Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A917B520/161D4C0AE4CA11EDA414E259C4F9AE02/020607A2498711EFBB260663C4F9AE02.roa
File:                     020607A2498711EFBB260663C4F9AE02.roa (raw, json)
Hash identifier:          T6rwUDI540K7kNvAic9olkLe7ckJW9yi5Gt2J/Ejnw0=
Subject key identifier:   FB:7C:1D:0F:F4:84:F2:E8:1C:E9:90:F4:B6:B3:08:66:86:0D:A9:B9
Certificate issuer:       /CN=A917B520/serialNumber=542B94D8625CF711964FD13741295D27AD7A9004
Certificate serial:       01E9
Authority key identifier: 54:2B:94:D8:62:5C:F7:11:96:4F:D1:37:41:29:5D:27:AD:7A:90:04
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VCuU2GJc9xGWT9E3QSldJ616kAQ.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A917B520/161D4C0AE4CA11EDA414E259C4F9AE02/020607A2498711EFBB260663C4F9AE02.roa
Signing time:             Sat 31 May 2025 03:51:00 +0000
ROA not before:           Sat 31 May 2025 03:51:00 +0000
ROA not after:            Thu 30 Jul 2026 00:00:00 +0000
asID:                     62610
IP address blocks:        101.47.94.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A917B520/161D4C0AE4CA11EDA414E259C4F9AE02/VCuU2GJc9xGWT9E3QSldJ616kAQ.crl
                          rsync://rpki.apnic.net/member_repository/A917B520/161D4C0AE4CA11EDA414E259C4F9AE02/VCuU2GJc9xGWT9E3QSldJ616kAQ.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VCuU2GJc9xGWT9E3QSldJ616kAQ.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 10 Jun 2025 03:19:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 489 (0x1e9)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A917B520, serialNumber=542B94D8625CF711964FD13741295D27AD7A9004
        Validity
            Not Before: May 31 03:51:00 2025 GMT
            Not After : Jul 30 00:00:00 2026 GMT
        Subject: CN=683a7ca4-d5da
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:73:2e:e5:1f:e1:04:7f:ac:c7:c0:99:1b:39:
                    dc:88:63:76:a6:70:4b:5d:8b:5a:96:98:d7:e5:54:
                    9b:3f:14:bd:3d:ec:dd:fa:00:4f:ba:3e:0d:c8:b2:
                    55:b9:cf:a5:8f:76:88:8b:b6:72:1c:82:98:df:fe:
                    d9:f1:6d:be:2a:61:e9:fb:6d:c9:53:7b:7b:68:28:
                    c5:86:eb:b1:57:4f:f0:66:1b:f4:b1:9b:7b:9e:2c:
                    f2:34:aa:39:e4:f6:ad:56:2d:ad:db:fc:7b:98:40:
                    8b:31:ba:e0:07:ac:33:2d:6d:44:f1:61:9d:8c:66:
                    de:ac:4f:41:d2:50:ac:33:9e:9f:65:08:7d:b2:3a:
                    64:c1:51:c7:29:0f:5f:c9:a1:5c:ea:3f:fd:e2:74:
                    3f:5b:ae:f5:8d:84:3b:79:61:53:48:5e:7c:3e:97:
                    34:36:60:07:88:92:7e:7f:c2:82:9e:60:ea:76:31:
                    9d:d2:e3:40:62:ff:ff:27:1e:59:d7:0e:6f:5c:f1:
                    92:8b:7e:ed:02:78:da:49:f2:02:8d:0c:3b:ba:ae:
                    f6:2c:09:e0:4c:96:09:c6:93:6f:7f:cf:63:8f:06:
                    6c:40:43:39:c7:7a:db:05:68:60:dc:ee:e8:6a:fb:
                    0d:d0:ee:93:4b:58:49:96:bc:67:27:ac:14:f9:de:
                    35:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FB:7C:1D:0F:F4:84:F2:E8:1C:E9:90:F4:B6:B3:08:66:86:0D:A9:B9
            X509v3 Authority Key Identifier:
                keyid:54:2B:94:D8:62:5C:F7:11:96:4F:D1:37:41:29:5D:27:AD:7A:90:04

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A917B520/161D4C0AE4CA11EDA414E259C4F9AE02/VCuU2GJc9xGWT9E3QSldJ616kAQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VCuU2GJc9xGWT9E3QSldJ616kAQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917B520/161D4C0AE4CA11EDA414E259C4F9AE02/020607A2498711EFBB260663C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  101.47.94.0/24

    Signature Algorithm: sha256WithRSAEncryption
         9c:8a:67:b4:c9:22:d2:20:d6:9e:72:eb:11:82:66:28:06:20:
         f8:4b:19:e8:c7:b9:3f:cb:7d:be:ce:9b:6a:e9:22:e8:dc:a4:
         d1:aa:bd:d3:fe:93:9b:0a:e3:e1:4b:e3:7c:27:24:26:7b:3a:
         53:b2:a6:02:41:d6:6d:cb:06:c3:05:bc:3a:e8:58:1c:f9:fc:
         90:46:93:6f:f5:a8:9f:1f:df:de:fb:e2:36:ce:84:25:3c:5e:
         b1:2f:3b:4e:6c:d9:ab:b2:39:ad:82:01:b5:6a:53:99:55:f3:
         67:60:01:d9:32:49:96:80:f0:c1:60:52:ff:45:a8:19:7a:22:
         72:32:9d:ca:3a:a2:24:39:15:e9:71:dc:14:10:ca:ba:47:6e:
         71:e6:2c:8a:e5:99:65:56:ca:87:4d:e9:46:23:55:e8:f6:73:
         6a:af:15:c9:d6:3d:ea:71:eb:f3:42:ac:e2:eb:66:4d:e6:58:
         91:06:a8:a1:1e:90:53:39:1f:6e:41:c9:31:d5:7c:90:53:ee:
         a2:0f:b6:2b:cc:92:fa:3a:fd:77:6a:1b:f0:09:8d:e5:88:4e:
         c5:01:72:0f:c6:e1:2b:b3:0e:fe:fd:6b:23:e0:e7:c6:3c:2a:
         e5:d9:c1:8a:e4:46:36:1f:76:26:d6:7b:7b:a1:85:38:1f:fc:
         9e:3f:dc:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 4 00:02:22 2025 by rpki-client