Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9176632/A25439FE5E0D11F094762F13C4F9AE02/9DB90EE05E0F11F09722E15EC4F9AE02.roa
File:                     9DB90EE05E0F11F09722E15EC4F9AE02.roa (raw, json)
Hash identifier:          YgUFuSigzbesjAaXAB7QXjCPj2vjaQ0V6QVQsQKeXvQ=
Subject key identifier:   2F:F5:7E:AD:F5:30:E2:87:73:2B:56:5F:E3:08:CA:EE:49:74:CD:AC
Certificate issuer:       /CN=A9176632/serialNumber=832893D0A75201A213A0644553203D01A73CFAFF
Certificate serial:       02
Authority key identifier: 83:28:93:D0:A7:52:01:A2:13:A0:64:45:53:20:3D:01:A7:3C:FA:FF
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/gyiT0KdSAaIToGRFUyA9Aac8-v8.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9176632/A25439FE5E0D11F094762F13C4F9AE02/9DB90EE05E0F11F09722E15EC4F9AE02.roa
Signing time:             Fri 11 Jul 2025 04:29:22 +0000
ROA not before:           Fri 11 Jul 2025 04:29:22 +0000
ROA not after:            Sat 31 Oct 2026 00:00:00 +0000
asID:                     154040
IP address blocks:        165.101.166.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9176632/A25439FE5E0D11F094762F13C4F9AE02/gyiT0KdSAaIToGRFUyA9Aac8-v8.crl
                          rsync://rpki.apnic.net/member_repository/A9176632/A25439FE5E0D11F094762F13C4F9AE02/gyiT0KdSAaIToGRFUyA9Aac8-v8.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/gyiT0KdSAaIToGRFUyA9Aac8-v8.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 26 Jul 2025 08:27:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2 (0x2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9176632, serialNumber=832893D0A75201A213A0644553203D01A73CFAFF
        Validity
            Not Before: Jul 11 04:29:22 2025 GMT
            Not After : Oct 31 00:00:00 2026 GMT
        Subject: CN=68709321-aa6f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:22:a7:1c:8e:0d:dd:85:8a:fd:f3:1d:21:b7:
                    ca:d5:91:35:6e:e7:6b:5e:e8:09:7b:08:e0:de:bd:
                    68:05:1b:87:bb:cc:b2:0f:c2:ef:fd:80:1b:66:6f:
                    89:d5:4a:ef:b2:4d:3e:5d:52:05:99:4b:d0:70:5c:
                    cc:4c:a4:96:7e:b4:2b:9e:08:1a:f4:93:fc:8c:9a:
                    00:d5:a5:f4:a3:c9:b5:8d:00:c6:cd:db:bf:86:9a:
                    8c:ae:72:88:d8:f1:f3:35:ac:43:bf:6e:6d:9b:9d:
                    65:bc:44:f9:1b:59:94:f3:85:26:95:83:97:a9:b1:
                    c3:ee:77:e6:7a:a8:ed:35:50:98:13:aa:99:68:f3:
                    1b:a7:f5:41:f4:52:76:34:07:14:91:4d:82:e8:a2:
                    e9:82:ec:79:7e:78:0c:41:a3:c8:dc:a5:20:a5:bc:
                    56:50:16:12:53:98:dc:d7:00:82:5f:f1:a3:71:37:
                    fe:eb:39:25:46:38:4a:54:c2:76:c6:4c:a4:35:3b:
                    7f:63:22:8f:1c:e9:6c:bd:d2:59:20:77:61:a7:d1:
                    be:49:b5:60:b1:7a:0a:49:45:fc:d5:0e:eb:1c:c1:
                    57:5e:03:36:9c:24:5b:f0:e7:61:ad:0e:fa:da:5c:
                    38:c9:ce:09:98:fc:89:8c:74:83:7e:38:f2:d4:e9:
                    a0:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2F:F5:7E:AD:F5:30:E2:87:73:2B:56:5F:E3:08:CA:EE:49:74:CD:AC
            X509v3 Authority Key Identifier:
                keyid:83:28:93:D0:A7:52:01:A2:13:A0:64:45:53:20:3D:01:A7:3C:FA:FF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9176632/A25439FE5E0D11F094762F13C4F9AE02/gyiT0KdSAaIToGRFUyA9Aac8-v8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/gyiT0KdSAaIToGRFUyA9Aac8-v8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9176632/A25439FE5E0D11F094762F13C4F9AE02/9DB90EE05E0F11F09722E15EC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  165.101.166.0/23

    Signature Algorithm: sha256WithRSAEncryption
         8d:2c:cf:f5:dd:2b:ae:cb:66:8f:a6:81:77:c1:78:f6:d5:ff:
         3a:8b:28:90:ff:98:a6:78:70:2f:e3:84:41:2a:2f:97:51:e5:
         9c:ed:5e:d9:f2:c3:dd:58:b9:d0:77:06:a2:6b:fe:13:1f:e8:
         c3:bd:79:eb:a2:e3:31:5e:31:e2:f2:36:29:3c:76:be:c1:63:
         f4:aa:b3:d8:29:bb:b9:d1:d9:fd:de:bf:50:7f:e8:e7:8f:37:
         02:2b:9a:ed:7b:e6:b5:0b:4e:6a:bf:74:5c:4f:0e:46:ae:09:
         5e:69:c2:e2:69:40:e7:fa:7c:c7:10:ca:9d:35:81:11:03:0b:
         fe:d1:c1:53:ad:79:38:66:fd:83:cd:c2:e4:0c:7f:b8:a4:47:
         78:aa:67:e0:63:b7:19:5f:6e:69:83:7d:73:8a:74:a5:e3:26:
         6c:e0:ea:9a:98:7d:ba:9e:ef:34:bb:0f:b8:66:01:8b:ff:e0:
         dc:4a:5f:7c:ad:b1:d4:77:4e:78:97:72:b2:b6:7a:86:d3:b1:
         d1:9c:4a:cf:72:cb:dd:e2:68:4e:cb:e7:b2:82:06:6c:d5:e0:
         08:7e:d9:3a:41:bd:11:6a:cb:95:15:a5:b9:93:ad:0b:4c:80:
         c0:f8:56:55:91:2f:9f:16:4b:eb:6c:9c:65:c0:f1:a8:c4:08:
         dc:1c:ae:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 20 22:53:55 2025 by rpki-client