Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9161613/30992668E53911EB8A5B9271C4F9AE02/82608162E53E11EB9E429C44C4F9AE02.roa
File:                     82608162E53E11EB9E429C44C4F9AE02.roa (raw, json)
Hash identifier:          5++m/kOlfMBq6mMDQIOTUxMQfGevwHoL6rdYyR/XxKY=
Subject key identifier:   B7:05:E5:BD:0F:D6:21:CB:5B:C2:D9:4C:4F:4D:88:5B:CA:AE:FA:C4
Certificate issuer:       /CN=A9161613/serialNumber=09FC077F33E3AD67BF147755167A3AD4EACB1E7C
Certificate serial:       04DB
Authority key identifier: 09:FC:07:7F:33:E3:AD:67:BF:14:77:55:16:7A:3A:D4:EA:CB:1E:7C
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CfwHfzPjrWe_FHdVFno61OrLHnw.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9161613/30992668E53911EB8A5B9271C4F9AE02/82608162E53E11EB9E429C44C4F9AE02.roa
Signing time:             Sat 27 Jan 2024 01:03:37 +0000
ROA not before:           Sat 27 Jan 2024 01:03:37 +0000
ROA not after:            Wed 28 May 2025 00:00:00 +0000
asID:                     18190
IP address blocks:        49.157.9.0/24 maxlen: 24
                          49.157.10.0/24 maxlen: 24
                          49.157.11.0/24 maxlen: 24
                          49.157.12.0/24 maxlen: 24
                          49.157.13.0/24 maxlen: 24
                          49.157.16.0/24 maxlen: 24
                          49.157.17.0/24 maxlen: 24
                          49.157.18.0/24 maxlen: 24
                          49.157.19.0/24 maxlen: 24
                          49.157.20.0/24 maxlen: 24
                          49.157.21.0/24 maxlen: 24
                          49.157.22.0/24 maxlen: 24
                          49.157.23.0/24 maxlen: 24
                          49.157.24.0/24 maxlen: 24
                          49.157.25.0/24 maxlen: 24
                          49.157.29.0/24 maxlen: 24
                          49.157.30.0/24 maxlen: 24
                          49.157.31.0/24 maxlen: 24
                          49.157.32.0/24 maxlen: 24
                          49.157.33.0/24 maxlen: 24
                          49.157.34.0/24 maxlen: 24
                          49.157.35.0/24 maxlen: 24
                          49.157.36.0/24 maxlen: 24
                          49.157.37.0/24 maxlen: 24
                          49.157.38.0/24 maxlen: 24
                          49.157.39.0/24 maxlen: 24
                          49.157.40.0/24 maxlen: 24
                          49.157.41.0/24 maxlen: 24
                          49.157.42.0/24 maxlen: 24
                          49.157.43.0/24 maxlen: 24
                          49.157.44.0/24 maxlen: 24
                          49.157.45.0/24 maxlen: 24
                          49.157.55.0/24 maxlen: 24
                          49.157.56.0/24 maxlen: 24
                          49.157.57.0/24 maxlen: 24
                          49.157.58.0/24 maxlen: 24
                          49.157.59.0/24 maxlen: 24
                          61.28.168.0/24 maxlen: 24
                          112.199.73.0/24 maxlen: 24
                          113.61.32.0/24 maxlen: 24
                          113.61.33.0/24 maxlen: 24
                          113.61.34.0/24 maxlen: 24
                          113.61.35.0/24 maxlen: 24
                          113.61.36.0/24 maxlen: 24
                          113.61.38.0/24 maxlen: 24
                          113.61.42.0/24 maxlen: 24
                          113.61.43.0/24 maxlen: 24
                          113.61.44.0/24 maxlen: 24
                          113.61.45.0/24 maxlen: 24
                          113.61.46.0/24 maxlen: 24
                          113.61.47.0/24 maxlen: 24
                          113.61.48.0/24 maxlen: 24
                          113.61.49.0/24 maxlen: 24
                          113.61.50.0/24 maxlen: 24
                          113.61.51.0/24 maxlen: 24
