Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91656C7/5451324A408311F08B03AB65C4F9AE02/0930CE00408411F0A6916727C4F9AE02.roa
File:                     0930CE00408411F0A6916727C4F9AE02.roa (raw, json)
Hash identifier:          zHItbRJJJqgOcejCPC9jI8cuWr3to4ellAhJHJKdyd0=
Subject key identifier:   8C:D1:7E:07:B3:D5:3E:79:54:4B:76:5D:BB:CA:A5:F3:5E:92:1C:11
Certificate issuer:       /CN=A91656C7/serialNumber=7B7F2A8D84AFBD8C332A9F4B4E6709B3AE7F0AF6
Certificate serial:       02
Authority key identifier: 7B:7F:2A:8D:84:AF:BD:8C:33:2A:9F:4B:4E:67:09:B3:AE:7F:0A:F6
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/e38qjYSvvYwzKp9LTmcJs65_CvY.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91656C7/5451324A408311F08B03AB65C4F9AE02/0930CE00408411F0A6916727C4F9AE02.roa
Signing time:             Tue 03 Jun 2025 14:07:08 +0000
ROA not before:           Tue 03 Jun 2025 14:07:08 +0000
ROA not after:            Thu 30 Jul 2026 00:00:00 +0000
asID:                     153789
IP address blocks:        163.227.87.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91656C7/5451324A408311F08B03AB65C4F9AE02/e38qjYSvvYwzKp9LTmcJs65_CvY.crl
                          rsync://rpki.apnic.net/member_repository/A91656C7/5451324A408311F08B03AB65C4F9AE02/e38qjYSvvYwzKp9LTmcJs65_CvY.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/e38qjYSvvYwzKp9LTmcJs65_CvY.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 21 Jun 2025 05:04:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2 (0x2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91656C7, serialNumber=7B7F2A8D84AFBD8C332A9F4B4E6709B3AE7F0AF6
        Validity
            Not Before: Jun  3 14:07:08 2025 GMT
            Not After : Jul 30 00:00:00 2026 GMT
        Subject: CN=683f018c-b9ed
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:76:40:8c:80:14:3f:70:d7:f8:e9:23:65:b5:
                    6d:d9:e2:42:6e:5f:98:09:58:5d:ce:50:d7:b2:c6:
                    78:b3:b6:37:ea:fd:33:ab:53:d1:4e:19:1d:8b:16:
                    8a:f5:a2:d5:69:11:c8:bc:d5:32:1f:eb:b7:17:35:
                    d3:a4:bf:e8:7a:2c:a9:a4:04:ba:4c:84:1f:c3:f8:
                    0f:ed:16:11:cd:d5:ee:0e:f9:c9:3d:29:61:e4:54:
                    3b:e0:ab:a1:d3:66:1f:00:a6:b2:16:26:42:65:ab:
                    36:3c:a4:3a:bf:dd:c2:39:b6:44:84:19:70:1a:67:
                    bc:eb:ea:5b:dd:e8:88:e8:b8:10:b9:97:1f:f0:42:
                    c7:3f:b1:97:16:16:51:3e:9d:9b:30:5f:ec:ef:09:
                    38:c1:f3:91:b0:59:82:aa:5d:0c:19:df:b2:fa:99:
                    5a:41:0a:5a:9a:01:2d:c8:2f:b2:43:8c:a5:b0:2d:
                    f6:5f:0a:cc:32:e4:17:5f:8d:6d:0d:cf:43:00:a7:
                    92:14:28:9c:0c:83:95:cd:35:79:0b:f5:bb:93:0e:
                    6b:a4:29:d1:fe:e7:c7:d5:63:3c:1d:01:0d:88:b7:
                    23:f6:78:e4:b7:2c:57:59:f3:6d:f4:f9:6a:7b:31:
                    38:42:ea:cf:7b:82:e9:a7:1e:bb:e1:8f:62:a6:8e:
                    f8:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8C:D1:7E:07:B3:D5:3E:79:54:4B:76:5D:BB:CA:A5:F3:5E:92:1C:11
            X509v3 Authority Key Identifier:
                keyid:7B:7F:2A:8D:84:AF:BD:8C:33:2A:9F:4B:4E:67:09:B3:AE:7F:0A:F6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91656C7/5451324A408311F08B03AB65C4F9AE02/e38qjYSvvYwzKp9LTmcJs65_CvY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/e38qjYSvvYwzKp9LTmcJs65_CvY.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91656C7/5451324A408311F08B03AB65C4F9AE02/0930CE00408411F0A6916727C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  163.227.87.0/24

    Signature Algorithm: sha256WithRSAEncryption
         1e:80:60:3a:5f:7e:86:f0:45:dd:47:cb:cb:ce:9b:06:20:da:
         cf:7d:b7:0d:b7:29:b4:5a:a4:8e:43:05:0f:53:5e:1b:c6:c3:
         6d:bd:fe:06:17:6c:79:d3:7e:f5:ec:62:fe:c3:92:b0:bc:35:
         20:92:66:fd:fd:14:19:64:bd:a8:84:c0:0b:9f:a3:9f:8f:9c:
         a9:0d:0d:b2:6a:a6:0f:4c:62:53:1b:1f:af:84:8f:fe:00:f3:
         a3:9d:37:60:51:38:21:68:55:fe:94:43:8d:1c:2f:94:34:35:
         8e:e8:34:af:c9:99:fa:15:f4:52:f4:f4:7a:82:8f:d6:16:6d:
         64:17:b4:fb:ee:26:9a:b9:ce:4a:ff:cd:99:45:99:e7:f9:44:
         b0:88:33:7d:e8:ff:d0:dd:3b:a5:2b:cd:b7:94:ae:15:2b:1b:
         e8:83:34:28:4c:79:f6:98:19:7d:ce:f3:29:b1:5f:1f:6b:74:
         54:5f:17:45:57:eb:6b:62:42:6f:49:a9:84:cb:a6:1e:a0:9e:
         55:86:0f:75:4c:85:bf:72:59:4d:9a:4d:14:17:41:98:d4:0f:
         22:19:a6:d6:98:a0:9a:18:e5:df:f3:d1:49:74:4f:ed:aa:b5:
         46:f6:48:c5:79:8f:f8:b8:08:5b:46:43:97:ec:7d:fd:16:dd:
         03:0f:66:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 08:45:41 2025 by rpki-client