Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9161A58/B389304EA7EC11EA80485864C4F9AE02/B350B67E964611EDA10D8777C4F9AE02.roa
File:                     B350B67E964611EDA10D8777C4F9AE02.roa (raw, json)
Hash identifier:          dqgw7Vjah1kgl1Eb2Qsi3T+K4Ggh+1iUdEI4VBpnCIA=
Subject key identifier:   64:01:B4:C8:E0:43:A0:EA:1F:F6:0B:C3:48:35:AB:90:2A:27:EF:D1
Certificate issuer:       /CN=A9161A58/serialNumber=B4669D30D210E4907CD2888BE74B89A6DD3CB6C8
Certificate serial:       0926
Authority key identifier: B4:66:9D:30:D2:10:E4:90:7C:D2:88:8B:E7:4B:89:A6:DD:3C:B6:C8
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tGadMNIQ5JB80oiL50uJpt08tsg.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9161A58/B389304EA7EC11EA80485864C4F9AE02/B350B67E964611EDA10D8777C4F9AE02.roa
Signing time:             Sat 31 May 2025 20:26:48 +0000
ROA not before:           Sat 31 May 2025 20:26:48 +0000
ROA not after:            Thu 30 Jul 2026 00:00:00 +0000
asID:                     140951
IP address blocks:        45.116.8.0/24 maxlen: 24
                          45.116.9.0/24 maxlen: 24
                          45.116.10.0/24 maxlen: 24
                          45.116.11.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9161A58/B389304EA7EC11EA80485864C4F9AE02/tGadMNIQ5JB80oiL50uJpt08tsg.crl
                          rsync://rpki.apnic.net/member_repository/A9161A58/B389304EA7EC11EA80485864C4F9AE02/tGadMNIQ5JB80oiL50uJpt08tsg.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tGadMNIQ5JB80oiL50uJpt08tsg.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 07 Jun 2025 20:26:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2342 (0x926)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9161A58, serialNumber=B4669D30D210E4907CD2888BE74B89A6DD3CB6C8
        Validity
            Not Before: May 31 20:26:48 2025 GMT
            Not After : Jul 30 00:00:00 2026 GMT
        Subject: CN=683b6607-af41
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:83:90:ee:82:52:b0:40:fa:17:7f:51:8f:ee:
                    a7:4f:7d:ce:68:af:5d:2e:85:a6:65:ca:f4:6a:01:
                    7d:a9:f6:88:71:23:5d:5f:6e:be:77:bb:f4:23:29:
                    92:0e:51:cf:da:dc:bd:15:9f:c2:43:dc:56:13:8d:
                    82:b1:96:48:46:04:42:c6:d4:6e:56:f8:f3:ce:fe:
                    18:76:84:45:22:ec:f4:2b:de:49:85:91:d4:f1:d4:
                    9f:9a:30:f4:c2:79:1e:04:db:45:9b:c0:7f:4e:1b:
                    1e:11:a5:58:ab:26:24:0f:37:a1:b7:b3:26:2a:b9:
                    22:00:23:f5:79:af:d9:80:80:4b:21:26:94:b6:db:
                    a8:00:c9:c8:c4:82:a0:5f:cc:5e:47:20:ef:bb:95:
                    c8:0c:8e:38:5f:4b:c0:76:dc:13:20:26:bb:af:a1:
                    b1:c6:aa:0c:fd:a0:17:57:06:f8:6a:da:8c:8f:b5:
                    20:b1:ad:ab:40:70:49:dd:49:c0:02:52:6c:9d:9f:
                    ee:c7:ac:1a:af:aa:17:64:f4:c1:e1:a0:3f:96:f9:
                    5e:d0:58:73:fa:c4:78:89:ea:38:c3:db:71:8e:97:
                    56:ab:3d:45:b0:32:41:d6:8e:ad:8f:cb:9a:36:d6:
                    b8:cd:a4:6c:ac:d1:68:e4:fb:cf:04:a1:8c:10:3d:
                    58:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                64:01:B4:C8:E0:43:A0:EA:1F:F6:0B:C3:48:35:AB:90:2A:27:EF:D1
            X509v3 Authority Key Identifier:
                keyid:B4:66:9D:30:D2:10:E4:90:7C:D2:88:8B:E7:4B:89:A6:DD:3C:B6:C8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9161A58/B389304EA7EC11EA80485864C4F9AE02/tGadMNIQ5JB80oiL50uJpt08tsg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tGadMNIQ5JB80oiL50uJpt08tsg.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9161A58/B389304EA7EC11EA80485864C4F9AE02/B350B67E964611EDA10D8777C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.116.8.0/22

    Signature Algorithm: sha256WithRSAEncryption
         9b:4d:c9:09:eb:da:cc:e2:f2:a1:cf:58:e7:e6:9d:84:05:84:
         7e:6c:2c:69:43:8f:da:2d:68:9e:c2:d7:52:4e:c2:dc:2a:4e:
         8e:83:e8:7b:45:89:37:a3:dd:6f:ab:61:96:48:80:85:98:d4:
         ef:6f:57:df:37:10:ed:83:39:26:40:b5:ba:87:4b:77:ce:dc:
         5d:a7:35:b0:33:7b:d0:a8:50:6e:49:01:ce:a6:50:ee:84:25:
         45:04:a0:1a:91:01:9a:0c:d4:83:39:89:53:51:a3:02:5e:cb:
         44:78:53:6b:a7:71:08:ce:94:d9:66:18:b8:d9:04:67:14:5e:
         2a:e3:eb:ff:19:b3:6b:cf:96:50:8f:5c:d4:b2:bf:de:ca:51:
         69:f5:64:39:c2:71:3a:24:07:fe:a3:79:97:9b:87:87:46:66:
         2e:5b:06:87:8f:23:3f:ce:2d:33:9d:a5:1f:cb:a9:24:bf:43:
         73:b8:29:7d:6a:37:74:b3:62:5f:87:22:46:62:24:e7:0f:4c:
         52:b8:46:98:73:06:85:10:0f:77:ea:19:96:96:b2:39:87:7e:
         01:87:c1:63:2e:5e:07:39:cc:fc:a6:bc:98:a6:0b:72:2b:bd:
         e1:4a:e5:40:36:b4:fb:73:7d:80:ed:10:a6:6d:91:c4:eb:f1:
         6d:14:fe:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 2 07:19:38 2025 by rpki-client