Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9120974/E105B3BA3A4911E9940F2D16C4F9AE02/6B1B75BC756311EFB6C7E64CC4F9AE02.roa
File:                     6B1B75BC756311EFB6C7E64CC4F9AE02.roa (raw, json)
Hash identifier:          7SbyZl6WzchDvPbf0/nq4tvYfqbtpgq7UAgLfrYKHTw=
Subject key identifier:   75:45:13:A9:A8:DD:14:D7:EA:52:B2:FF:78:D9:4C:DF:F1:0E:F6:7B
Certificate issuer:       /CN=A9120974/serialNumber=AC8864263824EDE3655B99742DFB39E883BB9145
Certificate serial:       1052
Authority key identifier: AC:88:64:26:38:24:ED:E3:65:5B:99:74:2D:FB:39:E8:83:BB:91:45
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/rIhkJjgk7eNlW5l0Lfs56IO7kUU.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9120974/E105B3BA3A4911E9940F2D16C4F9AE02/6B1B75BC756311EFB6C7E64CC4F9AE02.roa
Signing time:             Fri 16 May 2025 17:51:20 +0000
ROA not before:           Fri 16 May 2025 17:51:19 +0000
ROA not after:            Thu 30 Jul 2026 00:00:00 +0000
asID:                     132203
IP address blocks:        162.14.60.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9120974/E105B3BA3A4911E9940F2D16C4F9AE02/rIhkJjgk7eNlW5l0Lfs56IO7kUU.crl
                          rsync://rpki.apnic.net/member_repository/A9120974/E105B3BA3A4911E9940F2D16C4F9AE02/rIhkJjgk7eNlW5l0Lfs56IO7kUU.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/rIhkJjgk7eNlW5l0Lfs56IO7kUU.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 11 Jun 2025 17:24:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4178 (0x1052)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9120974, serialNumber=AC8864263824EDE3655B99742DFB39E883BB9145
        Validity
            Not Before: May 16 17:51:19 2025 GMT
            Not After : Jul 30 00:00:00 2026 GMT
        Subject: CN=68277b17-192a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:49:e5:5e:2e:2b:62:88:1c:2c:de:a3:0c:a8:
                    de:6c:2d:c5:2b:bc:fb:a4:9d:ea:51:53:88:8e:af:
                    d9:41:14:29:72:e6:17:a9:0c:a6:17:b6:11:f1:f4:
                    f4:7d:7d:fa:a3:a1:b9:28:92:1d:43:a2:74:a2:80:
                    88:3a:2b:d1:f5:2c:2d:83:c5:d0:22:c0:de:79:e1:
                    8a:64:90:67:3b:b7:7e:2d:58:80:e1:ff:94:c2:9c:
                    7c:74:c4:4c:50:55:94:ae:b6:7d:c9:60:69:5f:ab:
                    02:a0:7b:b5:9f:a1:c2:86:09:16:67:17:e0:37:38:
                    a0:ee:a8:f5:42:f6:18:f0:38:5a:2b:79:2f:ee:a4:
                    bc:09:ae:cc:33:b6:4f:fb:bb:c0:47:ab:b1:f8:d4:
                    ca:b1:81:25:fd:b3:41:3a:ce:fa:ee:45:97:82:81:
                    78:ed:de:49:2d:5f:28:36:7a:5c:cb:37:ae:0a:73:
                    ad:6c:08:d6:11:b4:75:6a:d2:94:27:10:f1:7a:49:
                    5a:49:f7:52:34:7b:3a:1e:10:38:11:77:bf:97:a0:
                    98:00:12:e1:d2:50:f1:9e:6d:ef:56:06:45:72:e2:
                    c1:4b:25:82:08:3c:d6:4d:7b:d2:27:a0:b0:74:ec:
                    32:ef:d7:7c:b1:33:c7:52:d9:66:a5:19:b7:ce:57:
                    fa:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                75:45:13:A9:A8:DD:14:D7:EA:52:B2:FF:78:D9:4C:DF:F1:0E:F6:7B
            X509v3 Authority Key Identifier:
                keyid:AC:88:64:26:38:24:ED:E3:65:5B:99:74:2D:FB:39:E8:83:BB:91:45

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9120974/E105B3BA3A4911E9940F2D16C4F9AE02/rIhkJjgk7eNlW5l0Lfs56IO7kUU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/rIhkJjgk7eNlW5l0Lfs56IO7kUU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9120974/E105B3BA3A4911E9940F2D16C4F9AE02/6B1B75BC756311EFB6C7E64CC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  162.14.60.0/22

    Signature Algorithm: sha256WithRSAEncryption
         40:d1:11:8f:88:c6:52:ea:a7:1e:96:0d:24:41:00:36:f4:a6:
         b1:b1:a0:07:e6:39:2b:57:b1:92:eb:27:f4:fd:c2:f7:3c:a2:
         2a:2b:d2:75:73:9e:be:85:42:d4:a3:63:c5:70:d1:60:e1:26:
         76:80:ae:1e:26:06:d0:64:c8:76:4c:16:56:b7:e9:4a:db:66:
         b3:74:aa:5b:86:a5:f9:74:3c:f4:85:6d:16:66:bd:4e:8c:f2:
         c6:1c:00:d2:f5:9f:13:86:ba:1b:b5:90:e2:ea:03:6e:3c:36:
         dc:a8:b4:43:33:ac:b1:eb:94:7b:5a:64:c1:65:12:b7:fd:27:
         fe:15:7e:f2:e8:02:78:a8:a2:89:f4:9e:52:7d:e4:a1:1e:05:
         11:6f:0d:15:14:39:46:c4:2f:f2:e6:2f:a9:13:bc:51:8e:78:
         83:0f:51:9f:bd:72:48:a8:b1:cc:42:21:3d:99:38:0a:01:ac:
         56:00:da:66:48:f5:4c:07:9d:4b:68:27:69:d3:81:2e:8c:c2:
         17:87:36:6e:67:3a:86:a3:be:b3:7d:3e:ed:9c:13:1e:eb:a3:
         98:ec:16:b1:98:cb:92:86:03:8e:b7:fd:c0:ba:7f:36:bb:ca:
         3b:cc:6d:27:84:a2:bd:6f:b2:fe:95:c7:8a:6d:6d:c7:c3:d6:
         f0:25:9a:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 5 19:15:19 2025 by rpki-client