Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A916B18B/F98B5F0C21F911E896C1DD23C4F9AE02/F053A1CAC28B11EBBF310469C4F9AE02.roa
File:                     F053A1CAC28B11EBBF310469C4F9AE02.roa (raw, json)
Hash identifier:          o4sVUAvBbfXlH+Fkt0MhUocTngit2NpPuryfYPu2kLw=
Subject key identifier:   9B:70:8C:90:AF:08:7F:9D:D2:E2:CB:85:BE:14:38:A8:EC:27:D8:EE
Certificate issuer:       /CN=A916B18B/serialNumber=368F3C938B601412521A3A819009978FCFE91E7E
Certificate serial:       16B7
Authority key identifier: 36:8F:3C:93:8B:60:14:12:52:1A:3A:81:90:09:97:8F:CF:E9:1E:7E
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/No88k4tgFBJSGjqBkAmXj8_pHn4.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A916B18B/F98B5F0C21F911E896C1DD23C4F9AE02/F053A1CAC28B11EBBF310469C4F9AE02.roa
Signing time:             Sun 22 Dec 2024 16:54:08 +0000
ROA not before:           Sun 22 Dec 2024 16:54:08 +0000
ROA not after:            Sat 31 Jan 2026 00:00:00 +0000
asID:                     139034
IP address blocks:        161.49.149.0/24 maxlen: 24
                          161.49.193.0/24 maxlen: 24
                          161.49.195.0/24 maxlen: 24
                          161.49.198.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A916B18B/F98B5F0C21F911E896C1DD23C4F9AE02/No88k4tgFBJSGjqBkAmXj8_pHn4.crl
                          rsync://rpki.apnic.net/member_repository/A916B18B/F98B5F0C21F911E896C1DD23C4F9AE02/No88k4tgFBJSGjqBkAmXj8_pHn4.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/No88k4tgFBJSGjqBkAmXj8_pHn4.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 11 Apr 2025 16:42:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 5815 (0x16b7)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A916B18B
        Validity
            Not Before: Dec 22 16:54:08 2024 GMT
            Not After : Jan 31 00:00:00 2026 GMT
        Subject: CN=67684430-4f53
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:2f:26:f7:65:63:d7:3e:94:df:5b:e7:74:35:
                    d5:a6:03:57:a0:f4:d9:fd:10:1e:a4:e2:fb:4d:c1:
                    ae:01:9e:94:0c:e8:e2:f6:66:7e:1f:8a:66:00:04:
                    8a:42:43:2d:b1:1d:8e:16:2c:01:87:1c:70:19:c4:
                    42:a0:e7:9f:43:c3:1c:c7:ae:9f:0d:44:c1:93:29:
                    31:ac:78:88:99:c7:25:e4:da:be:97:4c:a3:6e:61:
                    e5:ae:06:af:55:4b:de:56:dd:8f:5d:5d:3e:b7:0f:
                    60:e0:c9:89:f3:7e:88:a8:7e:89:f2:fb:bf:80:7b:
                    3b:4c:21:c9:a0:b6:98:16:f3:33:7b:a2:6c:27:8d:
                    52:0b:89:61:47:79:f9:30:3c:65:33:85:88:41:80:
                    d5:a0:e6:5d:f2:69:68:8f:8c:4f:c0:48:3c:72:f7:
                    70:ac:f8:8c:72:86:1a:b6:9b:ee:e5:fe:57:a5:f2:
                    26:ee:76:61:a4:e3:72:ad:c7:eb:21:d9:29:d5:af:
                    89:65:41:b1:5f:c2:0e:67:33:b0:0f:d7:a3:17:c0:
                    63:c8:c0:1a:e5:78:a2:63:3b:e2:fe:53:5d:57:74:
                    a1:6b:48:f3:5b:ac:2c:c0:41:9d:9a:97:e2:88:4f:
                    d5:b5:f4:a3:a0:84:8d:53:f5:eb:ed:38:70:01:5b:
                    db:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9B:70:8C:90:AF:08:7F:9D:D2:E2:CB:85:BE:14:38:A8:EC:27:D8:EE
            X509v3 Authority Key Identifier:
                keyid:36:8F:3C:93:8B:60:14:12:52:1A:3A:81:90:09:97:8F:CF:E9:1E:7E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A916B18B/F98B5F0C21F911E896C1DD23C4F9AE02/No88k4tgFBJSGjqBkAmXj8_pHn4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/No88k4tgFBJSGjqBkAmXj8_pHn4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916B18B/F98B5F0C21F911E896C1DD23C4F9AE02/F053A1CAC28B11EBBF310469C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  161.49.149.0/24
                  161.49.193.0/24
                  161.49.195.0/24
                  161.49.198.0/24

    Signature Algorithm: sha256WithRSAEncryption
         2b:15:1f:29:65:34:08:09:07:d3:5f:32:6b:07:ed:be:10:51:
         58:e6:c2:f1:bf:7b:f4:0f:b1:df:58:2c:5b:81:d1:ea:73:b2:
         59:63:84:b4:33:e3:9a:0f:af:d3:df:29:30:2c:ac:32:69:93:
         8f:cd:cc:8d:71:f5:16:98:49:b2:75:52:46:a2:9f:39:0b:44:
         aa:07:24:de:82:68:a1:30:79:5d:05:e9:69:1e:bb:06:a2:81:
         d2:ee:e4:4f:e3:20:d9:9e:ea:7d:73:a9:67:0a:0a:05:74:3b:
         b6:4d:3e:dd:4e:9f:83:31:e3:dd:54:5d:0d:4c:94:0c:c0:2e:
         06:6f:21:cb:55:1f:18:a1:de:1d:58:4c:eb:e6:90:a4:96:61:
         97:02:8a:48:67:d7:1a:50:26:7a:49:ca:6e:ee:b8:2a:87:3a:
         db:9b:35:c0:0e:c0:09:58:ec:8d:d0:b1:dc:70:1e:7a:12:ad:
         97:78:8e:e2:74:63:de:89:8d:74:86:2e:e4:4b:7a:2d:c4:51:
         f1:3d:58:71:6d:bd:32:57:8e:16:5d:7a:5b:c0:70:9b:cc:8c:
         e9:a4:2e:d4:6d:50:35:90:f4:e1:a8:3f:0a:6b:04:cb:da:61:
         19:16:47:d9:48:93:d0:5d:f7:fb:64:ba:cd:7f:0c:ef:6b:b1:
         6b:dc:2a:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 01:36:41 2025 by rpki-client