Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91B0D88/B986D91A431011EF88411782C4F9AE02/63CE609A48CB11EF94C2AA83C4F9AE02.roa
File:                     63CE609A48CB11EF94C2AA83C4F9AE02.roa (raw, json)
Hash identifier:          Gd34BZHumVDMQlkFxhkn9zZUBjwQGIsnWxDTTynzeE8=
Subject key identifier:   45:3C:B5:B9:AD:B6:D4:2D:22:21:CC:45:94:47:79:E8:B6:F3:BB:A9
Certificate issuer:       /CN=A91B0D88/serialNumber=D099EEA9F5CDB6FE4C6EF98E8D8CF3364B9D6261
Certificate serial:       9A
Authority key identifier: D0:99:EE:A9:F5:CD:B6:FE:4C:6E:F9:8E:8D:8C:F3:36:4B:9D:62:61
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0JnuqfXNtv5MbvmOjYzzNkudYmE.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91B0D88/B986D91A431011EF88411782C4F9AE02/63CE609A48CB11EF94C2AA83C4F9AE02.roa
Signing time:             Sat 03 May 2025 05:42:44 +0000
ROA not before:           Sat 03 May 2025 05:42:44 +0000
ROA not after:            Thu 30 Jul 2026 00:00:00 +0000
asID:                     152719
IP address blocks:        202.49.114.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91B0D88/B986D91A431011EF88411782C4F9AE02/0JnuqfXNtv5MbvmOjYzzNkudYmE.crl
                          rsync://rpki.apnic.net/member_repository/A91B0D88/B986D91A431011EF88411782C4F9AE02/0JnuqfXNtv5MbvmOjYzzNkudYmE.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0JnuqfXNtv5MbvmOjYzzNkudYmE.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 08 Jun 2025 05:52:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 154 (0x9a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91B0D88, serialNumber=D099EEA9F5CDB6FE4C6EF98E8D8CF3364B9D6261
        Validity
            Not Before: May  3 05:42:44 2025 GMT
            Not After : Jul 30 00:00:00 2026 GMT
        Subject: CN=6815acd4-6555
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:7f:89:97:eb:19:9e:2f:29:b6:89:ac:29:d2:
                    e4:cd:ad:2a:07:bd:5e:e6:59:05:54:13:a1:f8:94:
                    08:1d:32:66:71:64:da:72:e8:af:3d:e5:c1:27:6d:
                    58:02:62:4a:2c:c8:60:54:93:26:2d:d9:3a:90:37:
                    ed:1e:7e:44:5c:12:b6:8c:3c:3c:f0:2c:db:64:b7:
                    4d:dc:31:a7:02:40:06:0d:10:0b:b7:8d:ef:57:5c:
                    94:97:42:de:2b:bd:2b:c1:de:77:59:78:47:17:3d:
                    bb:2a:b8:d8:1a:94:30:e4:1b:e1:d0:29:8f:97:09:
                    62:99:a5:b0:9c:ec:ee:07:15:66:44:74:0c:e0:9b:
                    7a:95:5d:a9:d2:f7:a6:1d:54:60:e6:7a:aa:75:8e:
                    b3:88:c4:52:67:7f:63:08:1a:ba:22:fe:27:79:ed:
                    9a:58:e1:f2:71:26:d5:42:59:fe:82:3c:01:5c:a6:
                    a1:8a:b0:13:fa:a2:0e:d0:cf:69:9a:c0:0a:1d:c9:
                    41:aa:f5:3d:dc:bf:bf:67:3f:bb:d4:2f:66:72:a0:
                    8b:83:e5:e2:cc:3e:e5:e1:9a:f3:e5:6d:ec:e0:00:
                    1c:48:a9:b9:5c:0f:62:a7:e8:b2:e1:f1:be:3f:53:
                    13:c4:e9:43:e3:49:cb:c7:13:38:88:96:fe:04:63:
                    1f:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                45:3C:B5:B9:AD:B6:D4:2D:22:21:CC:45:94:47:79:E8:B6:F3:BB:A9
            X509v3 Authority Key Identifier:
                keyid:D0:99:EE:A9:F5:CD:B6:FE:4C:6E:F9:8E:8D:8C:F3:36:4B:9D:62:61

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91B0D88/B986D91A431011EF88411782C4F9AE02/0JnuqfXNtv5MbvmOjYzzNkudYmE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0JnuqfXNtv5MbvmOjYzzNkudYmE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B0D88/B986D91A431011EF88411782C4F9AE02/63CE609A48CB11EF94C2AA83C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  202.49.114.0/24

    Signature Algorithm: sha256WithRSAEncryption
         9a:09:29:dc:08:d8:77:42:07:6a:8c:1d:e9:a5:c7:ea:16:a1:
         a4:99:0a:74:b8:50:35:b8:ad:7f:db:ce:89:ac:27:83:99:2d:
         a7:b9:8f:b6:0a:d9:bc:94:6f:b4:1d:2d:37:c6:36:18:92:31:
         ce:de:27:b9:5b:4b:48:17:c1:3b:f2:4e:39:6a:c9:a2:58:05:
         34:76:8c:e0:0e:24:bc:80:8c:39:fd:61:0f:2b:5d:e6:a7:82:
         81:87:8e:72:9a:9a:69:14:cb:24:ea:e3:57:51:32:b2:c0:a1:
         11:06:c5:79:93:88:7d:c6:fe:64:e8:3f:23:93:38:20:36:03:
         a0:01:51:c5:ed:33:d9:eb:67:78:9b:c8:55:e1:77:8f:7c:2c:
         b3:5a:82:07:29:fc:4a:b8:87:f4:51:c3:bd:9f:8d:ea:00:05:
         e0:a4:4b:52:ab:59:71:83:7b:15:64:8b:90:d5:19:cf:68:35:
         eb:22:8e:c2:f8:71:c0:4d:44:c5:53:d4:24:00:48:12:69:27:
         83:d4:10:e7:f9:e5:09:d0:1a:31:1e:54:94:dd:92:a2:fa:12:
         c8:3e:cc:bf:5f:f7:d0:70:44:d5:0a:59:9e:ac:0e:b6:92:ea:
         12:a1:84:45:5f:42:58:a6:75:25:17:79:27:0e:32:7e:08:54:
         0e:a0:8c:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 2 07:13:38 2025 by rpki-client