Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/E1CA84FE204F11F09B5E4C5CC4F9AE02.roa
File:                     E1CA84FE204F11F09B5E4C5CC4F9AE02.roa (raw, json)
Hash identifier:          R8BGqkgOCN7/oZoOTG7Avvm3Mfr6KZ9R+BNL7XWOQcM=
Subject key identifier:   35:7B:48:0F:EC:36:5F:14:31:F2:F0:30:B1:A3:3F:C9:F9:44:FE:4C
Certificate issuer:       /CN=A91A560A/serialNumber=167C3B221775FEC05039468150CE814756AC6F0A
Certificate serial:       4A71
Authority key identifier: 16:7C:3B:22:17:75:FE:C0:50:39:46:81:50:CE:81:47:56:AC:6F:0A
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/E1CA84FE204F11F09B5E4C5CC4F9AE02.roa
Signing time:             Wed 23 Apr 2025 14:33:12 +0000
ROA not before:           Wed 23 Apr 2025 14:33:11 +0000
ROA not after:            Fri 31 Oct 2025 00:00:00 +0000
asID:                     153591
IP address blocks:        163.61.108.0/23 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.crl
                          rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 03 May 2025 14:34:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 19057 (0x4a71)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A560A, serialNumber=167C3B221775FEC05039468150CE814756AC6F0A
        Validity
            Not Before: Apr 23 14:33:11 2025 GMT
            Not After : Oct 31 00:00:00 2025 GMT
        Subject: CN=6808fa27-339b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:85:4b:73:ab:41:fa:a4:fd:70:af:f7:77:c2:
                    f7:6a:ab:09:fb:31:b9:53:f8:63:be:67:a3:d0:e0:
                    e9:e0:e8:15:bc:60:56:1e:ba:46:e6:5d:7a:29:d9:
                    cb:b6:e7:e9:a8:3d:27:b4:51:a3:5f:7f:ce:b0:2d:
                    e7:ad:51:0f:89:16:32:c0:ce:10:96:0b:bf:bc:b3:
                    66:12:2a:dd:2f:58:97:5e:8d:26:94:44:3b:4e:eb:
                    c8:53:57:c9:01:cd:77:e3:46:b0:3a:49:19:b3:fe:
                    38:79:25:2b:e4:d9:68:ab:6b:87:4a:b0:4f:67:10:
                    69:d7:03:3b:d3:08:52:b2:a1:4c:4b:2c:21:0b:90:
                    15:52:14:37:41:2c:57:76:3e:f1:05:9b:de:b5:65:
                    7c:75:c8:bf:82:5f:49:74:ca:97:a5:41:6d:c5:d2:
                    3d:58:bd:d3:74:4c:c6:f3:84:cd:ba:db:5b:eb:98:
                    d9:92:20:9b:18:d1:00:56:52:0a:68:e9:bb:fd:3d:
                    17:7c:25:14:70:99:0a:cc:47:64:87:59:b4:d6:67:
                    ea:a5:21:0f:52:25:02:1e:01:48:cf:5a:84:ab:8b:
                    51:88:85:14:d1:48:bc:96:b6:bb:a5:60:51:74:e7:
                    25:e0:7d:c8:b4:a8:39:08:a3:ff:31:34:8b:f3:a4:
                    e8:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                35:7B:48:0F:EC:36:5F:14:31:F2:F0:30:B1:A3:3F:C9:F9:44:FE:4C
            X509v3 Authority Key Identifier:
                keyid:16:7C:3B:22:17:75:FE:C0:50:39:46:81:50:CE:81:47:56:AC:6F:0A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/E1CA84FE204F11F09B5E4C5CC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  163.61.108.0/23

    Signature Algorithm: sha256WithRSAEncryption
         be:b8:46:f6:40:07:ae:32:0d:ee:c2:d3:fb:21:e5:76:5d:ee:
         79:c2:c0:39:cf:7a:6f:b3:47:0e:93:5c:d9:6b:83:56:e1:42:
         49:95:54:ca:a6:e5:32:1e:93:98:c1:fb:0f:fd:63:05:4c:e1:
         9d:f5:85:3c:0f:7b:4e:09:64:a9:bf:a6:5c:8f:16:29:cc:3c:
         d0:22:68:78:0c:01:60:e3:a9:45:72:75:08:0a:b1:71:fb:07:
         f8:6c:71:ff:e0:53:0c:5a:bb:c6:98:e2:6a:c5:c2:a3:ec:7b:
         cf:97:6b:c4:fb:9c:0b:3d:fa:b3:a1:d1:1c:3f:b4:b1:36:5e:
         6e:48:6e:ee:f2:fa:22:81:4b:25:22:31:97:f1:f9:c5:61:57:
         93:70:46:46:cf:b5:b3:8f:3f:b3:2f:45:8d:e2:fd:e1:62:54:
         44:72:f2:b6:7c:f5:9c:52:74:c8:7f:4b:f0:c5:73:de:61:76:
         60:3a:39:90:d1:bf:3f:41:90:fc:44:b7:f7:4b:4d:ef:2a:e0:
         c5:3a:a5:44:ad:31:e2:18:a8:ab:69:77:72:54:5d:c5:52:1b:
         74:e7:f3:54:c8:56:69:b6:c1:27:8c:4f:02:c6:61:be:46:34:
         73:19:7f:b3:38:3a:6a:ce:6f:ce:8e:e2:28:7c:25:1f:4f:c5:
         ac:b7:bc:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 18:20:30 2025 by rpki-client on console.sobornost.net