Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9192C72/9D5B5156ECF911EF93A2A213C4F9AE02/C2E1583EECFA11EFA881E216C4F9AE02.roa
File:                     C2E1583EECFA11EFA881E216C4F9AE02.roa (raw, json)
Hash identifier:          Yu5htw9gFwcLd352zvwoy0u2xmOJCVCXwCzZ+nX1BhI=
Subject key identifier:   92:95:26:50:59:09:DA:86:D7:43:30:54:84:A5:87:49:F0:18:95:E6
Certificate issuer:       /CN=A9192C72/serialNumber=3616E01DA3317F09EECA98E7BC754CBC990D7D68
Certificate serial:       02
Authority key identifier: 36:16:E0:1D:A3:31:7F:09:EE:CA:98:E7:BC:75:4C:BC:99:0D:7D:68
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NhbgHaMxfwnuypjnvHVMvJkNfWg.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9192C72/9D5B5156ECF911EF93A2A213C4F9AE02/C2E1583EECFA11EFA881E216C4F9AE02.roa
Signing time:             Mon 17 Feb 2025 06:45:23 +0000
ROA not before:           Mon 17 Feb 2025 06:45:23 +0000
ROA not after:            Thu 28 May 2026 00:00:00 +0000
asID:                     135310
IP address blocks:        163.61.106.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9192C72/9D5B5156ECF911EF93A2A213C4F9AE02/NhbgHaMxfwnuypjnvHVMvJkNfWg.crl
                          rsync://rpki.apnic.net/member_repository/A9192C72/9D5B5156ECF911EF93A2A213C4F9AE02/NhbgHaMxfwnuypjnvHVMvJkNfWg.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NhbgHaMxfwnuypjnvHVMvJkNfWg.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 05 Apr 2025 05:08:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2 (0x2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9192C72
        Validity
            Not Before: Feb 17 06:45:23 2025 GMT
            Not After : May 28 00:00:00 2026 GMT
        Subject: CN=67b2db03-82f7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:01:a1:9d:c4:53:83:76:60:f7:70:e8:99:49:
                    53:8e:a5:52:b2:75:81:4d:e4:6b:a6:1c:72:c2:35:
                    fc:e3:b8:b1:1e:92:d7:20:7a:ca:87:08:7f:60:83:
                    87:ae:7f:42:c9:3c:c7:82:fd:f8:6b:c0:2f:b4:22:
                    21:b8:08:3e:82:2d:98:c2:b4:22:13:58:68:0b:a1:
                    64:c3:ce:bc:a1:7b:89:13:88:54:ea:31:d6:72:4c:
                    1d:95:9f:0b:11:f9:15:94:ca:3a:95:44:cc:22:5d:
                    b8:2c:4d:c1:30:c9:ab:3b:48:6a:e7:35:5b:20:f5:
                    06:99:05:ac:bf:0f:93:a1:b1:7c:af:80:d6:73:e9:
                    8f:22:30:05:a2:6c:cd:f7:d8:f4:01:96:08:31:43:
                    d7:60:89:96:fa:b1:3b:aa:4a:e6:1f:16:f8:c0:14:
                    4f:ca:c4:69:cb:10:c8:a6:21:59:1d:03:1c:4e:3b:
                    3a:34:33:24:87:70:60:dd:f6:d0:34:6f:ad:51:84:
                    74:c8:34:08:25:7e:d5:b4:75:36:49:d9:57:31:e4:
                    6b:9d:d2:d4:6e:ff:3a:ce:1c:61:db:0c:0d:a9:8e:
                    16:bb:81:79:21:b2:16:1b:6d:ff:7c:0e:1a:79:90:
                    49:86:72:7b:f8:8d:cd:e5:4b:e7:31:a1:b0:41:b8:
                    eb:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                92:95:26:50:59:09:DA:86:D7:43:30:54:84:A5:87:49:F0:18:95:E6
            X509v3 Authority Key Identifier:
                keyid:36:16:E0:1D:A3:31:7F:09:EE:CA:98:E7:BC:75:4C:BC:99:0D:7D:68

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9192C72/9D5B5156ECF911EF93A2A213C4F9AE02/NhbgHaMxfwnuypjnvHVMvJkNfWg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NhbgHaMxfwnuypjnvHVMvJkNfWg.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9192C72/9D5B5156ECF911EF93A2A213C4F9AE02/C2E1583EECFA11EFA881E216C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  163.61.106.0/23

    Signature Algorithm: sha256WithRSAEncryption
         57:d3:f1:0f:1b:eb:f9:ab:c6:86:bf:04:98:a8:85:3a:95:08:
         f2:c3:27:92:b7:9e:5d:82:d7:bf:69:ad:f9:e0:3a:d7:17:4d:
         37:0f:b5:6e:f1:13:49:9e:63:66:a6:91:ec:53:77:ee:ed:3e:
         85:40:ca:89:42:09:68:de:ad:a9:41:d2:d3:de:72:b2:f4:b9:
         72:20:d1:fa:ad:cb:15:54:b7:02:9c:ea:72:c2:7e:bb:0b:41:
         4f:99:a8:5f:0a:8b:57:34:3f:70:05:52:6f:d7:c1:db:5d:f2:
         0c:b9:3f:3b:f2:01:94:a2:cd:63:e9:f0:0f:69:13:c0:cb:75:
         eb:1b:9c:6b:5b:9c:70:57:b6:79:e7:97:18:01:21:a9:9b:9d:
         fb:eb:3b:62:e3:b4:31:d0:ad:18:1e:31:2a:04:09:9b:9f:6a:
         da:ce:98:69:dd:dd:de:ac:ea:ff:ed:4f:26:62:e6:75:a0:cc:
         9d:70:8e:a1:49:39:48:38:14:53:dc:18:98:6d:fc:58:47:8a:
         f8:06:5b:db:0b:89:69:b1:0d:59:6f:59:3e:ee:9a:b3:22:0a:
         6f:c1:f1:c0:c3:c1:9f:7c:3f:98:87:53:ac:73:0e:80:27:01:
         3b:aa:be:83:ec:aa:11:7f:76:6c:e8:89:a2:4e:ac:be:65:4b:
         fa:20:5e:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 01:05:56 2025 by rpki-client