                          113.61.52.0/24 maxlen: 24
                          113.61.53.0/24 maxlen: 24
                          113.61.54.0/24 maxlen: 24
                          113.61.55.0/24 maxlen: 24
                          113.61.56.0/24 maxlen: 24
                          113.61.57.0/24 maxlen: 24
                          113.61.58.0/24 maxlen: 24
                          113.61.59.0/24 maxlen: 24
                          113.61.60.0/24 maxlen: 24
                          113.61.61.0/24 maxlen: 24
                          113.61.62.0/24 maxlen: 24
                          113.61.63.0/24 maxlen: 24
                          115.85.2.0/24 maxlen: 24
                          116.50.137.0/24 maxlen: 24
                          116.50.138.0/24 maxlen: 24
                          116.50.139.0/24 maxlen: 24
                          116.50.140.0/24 maxlen: 24
                          116.50.141.0/24 maxlen: 24
                          116.50.142.0/24 maxlen: 24
                          116.50.143.0/24 maxlen: 24
                          116.50.144.0/24 maxlen: 24
                          116.50.145.0/24 maxlen: 24
                          116.50.146.0/24 maxlen: 24
                          116.50.149.0/24 maxlen: 24
                          116.50.183.0/24 maxlen: 24
                          116.50.229.0/24 maxlen: 24
                          116.50.232.0/24 maxlen: 24
                          116.50.234.0/24 maxlen: 24
                          116.50.238.0/24 maxlen: 24
                          116.50.240.0/24 maxlen: 24
                          116.50.241.0/24 maxlen: 24
                          116.50.252.0/24 maxlen: 24
                          117.104.240.0/24 maxlen: 24
                          117.104.241.0/24 maxlen: 24
                          117.104.242.0/24 maxlen: 24
                          117.104.243.0/24 maxlen: 24
                          117.104.244.0/24 maxlen: 24
                          117.104.245.0/24 maxlen: 24
                          117.104.246.0/24 maxlen: 24
                          117.104.247.0/24 maxlen: 24
                          117.104.248.0/24 maxlen: 24
                          117.104.249.0/24 maxlen: 24
                          117.104.250.0/24 maxlen: 24
                          117.104.251.0/24 maxlen: 24
                          117.104.252.0/24 maxlen: 24
                          117.104.253.0/24 maxlen: 24
                          117.104.254.0/24 maxlen: 24
                          180.232.5.0/24 maxlen: 24
                          180.232.6.0/24 maxlen: 24
                          180.232.7.0/24 maxlen: 24
                          180.232.8.0/24 maxlen: 24
                          180.232.9.0/24 maxlen: 24
                          180.232.15.0/24 maxlen: 24
                          180.232.16.0/24 maxlen: 24
                          180.232.17.0/24 maxlen: 24
                          180.232.18.0/24 maxlen: 24
                          180.232.19.0/24 maxlen: 24
                          180.232.113.0/24 maxlen: 24
                          180.232.114.0/24 maxlen: 24
                          180.232.115.0/24 maxlen: 24
                          180.232.116.0/24 maxlen: 24
                          180.232.117.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9161613/30992668E53911EB8A5B9271C4F9AE02/CfwHfzPjrWe_FHdVFno61OrLHnw.crl
                          rsync://rpki.apnic.net/member_repository/A9161613/30992668E53911EB8A5B9271C4F9AE02/CfwHfzPjrWe_FHdVFno61OrLHnw.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CfwHfzPjrWe_FHdVFno61OrLHnw.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 24 May 2024 01:42:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1243 (0x4db)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9161613/serialNumber=09FC077F33E3AD67BF147755167A3AD4EACB1E7C
        Validity
