Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9175648/218F268ADC9E11EF8B62DD5FC4F9AE02/1BD61F645C8711F0923DB116C4F9AE02.roa
File:                     1BD61F645C8711F0923DB116C4F9AE02.roa (raw, json)
Hash identifier:          nRkOXuAiT1sPCocq+nXPsFuQBgyiZlYhGRugxDZwnSc=
Subject key identifier:   F3:2F:D3:1D:A4:8A:DC:6B:EF:C1:95:3E:29:69:06:6F:AD:C6:C1:87
Certificate issuer:       /CN=A9175648/serialNumber=2C1C07D151271969E13E1CFD161B1F60770E290D
Certificate serial:       C3
Authority key identifier: 2C:1C:07:D1:51:27:19:69:E1:3E:1C:FD:16:1B:1F:60:77:0E:29:0D
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LBwH0VEnGWnhPhz9FhsfYHcOKQ0.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9175648/218F268ADC9E11EF8B62DD5FC4F9AE02/1BD61F645C8711F0923DB116C4F9AE02.roa
Signing time:             Wed 09 Jul 2025 05:45:18 +0000
ROA not before:           Wed 09 Jul 2025 05:45:18 +0000
ROA not after:            Fri 01 May 2026 00:00:00 +0000
asID:                     141385
IP address blocks:        163.61.16.0/24 maxlen: 24
                          2001:df5:c0::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9175648/218F268ADC9E11EF8B62DD5FC4F9AE02/LBwH0VEnGWnhPhz9FhsfYHcOKQ0.crl
                          rsync://rpki.apnic.net/member_repository/A9175648/218F268ADC9E11EF8B62DD5FC4F9AE02/LBwH0VEnGWnhPhz9FhsfYHcOKQ0.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LBwH0VEnGWnhPhz9FhsfYHcOKQ0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 26 Jul 2025 07:24:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 195 (0xc3)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9175648, serialNumber=2C1C07D151271969E13E1CFD161B1F60770E290D
        Validity
            Not Before: Jul  9 05:45:18 2025 GMT
            Not After : May  1 00:00:00 2026 GMT
        Subject: CN=686e01ee-f1cb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:fc:84:5f:ed:18:14:64:69:93:9d:e0:f9:ac:5d:
                    f9:bb:b6:b9:79:ba:8d:e1:d0:19:9e:10:aa:0a:fb:
                    84:f3:e2:6c:bf:97:b0:b9:cd:5a:f5:dc:fa:05:33:
                    81:49:be:43:55:66:2d:d8:2f:f7:04:10:3f:c4:9c:
                    00:a9:d9:4b:4d:b3:49:e4:39:a2:1e:19:fc:a7:52:
                    4f:a2:69:38:7f:42:f2:3f:23:ea:cd:fe:b0:35:ae:
                    57:39:16:06:d2:21:2b:ea:9d:3a:55:f7:d8:77:b9:
                    5f:24:62:c8:7f:7d:b4:6e:2b:13:d7:54:a7:bf:e2:
                    dd:df:1a:ca:32:e4:f8:cb:43:f5:79:b1:56:4a:fc:
                    4b:17:38:eb:e2:1e:aa:25:90:c1:b2:17:ad:8d:a5:
                    be:aa:56:95:c5:ae:ff:a9:1a:6e:08:b7:24:ea:43:
                    41:a7:83:0f:17:89:82:51:44:3e:b3:e4:4b:b5:0b:
                    0f:f8:d7:b6:69:23:49:5f:f0:a5:52:82:46:f2:75:
                    cb:30:6e:35:f4:72:11:45:78:0b:11:f2:73:83:68:
                    29:4a:6d:a6:fb:b1:ea:2c:d6:b3:48:b1:7a:21:83:
                    05:23:d6:7b:dd:92:a4:58:c8:25:b6:e0:17:db:49:
                    a6:ea:0c:a2:68:ed:d3:ee:e5:23:2b:db:5c:03:16:
                    9a:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F3:2F:D3:1D:A4:8A:DC:6B:EF:C1:95:3E:29:69:06:6F:AD:C6:C1:87
            X509v3 Authority Key Identifier:
                keyid:2C:1C:07:D1:51:27:19:69:E1:3E:1C:FD:16:1B:1F:60:77:0E:29:0D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9175648/218F268ADC9E11EF8B62DD5FC4F9AE02/LBwH0VEnGWnhPhz9FhsfYHcOKQ0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LBwH0VEnGWnhPhz9FhsfYHcOKQ0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9175648/218F268ADC9E11EF8B62DD5FC4F9AE02/1BD61F645C8711F0923DB116C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  163.61.16.0/24
                IPv6:
                  2001:df5:c0::/48

    Signature Algorithm: sha256WithRSAEncryption
         3b:d4:de:e0:ed:d2:c5:15:88:f1:61:5d:cf:bf:c2:f6:10:2b:
         cc:0f:5e:90:53:75:40:30:2b:6f:d2:42:8b:c9:74:7e:f4:0b:
         5e:57:fc:54:5e:a3:f4:d7:f6:8f:bd:92:b8:11:f8:1e:d0:6c:
         14:20:0d:fa:da:76:f7:e2:ba:69:f7:3b:53:67:ce:79:c6:03:
         6d:c9:1e:fc:08:e8:a1:01:2c:74:1e:d8:21:05:79:6b:d6:c2:
         c6:48:54:74:28:62:2e:65:2c:ca:e7:89:63:8a:53:c0:1b:03:
         a9:39:99:3d:b1:57:05:0d:fc:f0:64:66:2d:c5:8d:e5:88:23:
         ff:1a:b0:e1:e1:45:a0:1f:d8:cd:9f:a1:88:41:9c:95:e8:84:
         f0:39:37:48:31:fe:da:a7:8f:b7:b9:b1:31:da:0d:47:ea:ec:
         1a:9a:a6:b4:54:ee:b1:c3:c9:7d:ba:07:61:49:7a:c7:64:9c:
         8d:59:26:b6:b5:9c:58:60:d3:6d:a2:50:09:8b:d3:fa:51:72:
         c6:98:64:49:fe:41:06:79:3a:62:e8:0f:a4:77:f5:67:e2:02:
         58:09:62:20:92:fe:66:3a:fd:00:72:4f:7a:b2:f5:08:a6:96:
         4a:90:a0:76:1b:4b:ec:36:7e:96:90:fe:89:44:e5:57:58:1e:
         36:16:82:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 20 15:15:49 2025 by rpki-client