Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9175648/218F268ADC9E11EF8B62DD5FC4F9AE02/2CE4F16E11F911F0B7225856C4F9AE02.roa
File:                     2CE4F16E11F911F0B7225856C4F9AE02.roa (raw, json)
Hash identifier:          XtyfH63MsESvPLNQmWUPINooct0XYWOpdD24vf01OpI=
Subject key identifier:   B9:79:FC:64:58:CF:A5:9A:56:A5:64:94:FA:F2:E6:23:BB:4E:FC:33
Certificate issuer:       /CN=A9175648/serialNumber=2C1C07D151271969E13E1CFD161B1F60770E290D
Certificate serial:       65
Authority key identifier: 2C:1C:07:D1:51:27:19:69:E1:3E:1C:FD:16:1B:1F:60:77:0E:29:0D
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LBwH0VEnGWnhPhz9FhsfYHcOKQ0.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9175648/218F268ADC9E11EF8B62DD5FC4F9AE02/2CE4F16E11F911F0B7225856C4F9AE02.roa
Signing time:             Sat 05 Apr 2025 08:38:11 +0000
ROA not before:           Sat 05 Apr 2025 08:38:11 +0000
ROA not after:            Fri 01 May 2026 00:00:00 +0000
asID:                     141385
IP address blocks:        163.61.16.0/24 maxlen: 24
                          2001:df5:c0::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9175648/218F268ADC9E11EF8B62DD5FC4F9AE02/LBwH0VEnGWnhPhz9FhsfYHcOKQ0.crl
                          rsync://rpki.apnic.net/member_repository/A9175648/218F268ADC9E11EF8B62DD5FC4F9AE02/LBwH0VEnGWnhPhz9FhsfYHcOKQ0.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LBwH0VEnGWnhPhz9FhsfYHcOKQ0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 12 Apr 2025 08:43:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 101 (0x65)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9175648
        Validity
            Not Before: Apr  5 08:38:11 2025 GMT
            Not After : May  1 00:00:00 2026 GMT
        Subject: CN=67f0ebf3-df8f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e7:da:30:0c:ef:a9:a5:60:d2:e0:49:5b:6d:b5:
                    5b:bc:95:66:2d:59:1e:4b:65:3c:5b:70:e8:26:56:
                    a1:f5:25:79:df:88:63:2e:7f:75:f6:72:f3:6b:de:
                    08:d7:52:df:1f:d4:92:64:88:2a:73:32:7d:fc:76:
                    1a:bf:ff:88:d9:9d:67:60:98:0d:1f:55:a2:82:17:
                    dc:2c:68:57:c9:1b:ea:23:a1:27:20:d6:da:6a:2f:
                    1b:a7:4e:ba:14:f8:b6:16:d0:8f:d7:02:76:97:66:
                    c4:97:ea:bb:59:7c:2d:8c:34:0e:0c:81:93:2a:3b:
                    bb:f9:22:66:d1:1d:24:e6:d9:3d:69:74:ba:fb:c0:
                    a2:5d:c6:e2:5f:c5:06:fb:dd:ab:93:7f:bd:5b:6c:
                    ad:c9:a0:51:51:b2:83:b9:9d:7a:ef:b8:89:22:84:
                    91:80:14:62:a9:6b:6b:68:fb:01:f1:61:f7:6b:6c:
                    84:63:a2:aa:f9:2b:75:53:a8:b1:df:52:0d:3a:02:
                    b3:b9:db:a2:5a:e5:f2:41:6d:85:d1:a9:78:e5:26:
                    95:c2:30:38:f4:de:1e:b1:ac:e0:fe:93:7d:f3:81:
                    8b:26:2d:f3:66:34:38:3e:40:b4:e7:96:f9:ab:8d:
                    c7:c6:5e:0b:55:53:d6:f9:28:85:3f:f7:78:08:42:
                    16:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B9:79:FC:64:58:CF:A5:9A:56:A5:64:94:FA:F2:E6:23:BB:4E:FC:33
            X509v3 Authority Key Identifier:
                keyid:2C:1C:07:D1:51:27:19:69:E1:3E:1C:FD:16:1B:1F:60:77:0E:29:0D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9175648/218F268ADC9E11EF8B62DD5FC4F9AE02/LBwH0VEnGWnhPhz9FhsfYHcOKQ0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LBwH0VEnGWnhPhz9FhsfYHcOKQ0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9175648/218F268ADC9E11EF8B62DD5FC4F9AE02/2CE4F16E11F911F0B7225856C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  163.61.16.0/24
                IPv6:
                  2001:df5:c0::/48

    Signature Algorithm: sha256WithRSAEncryption
         32:3b:95:b6:36:60:f4:7d:a2:70:32:cd:d4:d9:9c:99:13:9a:
         52:35:b8:bf:7c:9d:76:01:1b:5f:5c:93:b3:48:58:81:c0:07:
         33:6d:73:f6:d7:67:e3:f7:b0:a3:a0:35:2d:b0:59:fe:71:1a:
         4b:ad:42:38:ed:e2:cc:ed:c7:c7:dd:b0:1b:27:e5:97:ac:3d:
         7f:df:55:7c:d0:6f:46:c8:7f:eb:25:1a:d7:c3:07:09:76:f4:
         80:9f:3a:b7:f5:45:19:ff:70:64:e2:16:55:80:e1:0e:5a:a8:
         3f:1e:2f:b7:ab:74:0e:4c:de:83:46:6c:9d:6d:12:09:15:4a:
         92:66:d8:df:af:30:ea:60:e4:5e:8a:8c:e4:eb:a9:68:3a:06:
         aa:8f:67:6a:c7:d0:60:7a:28:c9:ad:c5:66:c5:8f:0a:32:f8:
         46:61:83:05:f8:67:97:6b:10:da:75:ec:1d:10:96:93:e5:c9:
         3e:1f:16:ef:4f:14:54:fc:68:62:92:26:2e:40:b1:3f:bb:f7:
         90:61:d1:47:b8:2c:86:53:3f:c0:a8:69:dd:29:ec:2b:74:1b:
         72:28:2a:91:1d:6f:50:35:03:4c:2a:f3:6a:86:e5:41:01:ab:
         21:97:6b:25:1a:ea:22:52:ed:f2:39:44:fb:b7:e2:f5:29:ef:
         85:bd:3e:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 01:50:31 2025 by rpki-client