Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9161613/30992668E53911EB8A5B9271C4F9AE02/8023B518E53E11EB9E429C44C4F9AE02.roa
File:                     8023B518E53E11EB9E429C44C4F9AE02.roa (raw, json)
Hash identifier:          vSQHxn5/lTR7h5pMBllVKzWJzWkf2IiJr01/df+82mQ=
Subject key identifier:   75:AB:0E:E3:FF:77:59:D6:75:DF:07:92:A6:30:7A:F6:1F:62:BF:02
Certificate issuer:       /CN=A9161613/serialNumber=09FC077F33E3AD67BF147755167A3AD4EACB1E7C
Certificate serial:       05A8
Authority key identifier: 09:FC:07:7F:33:E3:AD:67:BF:14:77:55:16:7A:3A:D4:EA:CB:1E:7C
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CfwHfzPjrWe_FHdVFno61OrLHnw.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9161613/30992668E53911EB8A5B9271C4F9AE02/8023B518E53E11EB9E429C44C4F9AE02.roa
Signing time:             Thu 12 Dec 2024 23:13:34 +0000
ROA not before:           Thu 12 Dec 2024 23:13:34 +0000
ROA not after:            Thu 28 May 2026 00:00:00 +0000
asID:                     17445
IP address blocks:        116.50.164.0/23 maxlen: 23
                          116.50.164.0/24 maxlen: 24
                          116.50.165.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9161613/30992668E53911EB8A5B9271C4F9AE02/CfwHfzPjrWe_FHdVFno61OrLHnw.crl
                          rsync://rpki.apnic.net/member_repository/A9161613/30992668E53911EB8A5B9271C4F9AE02/CfwHfzPjrWe_FHdVFno61OrLHnw.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CfwHfzPjrWe_FHdVFno61OrLHnw.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 19 Mar 2025 23:05:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1448 (0x5a8)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9161613
        Validity
            Not Before: Dec 12 23:13:34 2024 GMT
            Not After : May 28 00:00:00 2026 GMT
        Subject: CN=675b6e1d-7191
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:11:ce:0c:6a:2a:f6:06:8d:45:ba:0f:07:91:
                    22:8d:b2:f5:f2:91:ee:3e:69:42:35:27:21:c8:e4:
                    e4:02:96:bb:be:99:af:65:b1:89:da:a4:d5:04:fa:
                    11:35:01:9b:7b:4f:38:1a:0a:47:52:54:5e:fd:f4:
                    92:b2:e1:bb:ce:02:be:23:99:71:0b:38:66:b6:71:
                    65:71:c5:d4:3c:c8:3b:8a:f1:41:af:d2:17:cc:96:
                    7f:3c:3a:15:af:8e:43:7e:c4:b9:67:df:10:01:96:
                    64:9f:47:e3:86:1b:5a:84:8f:6a:84:7f:52:e3:84:
                    c9:f6:75:15:88:73:44:ec:04:b8:ee:25:df:88:3a:
                    3a:3a:ef:04:08:b7:0c:da:bf:57:90:f6:95:58:0e:
                    2a:ca:60:06:67:f8:f3:4a:0a:55:16:dd:e1:6f:c6:
                    38:27:17:f7:c5:43:0f:78:54:74:84:5f:1e:05:3f:
                    49:a2:79:ae:ac:e9:bd:dc:bb:99:8e:63:9d:10:f9:
                    f3:45:df:d3:bf:89:a0:70:4e:04:75:a7:33:49:45:
                    59:90:ca:8f:82:f6:b1:74:a4:11:10:f4:ea:16:f7:
                    25:1d:ac:bc:7f:94:b8:0f:7f:04:eb:14:0d:fd:28:
                    95:00:08:fd:51:8a:88:07:ba:ba:5d:72:b6:66:41:
                    43:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                75:AB:0E:E3:FF:77:59:D6:75:DF:07:92:A6:30:7A:F6:1F:62:BF:02