            Not Before: Jan 27 01:03:37 2024 GMT
            Not After : May 28 00:00:00 2025 GMT
        Subject: CN=65b45669-f2fe
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:c7:91:d9:e6:d7:ba:fe:08:ac:7e:6f:d8:c1:
                    90:63:e6:eb:29:0c:b3:14:92:2a:60:24:c5:b7:c9:
                    e1:b7:07:43:59:69:17:ed:ee:2a:b0:f8:05:f8:e8:
                    20:ee:bc:3a:5d:37:09:4e:be:aa:6c:73:f7:e1:b0:
                    28:fb:92:dc:d4:41:0b:6b:2c:f3:fa:16:d7:92:f2:
                    fc:2e:53:f0:8a:04:d1:88:0c:e1:b6:50:c0:24:71:
                    ce:a2:64:6c:3c:f9:31:a4:59:cf:ce:c3:e0:6c:6a:
                    06:6a:30:76:a4:b1:53:55:6b:56:93:3e:3a:b7:63:
                    7f:c5:da:b9:0f:c6:c4:c8:83:7c:6c:31:ea:4a:43:
                    4b:af:bf:29:d9:c3:50:c9:a3:20:e9:11:b6:7b:b4:
                    3a:df:f7:7c:a3:65:46:46:ff:89:38:de:46:72:95:
                    86:41:44:26:11:0d:35:8c:77:80:67:a1:af:c2:6e:
                    5f:22:77:1a:58:35:19:cd:c1:cf:e9:bb:86:76:19:
                    27:04:75:cd:15:94:9e:05:2e:c4:b1:ad:6d:64:ec:
                    67:f1:e6:d1:9b:19:21:ac:44:51:05:b5:0f:be:d8:
                    21:bb:c4:5f:6a:8a:9c:8d:f8:50:99:ff:5d:6e:f7:
                    9e:ee:a3:8d:89:a4:da:12:15:21:77:50:14:2e:3a:
                    39:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B7:05:E5:BD:0F:D6:21:CB:5B:C2:D9:4C:4F:4D:88:5B:CA:AE:FA:C4
            X509v3 Authority Key Identifier:
                keyid:09:FC:07:7F:33:E3:AD:67:BF:14:77:55:16:7A:3A:D4:EA:CB:1E:7C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9161613/30992668E53911EB8A5B9271C4F9AE02/CfwHfzPjrWe_FHdVFno61OrLHnw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CfwHfzPjrWe_FHdVFno61OrLHnw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9161613/30992668E53911EB8A5B9271C4F9AE02/82608162E53E11EB9E429C44C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  49.157.9.0-49.157.13.255
                  49.157.16.0-49.157.25.255
                  49.157.29.0-49.157.45.255
                  49.157.55.0-49.157.59.255
                  61.28.168.0/24
                  112.199.73.0/24
                  113.61.32.0-113.61.36.255
                  113.61.38.0/24
                  113.61.42.0-113.61.63.255
                  115.85.2.0/24
                  116.50.137.0-116.50.146.255
                  116.50.149.0/24
                  116.50.183.0/24
                  116.50.229.0/24
                  116.50.232.0/24
                  116.50.234.0/24
                  116.50.238.0/24
                  116.50.240.0/23
                  116.50.252.0/24
                  117.104.240.0-117.104.254.255
                  180.232.5.0-180.232.9.255
                  180.232.15.0-180.232.19.255
                  180.232.113.0-180.232.117.255

    Signature Algorithm: sha256WithRSAEncryption
         1d:84:ba:d2:55:f9:55:75:db:35:fb:66:d0:38:bb:57:88:91:
         e4:b3:6b:d7:23:d6:74:3f:14:5c:b1:34:2f:40:35:8b:96:52:
         8a:5d:99:41:2d:72:da:c7:ef:71:75:e1:fc:64:a2:c6:21:0e:
         90:95:07:dd:47:a3:2a:3f:49:8b:30:ea:bc:78:d9:8a:94:7a:
         a4:8b:7d:c9:42:38:44:f8:1e:52:85:ab:e0:4c:42:b8:d8:a1:
         20:38:30:8f:a3:19:31:0b:9f:1d:e5:fb:d0:ac:e7:01:14:61:
         39:93:06:4f:3d:70:c0:ed:e5:54:85:b7:ce:6b:57:56:a0:03:
         da:9c:05:ea:3a:9f:e2:aa:37:ec:ca:43:83:38:b1:99:ea:26:
         4d:d5:b5:b2:d2:0a:b1:8e:f5:77:f6:dc:f5:78:99:08:a0:79:
         73:e6:c6:73:8d:84:c7:aa:93:d3:e8:b1:c5:ea:51:3b:a0:bf:
         db:2f:3d:c1:68:34:df:ff:a8:79:66:6c:23:3c:0f:b5:67:43:
         a0:ec:78:ea:0e:0a:b3:a2:6c:40:5e:0c:fe:4a:cf:d1:5c:02:
         17:16:df:36:d5:13:4a:0c:f6:32:2b:d1:d7:b7:d0:ba:0b:ad:
         84:d2:fb:6b:f5:12:f9:ec:05:d3:56:67:ed:26:f1:25:ff:ca:
         40:94:60:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 03:06:31 2024 by rpki-client on console-ams.rpki-client.org