Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9125532/F37BD67A19C511F0A59D8928C4F9AE02/CB08B0C019C811F0958CB24EC4F9AE02.roa
File:                     CB08B0C019C811F0958CB24EC4F9AE02.roa (raw, json)
Hash identifier:          y8xxOVA8cK5Sc+i2B8yZIUqOuhkVjbuKi4OA78/BPFQ=
Subject key identifier:   4E:2F:FB:88:6E:52:55:8A:61:0E:30:CB:3F:7A:7C:BA:7B:E6:50:21
Certificate issuer:       /CN=A9125532/serialNumber=94508B2AAB032AA33F9A002825823F9AB85C7012
Certificate serial:       09
Authority key identifier: 94:50:8B:2A:AB:03:2A:A3:3F:9A:00:28:25:82:3F:9A:B8:5C:70:12
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lFCLKqsDKqM_mgAoJYI_mrhccBI.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9125532/F37BD67A19C511F0A59D8928C4F9AE02/CB08B0C019C811F0958CB24EC4F9AE02.roa
Signing time:             Tue 15 Apr 2025 07:13:51 +0000
ROA not before:           Tue 15 Apr 2025 07:13:51 +0000
ROA not after:            Thu 30 Jul 2026 00:00:00 +0000
asID:                     153775
IP address blocks:        163.227.62.0/23 maxlen: 23
                          163.227.62.0/24 maxlen: 24
                          163.227.63.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9125532/F37BD67A19C511F0A59D8928C4F9AE02/lFCLKqsDKqM_mgAoJYI_mrhccBI.crl
                          rsync://rpki.apnic.net/member_repository/A9125532/F37BD67A19C511F0A59D8928C4F9AE02/lFCLKqsDKqM_mgAoJYI_mrhccBI.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lFCLKqsDKqM_mgAoJYI_mrhccBI.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 02 May 2025 07:09:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 9 (0x9)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9125532, serialNumber=94508B2AAB032AA33F9A002825823F9AB85C7012
        Validity
            Not Before: Apr 15 07:13:51 2025 GMT
            Not After : Jul 30 00:00:00 2026 GMT
        Subject: CN=67fe072f-a503
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ea:b6:75:d6:ba:23:ad:c1:c9:3f:b0:20:82:c2:
                    ac:d7:ed:bf:37:57:de:46:a2:7c:ad:78:c0:92:2b:
                    e7:a6:05:ba:29:9d:de:50:c0:52:98:78:20:49:f6:
                    49:29:87:24:a7:4e:0d:74:40:f0:06:7b:b2:c6:26:
                    ca:61:28:e9:a5:3e:a3:f4:d4:5a:d6:12:fb:d9:f7:
                    66:64:89:90:73:b9:93:db:a4:d1:ae:eb:74:ff:05:
                    2a:e1:1b:da:62:7a:a5:d8:66:87:90:ac:bf:c6:c3:
                    ec:cf:d7:80:f9:33:68:75:76:f3:d8:14:90:82:4e:
                    82:dc:cc:b5:81:91:63:46:e7:2e:a5:bd:5b:cb:31:
                    0c:d0:d4:27:9b:63:30:5b:b3:07:ee:ee:da:64:9e:
                    f9:06:63:81:64:08:63:65:80:50:53:67:38:35:ec:
                    90:a4:71:55:e5:ae:a4:01:17:a6:c3:91:45:36:1c:
                    4e:04:6b:da:fa:2f:2c:66:fb:94:fa:ee:c4:b5:98:
                    15:cd:75:48:74:f7:ff:66:c9:60:a6:76:49:50:ad:
                    1d:d9:a7:d3:11:8d:b4:b1:bd:2f:d2:af:4c:e3:88:
                    db:3d:58:4f:17:4c:08:83:d6:35:7d:d8:34:71:16:
                    b8:e8:41:4b:b0:89:42:32:d2:d4:27:e9:04:0f:4b:
                    4f:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4E:2F:FB:88:6E:52:55:8A:61:0E:30:CB:3F:7A:7C:BA:7B:E6:50:21
            X509v3 Authority Key Identifier:
                keyid:94:50:8B:2A:AB:03:2A:A3:3F:9A:00:28:25:82:3F:9A:B8:5C:70:12

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9125532/F37BD67A19C511F0A59D8928C4F9AE02/lFCLKqsDKqM_mgAoJYI_mrhccBI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lFCLKqsDKqM_mgAoJYI_mrhccBI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9125532/F37BD67A19C511F0A59D8928C4F9AE02/CB08B0C019C811F0958CB24EC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  163.227.62.0/23

    Signature Algorithm: sha256WithRSAEncryption
         15:27:c6:b9:75:fe:c3:f4:7b:90:dd:05:25:99:da:ba:1e:40:
         10:75:90:27:bf:c9:f5:3c:c7:1e:8c:4f:a0:c5:56:e1:08:6a:
         28:45:38:db:2d:ba:a0:79:1d:92:b5:98:a7:77:62:c0:75:f9:
         54:f6:7b:f2:25:9c:f0:4e:90:f4:df:66:ec:28:83:af:ea:41:
         40:e3:d9:4e:bf:d7:a0:24:fb:f8:75:7a:ec:b1:dc:73:72:81:
         50:50:b6:94:fa:b4:36:92:02:f6:f1:e9:dd:07:1c:15:ed:da:
         e7:7b:a0:4a:30:63:38:a1:29:ee:6a:0b:38:8e:d7:2f:00:a1:
         f6:cf:9a:94:77:0f:50:60:39:6d:ac:51:06:d1:7b:f9:19:75:
         e3:98:e5:ba:68:68:2f:39:9b:5d:12:54:7a:25:bd:d5:3e:56:
         5a:8d:07:5a:79:2d:88:aa:70:95:80:4e:b2:f0:0f:7c:a3:8c:
         b6:18:f0:2b:74:3c:31:a5:91:82:d0:24:53:61:ee:e0:97:1d:
         e2:12:16:61:71:66:19:b8:45:4a:a9:91:ef:d1:ba:7c:97:ef:
         40:04:57:6f:68:77:e2:0b:dc:19:1b:53:d1:bd:f7:f7:c2:4d:
         fa:d6:cb:55:3c:5c:b6:6f:71:b8:a4:c6:c8:2b:28:32:29:08:
         9d:bd:77:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 05:51:49 2025 by rpki-client