            X509v3 Authority Key Identifier:
                keyid:09:FC:07:7F:33:E3:AD:67:BF:14:77:55:16:7A:3A:D4:EA:CB:1E:7C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9161613/30992668E53911EB8A5B9271C4F9AE02/CfwHfzPjrWe_FHdVFno61OrLHnw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CfwHfzPjrWe_FHdVFno61OrLHnw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9161613/30992668E53911EB8A5B9271C4F9AE02/8023B518E53E11EB9E429C44C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  116.50.164.0/23

    Signature Algorithm: sha256WithRSAEncryption
         ad:91:50:4d:b6:d1:30:fd:2b:45:7e:7a:22:39:53:7d:48:54:
         4b:79:a8:a9:d8:5e:97:df:3f:4e:85:57:df:c2:7f:25:8f:33:
         2f:87:de:97:eb:b8:aa:5f:a5:75:ee:87:68:32:0a:96:b1:b4:
         67:b4:e3:13:05:a8:b8:a2:9d:1e:3f:f6:e8:8f:26:db:fa:8b:
         65:aa:d9:d0:7a:2e:9a:a5:34:73:7b:a1:be:5d:4e:9a:34:08:
         4f:94:df:54:2a:7c:7b:f6:89:86:3f:80:38:ae:e4:fd:14:bc:
         be:e4:84:c5:53:a8:5a:69:21:03:c8:df:cb:94:cc:85:92:98:
         49:9c:64:50:44:9c:ca:5a:79:95:e6:58:eb:53:80:0f:a8:45:
         91:0f:62:f3:d2:95:3e:43:2e:5a:c9:b4:01:78:08:79:1d:7c:
         c8:d5:6f:19:dc:84:81:81:ca:a4:6d:b5:a4:16:a7:b8:67:af:
         05:0f:8a:b3:77:9b:58:a7:aa:c1:8c:d3:5e:d6:7b:6a:69:32:
         8d:7b:df:2f:0e:6f:f9:93:29:24:f0:08:2b:43:4a:5c:60:5a:
         16:d5:cb:9d:f4:f9:31:8e:0d:86:69:c6:b6:78:28:bc:58:98:
         1d:0f:ce:d8:68:7c:aa:45:f6:bc:f7:7b:4b:74:87:5c:ae:bd:
         c9:45:8f:d0
-----BEGIN CERTIFICATE-----
MIIFcTCCBFmgAwIBAgICBagwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NjE2MTMxMTAvBgNVBAUTKDA5RkMwNzdGMzNFM0FENjdCRjE0Nzc1NTE2N0EzQUQ0
RUFDQjFFN0MwHhcNMjQxMjEyMjMxMzM0WhcNMjYwNTI4MDAwMDAwWjAYMRYwFAYD
VQQDEw02NzViNmUxZC03MTkxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAsBHODGoq9gaNRboPB5EijbL18pHuPmlCNSchyOTkApa7vpmvZbGJ2qTVBPoR
NQGbe084GgpHUlRe/fSSsuG7zgK+I5lxCzhmtnFlccXUPMg7ivFBr9IXzJZ/PDoV
r45DfsS5Z98QAZZkn0fjhhtahI9qhH9S44TJ9nUViHNE7AS47iXfiDo6Ou8ECLcM
2r9XkPaVWA4qymAGZ/jzSgpVFt3hb8Y4Jxf3xUMPeFR0hF8eBT9JonmurOm93LuZ
jmOdEPnzRd/Tv4mgcE4EdaczSUVZkMqPgvaxdKQREPTqFvclHay8f5S4D38E6xQN
/SiVAAj9UYqIB7q6XXK2ZkFDNwIDAQABo4IClTCCApEwHQYDVR0OBBYEFHWrDuP/
d1nWdd8HkqYwevYfYr8CMB8GA1UdIwQYMBaAFAn8B38z461nvxR3VRZ6OtTqyx58
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2MTYxMy8zMDk5MjY2OEU1
MzkxMUVCOEE1QjkyNzFDNEY5QUUwMi9DZndIZnpQanJXZV9GSGRWRm5vNjFPckxI
bncuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0Nmd0hmelBqcldlX0ZIZFZGbm82MU9yTEhudy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
NjE2MTMvMzA5OTI2NjhFNTM5MTFFQjhBNUI5MjcxQzRGOUFFMDIvODAyM0I1MThF
NTNFMTFFQjlFNDI5QzQ0QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E
EDAOMAwEAgABMAYDBAF0MqQwDQYJKoZIhvcNAQELBQADggEBAK2RUE220TD9K0V+
eiI5U31IVEt5qKnYXpffP06FV9/CfyWPMy+H3pfruKpfpXXuh2gyCpaxtGe04xMF
qLiinR4/9uiPJtv6i2Wq2dB6LpqlNHN7ob5dTpo0CE+U31QqfHv2iYY/gDiu5P0U
vL7khMVTqFppIQPI38uUzIWSmEmcZFBEnMpaeZXmWOtTgA+oRZEPYvPSlT5DLlrJ
tAF4CHkdfMjVbxnchIGByqRttaQWp7hnrwUPirN3m1inqsGM017We2ppMo173y8O
b/mTKSTwCCtDSlxgWhbVy530+TGODYZpxrZ4KLxYmB0PzthofKpF9rz3e0t0h1yu
vclFj9A=
-----END CERTIFICATE-----
Generated at Thu Mar 13 21:49:02 2025 by rpki-client