Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9161613/30992668E53911EB8A5B9271C4F9AE02/167A6086BBD211EEABCC0D23C4F9AE02.roa
File:                     167A6086BBD211EEABCC0D23C4F9AE02.roa (raw, json)
Hash identifier:          PhfopnuJziyLZIeDEB2RNxZoX6sOg+Sd/H8Lm5oFqYY=
Subject key identifier:   82:C1:B0:50:2D:EE:CA:93:C8:20:B4:D2:62:56:FB:9D:8D:22:AF:46
Certificate issuer:       /CN=A9161613/serialNumber=09FC077F33E3AD67BF147755167A3AD4EACB1E7C
Certificate serial:       04D7
Authority key identifier: 09:FC:07:7F:33:E3:AD:67:BF:14:77:55:16:7A:3A:D4:EA:CB:1E:7C
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CfwHfzPjrWe_FHdVFno61OrLHnw.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9161613/30992668E53911EB8A5B9271C4F9AE02/167A6086BBD211EEABCC0D23C4F9AE02.roa
Signing time:             Sat 27 Jan 2024 01:03:34 +0000
ROA not before:           Sat 27 Jan 2024 01:03:34 +0000
ROA not after:            Wed 28 May 2025 00:00:00 +0000
asID:                     152173
IP address blocks:        61.28.161.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9161613/30992668E53911EB8A5B9271C4F9AE02/CfwHfzPjrWe_FHdVFno61OrLHnw.crl
                          rsync://rpki.apnic.net/member_repository/A9161613/30992668E53911EB8A5B9271C4F9AE02/CfwHfzPjrWe_FHdVFno61OrLHnw.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CfwHfzPjrWe_FHdVFno61OrLHnw.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 29 Nov 2024 20:43:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1239 (0x4d7)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9161613/serialNumber=09FC077F33E3AD67BF147755167A3AD4EACB1E7C
        Validity
            Not Before: Jan 27 01:03:34 2024 GMT
            Not After : May 28 00:00:00 2025 GMT
        Subject: CN=65b45665-df7e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:b7:c0:bc:6e:13:15:07:1d:da:b6:60:7f:92:
                    33:5a:51:cc:3f:fc:2a:73:be:c9:0b:01:98:eb:69:
                    21:44:68:a0:14:c2:25:4b:c7:6a:ae:e2:35:18:4b:
                    24:67:32:8c:5e:35:8c:03:5e:a6:16:0a:6d:fc:6b:
                    26:00:37:67:4c:7c:e7:a0:1e:b0:59:b2:09:a4:f3:
                    85:6e:75:3b:5a:7b:81:c8:f4:b3:b6:db:ed:19:9c:
                    37:a7:be:2e:81:40:e4:b0:e3:17:c2:30:f0:52:df:
                    13:69:ab:12:02:e3:0f:76:b2:de:d2:0e:4d:63:3b:
                    27:09:be:8f:ed:3f:69:30:a8:20:66:5d:e4:2d:11:
                    44:3b:24:38:1f:30:90:c9:98:cf:3b:3d:92:0b:d8:
                    7a:35:df:7d:5b:86:3e:16:d3:76:a3:75:76:03:0f:
                    46:c9:9b:cd:9d:61:46:c0:fa:6a:41:11:dc:9b:d6:
                    04:eb:20:65:f3:7f:b4:ed:6f:1e:e6:e7:59:93:d0:
                    09:eb:57:4a:32:a9:43:cb:2e:62:80:5c:7d:cd:76:
                    34:09:74:78:4d:02:ac:4e:bb:fb:de:28:88:25:e8:
                    4e:ed:2c:ce:ec:cf:78:86:dd:23:9d:82:c8:d9:55:
                    2e:e9:2b:9c:20:86:de:2e:7b:2d:76:89:73:91:0e:
                    58:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                82:C1:B0:50:2D:EE:CA:93:C8:20:B4:D2:62:56:FB:9D:8D:22:AF:46
            X509v3 Authority Key Identifier:
                keyid:09:FC:07:7F:33:E3:AD:67:BF:14:77:55:16:7A:3A:D4:EA:CB:1E:7C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9161613/30992668E53911EB8A5B9271C4F9AE02/CfwHfzPjrWe_FHdVFno61OrLHnw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CfwHfzPjrWe_FHdVFno61OrLHnw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9161613/30992668E53911EB8A5B9271C4F9AE02/167A6086BBD211EEABCC0D23C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  61.28.161.0/24

    Signature Algorithm: sha256WithRSAEncryption
         77:a8:2c:10:03:fb:29:eb:9c:88:29:13:67:ca:c1:26:04:b4:
         58:70:7d:9c:6d:6d:d7:33:b1:2e:71:07:f8:58:a2:0a:49:3a:
         ef:3b:f1:59:82:bf:8a:12:76:51:c5:f5:20:a3:3d:29:b3:f1:
         2a:f4:e1:3d:cd:05:b3:02:94:f3:96:67:b9:09:d8:6d:14:0d:
         95:27:86:a5:c9:9e:e2:1d:89:8b:23:92:5c:c6:fd:1c:61:0d:
         a6:0a:0d:d7:1b:ca:48:9c:bb:19:95:1d:57:ef:71:30:2e:26:
         68:d7:f1:89:83:81:ca:45:41:1c:4c:bd:a7:3f:58:61:ce:f6:
         c0:87:06:f1:8d:cc:79:c8:c8:14:d1:bd:7b:16:e9:58:18:73:
         ba:92:a5:f5:a8:fa:87:6a:7b:60:02:25:8a:5b:30:b9:e1:28:
         fc:43:06:39:c2:7a:54:72:9d:a3:5e:b4:c3:58:63:db:b8:7a:
         9a:08:f3:4c:df:55:cc:b1:3e:6e:7c:3f:15:a9:82:9a:4e:2f:
         4d:9d:7e:90:8c:d6:93:48:fc:66:e5:b6:be:9d:45:da:e3:30:
         48:40:c9:90:01:d2:2e:8b:d0:dd:49:c9:4f:12:4b:8e:0c:94:
         65:ec:f6:3d:3c:68:b3:cd:00:6e:62:c8:60:34:82:ff:a5:fb:
         2a:0e:d8:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 00:49:34 2024 by rpki-client on console-fra.rpki-client.org