Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9116372/E6D9526059A011F08286D332C4F9AE02/BD71164A59A211F09EC86C38C4F9AE02.roa
File:                     BD71164A59A211F09EC86C38C4F9AE02.roa (raw, json)
Hash identifier:          LzVxtpFkoDUrbmBrIAWx2A82oGmfgpKdIsb6/8/yXfI=
Subject key identifier:   20:AF:2A:58:0F:C9:BF:C9:01:DB:A6:C5:CB:80:1A:70:7D:80:01:1D
Certificate issuer:       /CN=A9116372/serialNumber=5E60B84DB91B6C0865020CE0F206C5349E4B8348
Certificate serial:       02
Authority key identifier: 5E:60:B8:4D:B9:1B:6C:08:65:02:0C:E0:F2:06:C5:34:9E:4B:83:48
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XmC4TbkbbAhlAgzg8gbFNJ5Lg0g.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9116372/E6D9526059A011F08286D332C4F9AE02/BD71164A59A211F09EC86C38C4F9AE02.roa
Signing time:             Sat 05 Jul 2025 13:19:55 +0000
ROA not before:           Sat 05 Jul 2025 13:19:55 +0000
ROA not after:            Thu 28 May 2026 00:00:00 +0000
asID:                     153739
IP address blocks:        163.223.200.0/24 maxlen: 24
                          2001:df5:49c0::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9116372/E6D9526059A011F08286D332C4F9AE02/XmC4TbkbbAhlAgzg8gbFNJ5Lg0g.crl
                          rsync://rpki.apnic.net/member_repository/A9116372/E6D9526059A011F08286D332C4F9AE02/XmC4TbkbbAhlAgzg8gbFNJ5Lg0g.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XmC4TbkbbAhlAgzg8gbFNJ5Lg0g.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 14 Jul 2025 08:36:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2 (0x2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9116372, serialNumber=5E60B84DB91B6C0865020CE0F206C5349E4B8348
        Validity
            Not Before: Jul  5 13:19:55 2025 GMT
            Not After : May 28 00:00:00 2026 GMT
        Subject: CN=6869267a-419c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:4f:5d:e9:f3:5c:59:52:7e:fc:ca:45:06:2d:
                    ac:74:e3:d0:55:a3:4d:5b:d1:d7:8d:5b:31:a4:39:
                    d7:7a:6e:f0:20:54:db:03:55:3a:72:52:c7:f1:23:
                    4d:c9:e8:4f:c1:21:a2:2f:dd:83:40:2e:cf:33:ad:
                    f3:e7:cc:87:d7:01:9b:8d:57:03:96:51:34:7b:53:
                    2f:e7:d4:db:c5:30:1c:8e:ef:cc:97:47:e9:ac:3c:
                    e4:20:c1:d6:57:eb:64:34:cd:e4:2c:1a:d0:65:8a:
                    87:e4:83:b2:a1:26:de:fd:91:01:6c:c7:cf:14:5b:
                    ef:8a:01:32:60:f3:d6:9e:a1:20:2f:bc:f3:8b:76:
                    36:fa:12:75:c9:4f:e1:8d:0a:64:84:e7:f7:93:f9:
                    b8:6c:02:94:02:fe:34:07:c2:25:9e:8a:d8:48:4c:
                    0b:bf:6f:f7:e0:48:63:c9:d5:28:61:5a:b9:f6:dc:
                    33:14:e9:34:93:b1:af:52:98:ae:2b:ad:2a:ee:a4:
                    40:87:0e:bf:bb:f0:1e:9c:ed:94:b5:45:49:cb:83:
                    75:67:dd:17:88:d9:ae:bf:6e:3d:ce:32:01:f8:e8:
                    05:a5:86:38:bd:00:e2:ec:d4:5b:49:96:86:da:dc:
                    9c:74:a8:d9:4c:9d:48:54:2a:e8:ec:bd:9d:56:89:
                    5f:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                20:AF:2A:58:0F:C9:BF:C9:01:DB:A6:C5:CB:80:1A:70:7D:80:01:1D
            X509v3 Authority Key Identifier:
                keyid:5E:60:B8:4D:B9:1B:6C:08:65:02:0C:E0:F2:06:C5:34:9E:4B:83:48

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9116372/E6D9526059A011F08286D332C4F9AE02/XmC4TbkbbAhlAgzg8gbFNJ5Lg0g.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XmC4TbkbbAhlAgzg8gbFNJ5Lg0g.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9116372/E6D9526059A011F08286D332C4F9AE02/BD71164A59A211F09EC86C38C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  163.223.200.0/24
                IPv6:
                  2001:df5:49c0::/48

    Signature Algorithm: sha256WithRSAEncryption
         4a:89:ef:37:2a:cd:a7:37:61:15:a0:53:74:37:94:a9:aa:cf:
         90:c1:eb:4f:89:29:b3:63:cf:a0:f8:0b:e9:6b:44:f3:f7:66:
         a9:e0:f8:0f:69:2f:1c:92:dd:e6:78:13:f5:e0:64:cb:25:e1:
         5c:a1:39:da:17:76:2e:4c:e7:0c:62:06:8d:b7:8c:77:13:80:
         44:bb:33:3c:8b:a8:8a:70:5a:b9:0c:e4:00:71:60:5f:a7:d5:
         da:e0:cd:d5:65:2c:2f:59:54:d4:14:95:47:53:d7:1a:82:6a:
         5d:f9:11:e8:5c:0a:33:bc:df:af:ba:f8:d9:b9:b6:24:7b:25:
         74:19:fe:c3:6e:84:11:53:63:f1:40:e0:cd:d6:d7:ab:20:b1:
         e4:ee:4a:cb:84:96:33:cd:35:7f:2d:9f:0c:56:c2:9b:76:b5:
         89:2c:b0:b6:4a:24:a3:64:2c:04:73:d8:1a:61:22:95:35:9f:
         11:e4:bf:d5:de:39:b3:67:87:b7:56:73:03:1c:6b:c4:02:3f:
         e8:b2:b2:1a:f7:25:ec:79:9e:6f:14:1e:b0:62:e5:29:a5:5e:
         c5:d3:d0:4f:c6:34:a2:94:15:d7:7b:31:19:e5:00:b1:48:40:
         9c:07:e1:97:78:66:6d:6d:ea:7a:ac:d0:19:cf:43:6a:c8:32:
         ac:49:69:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 7 14:15:08 2025 by rpki-client