificate issuer:       /CN=A9137ABC/serialNumber=61BF3ED4C3BFBC0916EF9480AAFF222A437AF02C
Certificate serial:       3A11
Authority key identifier: 61:BF:3E:D4:C3:BF:BC:09:16:EF:94:80:AA:FF:22:2A:43:7A:F0:2C
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Yb8-1MO_vAkW75SAqv8iKkN68Cw.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9137ABC/713D9FB01D7811E282868DC408B02CD2/561E3BF01E0111E9A590C837C4F9AE02.roa
Signing time:             Mon 14 Jul 2025 14:51:32 +0000
ROA not before:           Mon 14 Jul 2025 14:51:32 +0000
ROA not after:            Wed 30 Sep 2026 00:00:00 +0000
asID:                     55932
IP address blocks:        119.46.182.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9137ABC/713D9FB01D7811E282868DC408B02CD2/Yb8-1MO_vAkW75SAqv8iKkN68Cw.crl
                          rsync://rpki.apnic.net/member_repository/A9137ABC/713D9FB01D7811E282868DC408B02CD2/Yb8-1MO_vAkW75SAqv8iKkN68Cw.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Yb8-1MO_vAkW75SAqv8iKkN68Cw.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 27 Jul 2025 14:20:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 14865 (0x3a11)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9137ABC, serialNumber=61BF3ED4C3BFBC0916EF9480AAFF222A437AF02C
        Validity
            Not Before: Jul 14 14:51:32 2025 GMT
            Not After : Sep 30 00:00:00 2026 GMT
        Subject: CN=68751974-8182
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:59:12:98:22:b0:f3:c0:ae:9e:eb:eb:c3:fd:
                    97:c1:6e:b8:35:dc:eb:47:29:f0:38:ae:8e:6c:f6:
                    af:8c:49:38:3b:48:16:1c:84:2a:c5:46:bb:a1:53:
                    ba:8f:25:aa:c5:39:a2:1e:24:b2:27:31:16:87:0b:
                    9b:46:8c:2a:79:64:68:9a:7d:f3:14:ed:a2:a1:a0:
                    a7:bb:c2:f2:9e:d6:90:c6:fe:15:a7:b3:70:bb:02:
                    a4:f7:eb:1e:c1:2b:08:59:a3:80:cb:91:06:c0:57:
                    22:4f:82:c8:36:40:42:44:56:85:73:47:ca:aa:e4:
                    cf:a5:7e:e3:62:6d:4c:db:47:7f:d5:5b:34:b7:60:
                    1c:a1:9e:5d:ef:34:89:a1:62:94:5e:06:b7:bf:dd:
                    d9:ca:45:e7:82:40:75:e1:69:94:9c:ba:14:ae:e7:
                    2c:37:55:bc:d8:61:e3:78:4a:d6:d7:bb:82:55:1d:
                    63:35:61:ce:b6:4d:d2:16:44:1b:4b:17:be:2e:73:
                    dd:58:66:cd:5d:67:b1:52:a3:5f:8e:f2:0e:fd:ab:
                    22:57:dd:11:a4:07:14:a3:72:e7:b5:10:b6:2b:17:
                    e0:d4:71:9a:e6:41:d9:36:1e:c2:26:9d:8a:29:db:
                    af:1a:84:40:41:29:60:74:ab:58:79:c8:dc:e4:13:
                    a9:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AA:64:A0:5F:49:4E:E2:15:88:67:42:A3:C6:1F:A9:43:1B:7C:C5:B2
            X509v3 Authority Key Identifier:
                keyid:61:BF:3E:D4:C3:BF:BC:09:16:EF:94:80:AA:FF:22:2A:43:7A:F0:2C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9137ABC/713D9FB01D7811E282868DC408B02CD2/Yb8-1MO_vAkW75SAqv8iKkN68Cw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Yb8-1MO_vAkW75SAqv8iKkN68Cw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9137ABC/713D9FB01D7811E282868DC408B02CD2/561E3BF01E0111E9A590C837C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  119.46.182.0/24

    Signature Algorithm: sha256WithRSAEncryption
         a3:37:c9:2a:ae:88:3e:22:01:65:6e:6a:09:b8:60:ff:fc:3f:
         08:b4:8c:e4:4d:49:bb:c3:15:68:e5:44:b5:ff:ed:55:47:f8:
         1f:b3:e9:69:8c:27:b6:2e:bc:61:20:5b:c8:c0:99:7f:0d:7d:
         60:49:e6:df:2f:ad:06:af:35:a7:27:c2:d5:d7:3f:c4:1b:f6:
         b4:34:c7:11:d1:20:bd:fa:8f:36:c3:ad:8e:e8:66:56:ae:f2:
         67:f2:20:48:45:f1:8a:52:e3:15:bd:a0:f3:56:69:fe:6e:eb:
         ac:48:c4:ba:3d:31:ec:e1:66:7a:8a:bf:d4:75:5a:de:54:c2:
         db:22:4a:c3:7c:8a:4a:65:d5:1d:55:5b:09:48:7d:55:fe:ba:
         cd:f8:76:ae:e1:44:bd:f2:4a:0f:41:00:99:91:94:66:d3:1a:
         1a:5f:7a:c8:05:fe:12:7b:d4:3e:bb:2d:24:d9:16:5d:95:54:
         01:35:79:e9:f9:18:71:8b:50:14:59:be:00:32:12:79:03:3c:
         dd:fd:ce:7e:ca:c9:e3:38:bd:17:35:7e:fb:f8:79:f8:62:a5:
         26:5d:c6:df:26:ff:50:f7:91:80:81:b2:7d:41:6b:70:63:a1:
         c9:01:e2:e8:ec:57:a1:ca:c2:1e:b8:07:72:8a:e4:00:f8:7e:
         44:a2:2b:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 21 12:41:52 2025 by rpki-client