Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9172BD3/E80F137CB99211EEAB9F1D19C4F9AE02/B979F0F4BE4211EE9D6A1D6CC4F9AE02.roa
File:                     B979F0F4BE4211EE9D6A1D6CC4F9AE02.roa (raw, json)
Hash identifier:          PrkTvOXkxIIDm1NyNDWg8hQLP2IiT8tO2SVVH/dIBvI=
Subject key identifier:   6C:B8:19:A9:EE:3F:D6:5C:B5:6E:7F:D8:8A:D9:BA:AD:ED:20:73:FE
Certificate issuer:       /CN=A9172BD3/serialNumber=4BE5068B37B1632530FF522386E7B7FB0188E9EA
Certificate serial:       0113
Authority key identifier: 4B:E5:06:8B:37:B1:63:25:30:FF:52:23:86:E7:B7:FB:01:88:E9:EA
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/S-UGizexYyUw_1Ijhue3-wGI6eo.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9172BD3/E80F137CB99211EEAB9F1D19C4F9AE02/B979F0F4BE4211EE9D6A1D6CC4F9AE02.roa
Signing time:             Sat 31 May 2025 05:15:50 +0000
ROA not before:           Sat 31 May 2025 05:15:50 +0000
ROA not after:            Thu 30 Jul 2026 00:00:00 +0000
asID:                     8075
IP address blocks:        164.75.128.0/24 maxlen: 24
                          164.75.129.0/24 maxlen: 24
                          164.75.130.0/24 maxlen: 24
                          164.75.131.0/24 maxlen: 24
                          164.75.132.0/24 maxlen: 24
                          164.75.133.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9172BD3/E80F137CB99211EEAB9F1D19C4F9AE02/S-UGizexYyUw_1Ijhue3-wGI6eo.crl
                          rsync://rpki.apnic.net/member_repository/A9172BD3/E80F137CB99211EEAB9F1D19C4F9AE02/S-UGizexYyUw_1Ijhue3-wGI6eo.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/S-UGizexYyUw_1Ijhue3-wGI6eo.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 26 Jun 2025 04:20:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 275 (0x113)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9172BD3, serialNumber=4BE5068B37B1632530FF522386E7B7FB0188E9EA
        Validity
            Not Before: May 31 05:15:50 2025 GMT
            Not After : Jul 30 00:00:00 2026 GMT
        Subject: CN=683a9086-e516
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e5:59:b0:0a:86:9e:97:63:de:90:33:36:44:24:
                    c8:e1:ef:f9:84:e3:e7:44:f1:ca:15:02:cb:4a:8b:
                    c8:41:09:21:54:b3:2a:e3:c0:8b:80:2b:e7:10:0a:
                    14:d4:50:d4:95:44:9d:4f:43:95:88:04:71:e9:44:
                    21:e5:fd:40:29:0d:86:94:5d:7a:c4:8d:f5:3f:f9:
                    64:26:93:9e:2b:5d:e2:fc:86:ea:c5:c8:7a:83:1b:
                    9f:36:c0:a1:fa:ca:a8:42:5d:84:c9:1c:b9:68:3a:
                    81:7d:6d:22:46:23:1b:10:0c:05:2c:d7:d8:b3:1b:
                    7a:9c:62:5c:4c:f8:80:e3:3d:02:1d:eb:c4:02:fb:
                    42:81:8d:93:71:1c:11:60:79:a8:5a:d7:06:3f:c7:
                    5c:a0:83:21:b2:ec:9e:90:9a:1b:fc:24:62:95:90:
                    a0:0a:13:e5:f3:2a:9e:12:20:20:d4:15:53:dd:5f:
                    57:48:2c:0b:27:3d:d6:ea:cf:09:1d:8a:a4:97:f2:
                    36:b4:c7:f1:28:8b:f4:3f:99:05:a2:41:7c:e2:4d:
                    ad:57:fa:54:6e:0b:d8:90:cd:0e:9b:16:38:8b:1f:
                    be:f5:88:51:ae:9e:36:f9:26:2e:5a:38:ba:05:d6:
                    79:f5:1d:8b:01:e6:ee:a1:0b:cd:c7:58:ef:bd:05:
                    13:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6C:B8:19:A9:EE:3F:D6:5C:B5:6E:7F:D8:8A:D9:BA:AD:ED:20:73:FE
            X509v3 Authority Key Identifier:
                keyid:4B:E5:06:8B:37:B1:63:25:30:FF:52:23:86:E7:B7:FB:01:88:E9:EA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9172BD3/E80F137CB99211EEAB9F1D19C4F9AE02/S-UGizexYyUw_1Ijhue3-wGI6eo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/S-UGizexYyUw_1Ijhue3-wGI6eo.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9172BD3/E80F137CB99211EEAB9F1D19C4F9AE02/B979F0F4BE4211EE9D6A1D6CC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  164.75.128.0-164.75.133.255

    Signature Algorithm: sha256WithRSAEncryption
         4f:7b:b7:18:70:2b:f3:b5:2b:b8:a6:f5:d9:e9:4b:87:13:df:
         5c:bd:a6:64:f3:6b:e4:e6:41:fb:8f:03:e3:bc:48:1a:55:dd:
         8f:7c:15:8c:fa:b3:14:53:72:9f:63:d5:e9:f1:31:51:83:08:
         19:50:55:37:ba:03:83:67:b1:6f:46:b2:eb:ff:43:a2:bb:df:
         68:36:da:13:b8:13:54:6f:33:5f:59:0f:42:f3:43:b2:84:fc:
         43:8b:f2:85:c0:a9:d3:f4:c8:1a:53:47:0c:4e:88:a3:03:6a:
         8d:8f:87:57:8a:f3:46:45:99:a9:36:c7:d9:ac:bc:2d:60:a9:
         f4:5b:3c:79:3a:03:29:65:f0:66:fc:26:65:fe:c7:d4:2e:53:
         8c:78:f7:3c:46:3d:83:24:15:90:f8:17:c7:29:17:aa:39:20:
         34:85:d5:d3:e4:61:f3:04:43:72:c9:3a:e7:23:bc:b7:f4:8c:
         29:41:7c:10:cd:b4:77:8c:33:be:e1:75:6d:10:b2:c6:f1:92:
         3e:c6:24:f9:93:13:d0:a1:3f:ca:e4:0d:49:50:0a:18:89:ac:
         2f:0c:c8:c3:ea:b7:17:93:cc:fb:61:19:5c:50:04:5f:51:e7:
         6a:26:6d:a9:40:8c:fd:14:58:98:d6:f3:f7:e6:7c:bb:ed:2c:
         c6:2d:be:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 19 13:30:55 2025 by rpki-client