Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9140562/66C3C97EEDF911EFA9CDA838C4F9AE02/5FCE01D8EDFA11EF8193933AC4F9AE02.roa
File:                     5FCE01D8EDFA11EF8193933AC4F9AE02.roa (raw, json)
Hash identifier:          97oa3zBzp7Gq4BpVUI5kKb706Ag3AZCc/4WlkzLjgfQ=
Subject key identifier:   1A:D8:80:26:57:A2:32:E1:20:E7:98:E2:C7:48:DE:CB:DA:73:EE:00
Certificate issuer:       /CN=A9140562/serialNumber=B9FADC41E7E1F9756C7BC9B3DE3972CBF6CF60B5
Certificate serial:       02
Authority key identifier: B9:FA:DC:41:E7:E1:F9:75:6C:7B:C9:B3:DE:39:72:CB:F6:CF:60:B5
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ufrcQefh-XVse8mz3jlyy_bPYLU.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9140562/66C3C97EEDF911EFA9CDA838C4F9AE02/5FCE01D8EDFA11EF8193933AC4F9AE02.roa
Signing time:             Tue 18 Feb 2025 13:15:08 +0000
ROA not before:           Tue 18 Feb 2025 13:15:08 +0000
ROA not after:            Fri 01 May 2026 00:00:00 +0000
asID:                     153587
IP address blocks:        163.61.91.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9140562/66C3C97EEDF911EFA9CDA838C4F9AE02/ufrcQefh-XVse8mz3jlyy_bPYLU.crl
                          rsync://rpki.apnic.net/member_repository/A9140562/66C3C97EEDF911EFA9CDA838C4F9AE02/ufrcQefh-XVse8mz3jlyy_bPYLU.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ufrcQefh-XVse8mz3jlyy_bPYLU.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 10 Apr 2025 07:12:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2 (0x2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9140562
        Validity
            Not Before: Feb 18 13:15:08 2025 GMT
            Not After : May  1 00:00:00 2026 GMT
        Subject: CN=67b487db-1ab0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:22:ad:64:cd:35:5c:0b:2c:bf:f5:6b:23:a3:
                    89:7c:39:19:0d:74:4b:c8:cb:61:f0:be:fc:ab:ad:
                    14:0e:16:cb:3a:90:1d:c8:37:94:83:c1:44:ec:aa:
                    df:5b:87:b1:f0:23:11:ee:63:73:9c:2f:9d:a0:ab:
                    ab:1c:11:0b:8c:a2:e8:db:25:8a:f9:68:ef:1e:51:
                    08:7a:a3:4d:1a:de:b4:2d:c2:28:f0:2c:14:0a:e1:
                    17:d0:94:3a:3b:ed:eb:7b:d6:bc:06:fa:2a:51:9d:
                    60:bb:65:c1:ed:8b:c4:03:d2:90:60:4d:f9:c7:e8:
                    21:f1:94:3a:3e:28:75:ed:10:53:17:ed:27:dc:5a:
                    17:19:e3:5a:64:91:d5:e0:a2:ba:eb:0b:a5:59:a9:
                    d2:69:43:35:9b:51:03:08:37:66:10:39:d7:18:3a:
                    5e:46:ac:9e:85:39:5f:9d:f7:21:5a:21:1b:2e:d5:
                    d1:eb:90:24:e5:c7:86:fa:90:da:4e:c6:cc:ad:77:
                    92:a9:26:b8:68:c5:a0:37:98:eb:fb:46:98:b8:5c:
                    c3:58:ab:47:f3:0d:af:bd:f5:9f:33:59:8c:b3:8b:
                    4f:9e:cc:66:b3:27:76:8c:64:74:fc:76:96:58:74:
                    30:30:0a:7e:a1:2a:1c:e2:b0:c0:66:45:66:22:b2:
                    e7:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1A:D8:80:26:57:A2:32:E1:20:E7:98:E2:C7:48:DE:CB:DA:73:EE:00
            X509v3 Authority Key Identifier:
                keyid:B9:FA:DC:41:E7:E1:F9:75:6C:7B:C9:B3:DE:39:72:CB:F6:CF:60:B5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9140562/66C3C97EEDF911EFA9CDA838C4F9AE02/ufrcQefh-XVse8mz3jlyy_bPYLU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ufrcQefh-XVse8mz3jlyy_bPYLU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9140562/66C3C97EEDF911EFA9CDA838C4F9AE02/5FCE01D8EDFA11EF8193933AC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  163.61.91.0/24

    Signature Algorithm: sha256WithRSAEncryption
         58:5f:99:15:05:51:98:da:ee:b4:a8:36:d2:b9:0a:d8:8f:4e:
         9c:36:bd:df:3e:8b:06:06:b5:78:9e:d1:30:37:d1:66:98:46:
         6a:d6:da:a3:d0:77:b7:34:d0:09:2f:18:60:f3:ce:ba:cd:b7:
         79:b9:51:2e:84:59:91:32:e9:7c:a8:fd:70:1a:33:d9:0d:7e:
         d8:b4:d9:a9:3a:ed:a7:10:6b:dc:e9:92:51:54:54:60:11:02:
         b8:2b:63:0c:4d:b2:2f:f8:d6:73:0c:cc:b0:e6:11:72:d7:af:
         33:44:9f:1b:f7:ca:92:8b:69:23:7a:ea:b5:d8:83:8a:73:59:
         dc:71:38:d1:2d:e9:45:38:69:55:4b:c5:11:18:c6:80:6f:85:
         de:d8:65:94:1c:3c:48:85:c5:2a:15:ea:cf:dc:cb:31:72:97:
         1a:7f:86:29:b9:20:aa:cf:84:0f:1e:21:14:e3:d8:ce:7b:6c:
         ea:70:46:18:25:be:30:f3:b0:56:eb:fb:31:3b:de:e6:b8:3e:
         1a:c9:0e:76:c9:f0:85:7b:d6:42:e5:46:7e:b5:c1:f2:d1:8e:
         b1:1b:1a:cd:0d:c8:84:71:50:76:7e:05:5d:85:b1:7a:5b:df:
         b9:73:4f:46:aa:6d:93:ef:9c:7e:18:18:cf:1c:2d:32:ae:8b:
         e8:29:8e:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 02:18:16 2025 by rpki-client