Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9119B9D/2402FB081E6111F0ADD3D173C4F9AE02/BDA4863C1E6111F09E161078C4F9AE02.roa
File:                     BDA4863C1E6111F09E161078C4F9AE02.roa (raw, json)
Hash identifier:          3wClZfyrRuvHiw5+gXU2O2uGIydycpdkHEs8+vS/Fqc=
Subject key identifier:   51:4C:E1:D2:70:E1:66:FA:84:28:80:E2:ED:61:5C:78:8D:50:59:EE
Certificate issuer:       /CN=A9119B9D/serialNumber=22587CC2CB6F351063783FB1CFDA66E44E2ECAC1
Certificate serial:       02
Authority key identifier: 22:58:7C:C2:CB:6F:35:10:63:78:3F:B1:CF:DA:66:E4:4E:2E:CA:C1
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ilh8wstvNRBjeD-xz9pm5E4uysE.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9119B9D/2402FB081E6111F0ADD3D173C4F9AE02/BDA4863C1E6111F09E161078C4F9AE02.roa
Signing time:             Mon 21 Apr 2025 03:35:59 +0000
ROA not before:           Mon 21 Apr 2025 03:35:59 +0000
ROA not after:            Wed 01 Jul 2026 00:00:00 +0000
asID:                     18024
IP address blocks:        163.227.12.0/23 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9119B9D/2402FB081E6111F0ADD3D173C4F9AE02/Ilh8wstvNRBjeD-xz9pm5E4uysE.crl
                          rsync://rpki.apnic.net/member_repository/A9119B9D/2402FB081E6111F0ADD3D173C4F9AE02/Ilh8wstvNRBjeD-xz9pm5E4uysE.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ilh8wstvNRBjeD-xz9pm5E4uysE.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 04 May 2025 02:50:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2 (0x2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9119B9D, serialNumber=22587CC2CB6F351063783FB1CFDA66E44E2ECAC1
        Validity
            Not Before: Apr 21 03:35:59 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=6805bd1f-1884
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:e5:2a:40:aa:16:08:88:67:26:d7:7e:0a:92:
                    42:b3:6c:7c:5f:05:91:38:a7:f5:88:e2:40:5b:cc:
                    0e:70:2f:45:f6:ed:ef:1c:19:4c:db:f0:19:62:05:
                    2d:bf:56:38:ee:53:35:cf:6c:b4:19:21:72:ae:72:
                    91:f0:d8:af:37:e0:cf:97:b9:da:32:6b:08:a9:0e:
                    f5:39:ee:31:4d:df:95:c7:07:c3:c3:45:b5:46:cb:
                    e3:cb:b9:98:ff:2d:6c:76:36:c0:39:31:e1:25:ce:
                    17:08:2e:fb:7e:65:ba:52:7e:79:35:f6:ac:aa:51:
                    e1:bb:a7:0a:37:65:82:36:cf:62:79:3f:c4:0d:1a:
                    22:ea:50:47:93:b7:3d:af:e6:ab:6a:8d:a6:24:19:
                    b8:74:2b:b6:1f:4b:47:0a:f7:c0:ad:aa:bc:06:c4:
                    ab:17:be:d5:3e:c2:78:4d:6e:f7:5b:bd:f7:46:e4:
                    1b:38:fe:6b:21:4e:a7:c0:eb:76:c9:65:5e:5a:76:
                    c3:35:32:47:b2:4e:31:02:89:d5:c2:2b:5d:ad:9e:
                    e6:84:28:d8:3f:f6:23:d0:76:50:61:5a:1a:90:ae:
                    e0:69:f6:50:d3:ef:14:4c:61:fb:ab:92:4c:3c:52:
                    e3:c8:e1:e9:d6:cd:a5:34:39:52:eb:4b:d3:89:31:
                    2e:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                51:4C:E1:D2:70:E1:66:FA:84:28:80:E2:ED:61:5C:78:8D:50:59:EE
            X509v3 Authority Key Identifier:
                keyid:22:58:7C:C2:CB:6F:35:10:63:78:3F:B1:CF:DA:66:E4:4E:2E:CA:C1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9119B9D/2402FB081E6111F0ADD3D173C4F9AE02/Ilh8wstvNRBjeD-xz9pm5E4uysE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ilh8wstvNRBjeD-xz9pm5E4uysE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9119B9D/2402FB081E6111F0ADD3D173C4F9AE02/BDA4863C1E6111F09E161078C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  163.227.12.0/23

    Signature Algorithm: sha256WithRSAEncryption
         8e:98:b2:de:45:ef:dd:7d:22:22:4f:90:b1:a2:2b:c7:ca:e5:
         50:2c:45:ba:b7:98:1c:a2:18:18:9f:9c:fc:55:b3:5c:c0:cc:
         d1:cb:42:b9:ff:31:d7:b0:69:c1:f0:72:3e:48:59:3c:6f:43:
         2e:1c:ac:9f:ec:e6:3f:6d:f3:91:87:e0:89:d4:89:65:f0:f4:
         bd:ee:56:2d:04:e4:6c:94:8e:55:db:ff:43:fb:43:64:c9:d2:
         ec:a0:b5:2a:af:37:a3:a9:74:1b:b1:0d:f5:a6:84:00:95:fd:
         76:86:27:eb:d1:32:21:16:d8:58:0f:f4:ea:27:68:ee:cf:a6:
         f9:d9:64:c3:0d:27:8f:fd:89:e3:cb:66:bb:fe:a8:9e:c1:26:
         ad:3a:7a:1f:63:3b:c2:d1:0c:f7:6e:39:c9:0d:5f:88:66:0d:
         74:e9:8e:eb:6a:30:9b:e5:d0:e0:3b:13:d3:6e:0c:7e:2f:af:
         f3:b7:2b:63:e6:43:bc:54:75:49:30:e4:0c:b8:57:27:5b:ec:
         8e:63:95:f9:4d:a8:30:53:2f:59:1a:7e:cf:6b:63:3f:ec:e9:
         63:6a:fc:ad:31:5f:91:99:c8:bd:4a:6b:31:6d:c1:eb:40:f6:
         5c:08:15:77:30:53:50:91:28:c6:b0:56:b7:b7:15:e7:02:61:
         49:0c:b0:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 10:27:17 2025 by rpki-client on console.sobornost.net