Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9137ABC/713D9FB01D7811E282868DC408B02CD2/5724BB281E0111E9A590C837C4F9AE02.roa
File:                     5724BB281E0111E9A590C837C4F9AE02.roa (raw, json)
Hash identifier:          e2lRA+/Lnv5VdF7TuE8by1M0w331+QnpMZMJ/LOke4E=
Subject key identifier:   9A:65:A4:90:A5:38:83:B6:ED:AB:5B:68:63:1E:7D:83:44:49:2F:DA
Certificate issuer:       /CN=A9137ABC/serialNumber=61BF3ED4C3BFBC0916EF9480AAFF222A437AF02C
Certificate serial:       3A12
Authority key identifier: 61:BF:3E:D4:C3:BF:BC:09:16:EF:94:80:AA:FF:22:2A:43:7A:F0:2C
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Yb8-1MO_vAkW75SAqv8iKkN68Cw.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9137ABC/713D9FB01D7811E282868DC408B02CD2/5724BB281E0111E9A590C837C4F9AE02.roa
Signing time:             Mon 14 Jul 2025 14:51:33 +0000
ROA not before:           Mon 14 Jul 2025 14:51:33 +0000
ROA not after:            Wed 30 Sep 2026 00:00:00 +0000
asID:                     55938
IP address blocks:        61.90.209.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9137ABC/713D9FB01D7811E282868DC408B02CD2/Yb8-1MO_vAkW75SAqv8iKkN68Cw.crl
                          rsync://rpki.apnic.net/member_repository/A9137ABC/713D9FB01D7811E282868DC408B02CD2/Yb8-1MO_vAkW75SAqv8iKkN68Cw.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Yb8-1MO_vAkW75SAqv8iKkN68Cw.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 27 Jul 2025 14:20:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 14866 (0x3a12)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9137ABC, serialNumber=61BF3ED4C3BFBC0916EF9480AAFF222A437AF02C
        Validity
            Not Before: Jul 14 14:51:33 2025 GMT
            Not After : Sep 30 00:00:00 2026 GMT
        Subject: CN=68751975-f799
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:a9:dd:41:4d:b8:95:3f:d1:77:54:67:01:df:
                    fd:8f:a7:42:6d:30:26:f0:6d:f5:67:03:be:67:54:
                    c3:b7:ef:7b:0e:2c:66:69:5e:d2:3e:ad:45:37:06:
                    0b:08:29:42:18:d9:07:47:38:73:8c:68:b8:8e:6a:
                    6c:d9:d6:0c:c4:43:6a:1b:a7:e1:68:b1:ed:97:e8:
                    e5:71:86:71:6c:ae:bc:ea:8d:d3:4a:39:9f:8c:b5:
                    bf:8e:cd:4a:6a:06:b2:08:66:9c:60:ed:07:3f:cc:
                    ab:fe:be:e5:63:48:0e:8d:3d:4c:a9:a8:c6:49:9c:
                    5b:9a:44:79:0e:56:0a:20:39:71:ae:93:93:0d:c8:
                    8a:a0:1f:84:07:b0:ff:db:77:62:c4:2b:dd:0f:84:
                    79:5d:06:eb:dc:1a:5c:7d:91:0a:d7:fa:fc:20:2c:
                    a4:05:32:db:54:1d:d8:78:a1:c5:4b:79:ca:21:a9:
                    ba:1f:5d:e5:4f:bb:28:62:1a:69:c0:ee:9e:ac:f9:
                    09:48:c4:f3:d8:61:6b:1a:11:a9:7c:de:5f:f9:30:
                    5d:3a:12:86:6c:e7:a0:64:87:d9:a6:df:01:b4:7a:
                    a6:2f:c3:a5:68:86:67:23:30:4d:e5:3a:03:7e:af:
                    2d:a8:22:d0:f3:46:9e:b5:8a:0c:db:1a:84:54:2c:
                    68:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9A:65:A4:90:A5:38:83:B6:ED:AB:5B:68:63:1E:7D:83:44:49:2F:DA
            X509v3 Authority Key Identifier:
                keyid:61:BF:3E:D4:C3:BF:BC:09:16:EF:94:80:AA:FF:22:2A:43:7A:F0:2C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9137ABC/713D9FB01D7811E282868DC408B02CD2/Yb8-1MO_vAkW75SAqv8iKkN68Cw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Yb8-1MO_vAkW75SAqv8iKkN68Cw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9137ABC/713D9FB01D7811E282868DC408B02CD2/5724BB281E0111E9A590C837C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  61.90.209.0/24

    Signature Algorithm: sha256WithRSAEncryption
         7f:57:a7:ee:73:c5:a0:e6:5f:48:e1:eb:84:50:f9:89:c1:bf:
         0d:d3:5c:a8:ca:bb:b6:ea:59:08:10:51:61:80:57:9c:85:53:
         aa:a4:11:7b:64:c9:2c:ba:8d:be:c2:e2:70:61:3d:34:5b:16:
         7b:71:2e:16:4f:06:c0:92:22:e0:36:1b:b8:08:3b:e3:88:8e:
         d3:fa:5a:dc:95:d3:47:8a:48:5e:49:21:bc:8c:c1:bb:a8:13:
         de:ba:be:d6:b5:c4:51:2e:92:11:40:54:31:df:b1:e6:77:91:
         af:32:de:da:55:17:ee:06:51:b3:9c:b4:2a:4c:71:5e:d9:df:
         b2:06:c2:1d:01:d1:41:6d:82:39:89:6e:ff:d6:9d:fd:7a:d1:
         c3:41:02:e9:1e:09:bf:7d:e7:4b:04:67:dc:db:ff:d9:e9:d1:
         ac:12:3b:c2:9d:b6:7f:06:0f:17:05:5e:b8:5f:40:52:8d:3a:
         8e:8d:23:64:9f:98:6d:bf:dd:6e:9e:44:26:c7:6c:f2:f1:6c:
         92:85:c6:16:06:c5:6b:e7:99:35:e6:16:c1:4d:8c:2f:2b:be:
         08:40:62:a3:d1:ff:d2:d5:d5:4a:64:dd:28:a2:dd:16:f3:ef:
         f6:ea:71:bf:89:20:18:71:92:b9:0a:7a:e3:10:a7:ff:cf:a3:
         52:96:9e:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 20 18:53:42 2025 by rpki-client