Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91964B3/E65851121D8411E2A1BA30DB08B02CD2/160B219870BA11E99E0F6D2DC4F9AE02.roa
File:                     160B219870BA11E99E0F6D2DC4F9AE02.roa (raw, json)
Hash identifier:          3QqIb/PpEMe7CSOMb9cfzIUcXW1tet3HABkiD8A3zkU=
Subject key identifier:   F7:82:3A:B7:6B:8F:F8:13:2E:08:8F:4E:A2:64:9F:05:5B:16:7A:F7
Certificate issuer:       /CN=A91964B3/serialNumber=B39866A99D1CD9F4E7E8F53C88AD14DA89A18625
Certificate serial:       35C9
Authority key identifier: B3:98:66:A9:9D:1C:D9:F4:E7:E8:F5:3C:88:AD:14:DA:89:A1:86:25
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/s5hmqZ0c2fTn6PU8iK0U2omhhiU.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91964B3/E65851121D8411E2A1BA30DB08B02CD2/160B219870BA11E99E0F6D2DC4F9AE02.roa
Signing time:             Mon 30 Dec 2024 14:26:43 +0000
ROA not before:           Mon 30 Dec 2024 14:26:43 +0000
ROA not after:            Mon 02 Mar 2026 00:00:00 +0000
asID:                     137670
IP address blocks:        59.144.189.0/24 maxlen: 24
                          59.145.68.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91964B3/E65851121D8411E2A1BA30DB08B02CD2/s5hmqZ0c2fTn6PU8iK0U2omhhiU.crl
                          rsync://rpki.apnic.net/member_repository/A91964B3/E65851121D8411E2A1BA30DB08B02CD2/s5hmqZ0c2fTn6PU8iK0U2omhhiU.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/s5hmqZ0c2fTn6PU8iK0U2omhhiU.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 11 Apr 2025 14:24:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 13769 (0x35c9)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91964B3
        Validity
            Not Before: Dec 30 14:26:43 2024 GMT
            Not After : Mar  2 00:00:00 2026 GMT
        Subject: CN=6772ada3-c77f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:b9:5c:61:cc:2a:d1:91:17:63:b2:5d:f6:2b:
                    1c:a8:80:d9:03:48:3b:20:ab:90:34:dc:2f:c0:15:
                    4a:f0:c5:91:38:d6:8a:2f:e0:e1:3c:cf:f6:16:4b:
                    b3:91:3d:0d:4f:5f:f1:b0:c0:ae:58:42:64:cf:68:
                    e2:8b:ed:0b:ee:eb:bf:0e:cd:c8:67:24:c4:bb:5b:
                    47:8c:ef:be:09:49:7b:62:23:10:d4:65:ee:90:34:
                    91:70:77:e4:0c:31:8d:01:52:93:f9:40:35:be:4e:
                    94:8b:0c:98:9d:6c:41:49:fa:27:3a:69:56:f5:f4:
                    14:de:3c:c4:68:b7:ed:29:65:18:f7:cb:a9:aa:af:
                    30:66:1c:a9:91:ba:19:df:d1:fd:98:1a:93:43:0d:
                    08:45:82:84:e5:cd:8d:98:e7:d7:de:ff:6b:54:53:
                    2e:bc:35:4b:6c:b4:37:dc:c4:56:7a:ea:75:a4:0e:
                    46:27:1e:0e:3d:70:84:cf:68:10:96:03:b3:07:2e:
                    f1:b1:ce:c6:d9:bc:73:51:da:8c:d8:b2:9e:b5:ac:
                    e1:c8:94:39:47:6b:4d:1b:66:77:d0:8d:59:ea:48:
                    e0:50:e6:99:74:83:3c:8c:89:9a:06:c3:fc:57:03:
                    4a:85:af:a7:49:9e:36:62:c8:76:ab:48:1c:9f:35:
                    0f:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F7:82:3A:B7:6B:8F:F8:13:2E:08:8F:4E:A2:64:9F:05:5B:16:7A:F7
            X509v3 Authority Key Identifier:
                keyid:B3:98:66:A9:9D:1C:D9:F4:E7:E8:F5:3C:88:AD:14:DA:89:A1:86:25

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91964B3/E65851121D8411E2A1BA30DB08B02CD2/s5hmqZ0c2fTn6PU8iK0U2omhhiU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/s5hmqZ0c2fTn6PU8iK0U2omhhiU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91964B3/E65851121D8411E2A1BA30DB08B02CD2/160B219870BA11E99E0F6D2DC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  59.144.189.0/24
                  59.145.68.0/24

    Signature Algorithm: sha256WithRSAEncryption
         11:23:7d:62:0f:18:25:07:c3:ad:3f:bd:d0:7b:2d:74:1b:11:
         e5:cd:81:5f:1f:9e:48:f0:53:14:bb:cf:d2:ee:ab:55:cd:3b:
         80:44:b7:e3:1d:04:e5:38:22:8c:d1:ad:c2:74:30:7e:18:b8:
         71:30:5d:98:e5:8a:0e:86:0d:b2:19:7a:08:c5:0a:da:d0:67:
         ce:d7:47:e0:0b:80:2f:8f:57:b8:8e:45:b4:0e:a0:bd:2d:c0:
         74:2f:5b:ed:7e:cb:6c:ed:59:99:25:79:ca:a5:79:8e:0e:32:
         c0:1e:1d:a6:65:3c:cb:37:61:fb:cd:a2:83:f3:26:b7:27:e0:
         bd:eb:29:ab:ba:6e:27:0f:5e:ed:3b:f1:2b:16:b4:86:24:58:
         5d:57:e8:13:cc:aa:b6:d0:cc:0d:2f:11:4a:4e:6e:46:3a:80:
         40:95:d7:90:37:d1:1c:80:b5:13:bf:f0:1d:26:64:e4:e1:fc:
         dd:04:3f:ff:6b:92:fd:c2:d9:a3:c0:5f:75:34:92:70:d4:2a:
         39:b1:52:7b:7c:4b:8a:8f:9a:ea:a0:b9:c7:6a:c4:4c:dc:62:
         c6:67:48:d2:3f:d2:62:42:ff:3e:06:16:bd:27:2d:b5:1b:7a:
         64:fc:8f:77:46:34:db:b0:4f:7a:f2:c8:63:ea:79:ee:ba:c1:
         ba:b2:db:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 02:22:47 2025 by rpki-client