Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9176E1D/FE8835BCF9F011EFB77A8C6EC4F9AE02/4C9617646D0611F0BBBF9039C4F9AE02.roa
File:                     4C9617646D0611F0BBBF9039C4F9AE02.roa (raw, json)
Hash identifier:          Vaj7yoUJUzeUA3126kxNxsmUyuPrhpFqRcjaAWEYWYI=
Subject key identifier:   D1:1C:5B:B6:C0:05:82:BA:42:64:41:1F:7B:4A:6F:29:E3:6F:81:D2
Certificate issuer:       /CN=A9176E1D/serialNumber=0AA6E48328425E124C561C2AC187C8A196247110
Certificate serial:       55
Authority key identifier: 0A:A6:E4:83:28:42:5E:12:4C:56:1C:2A:C1:87:C8:A1:96:24:71:10
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CqbkgyhCXhJMVhwqwYfIoZYkcRA.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9176E1D/FE8835BCF9F011EFB77A8C6EC4F9AE02/4C9617646D0611F0BBBF9039C4F9AE02.roa
Signing time:             Wed 30 Jul 2025 05:31:27 +0000
ROA not before:           Wed 30 Jul 2025 05:31:27 +0000
ROA not after:            Thu 28 May 2026 00:00:00 +0000
asID:                     153641
IP address blocks:        163.223.4.0/24 maxlen: 24
                          163.223.5.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9176E1D/FE8835BCF9F011EFB77A8C6EC4F9AE02/CqbkgyhCXhJMVhwqwYfIoZYkcRA.crl
                          rsync://rpki.apnic.net/member_repository/A9176E1D/FE8835BCF9F011EFB77A8C6EC4F9AE02/CqbkgyhCXhJMVhwqwYfIoZYkcRA.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CqbkgyhCXhJMVhwqwYfIoZYkcRA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 14 Aug 2025 05:57:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 85 (0x55)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9176E1D, serialNumber=0AA6E48328425E124C561C2AC187C8A196247110
        Validity
            Not Before: Jul 30 05:31:27 2025 GMT
            Not After : May 28 00:00:00 2026 GMT
        Subject: CN=6889ae2f-19d2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:87:31:f4:c3:d0:aa:f2:4c:03:64:8b:ed:63:
                    b1:27:6f:8b:c2:87:94:32:a5:b9:b1:3a:e3:90:71:
                    2c:f2:39:db:53:ec:5f:e6:c6:a6:33:30:e1:d0:7a:
                    48:2c:34:41:31:e4:c5:09:7d:bc:9d:9f:f2:e2:af:
                    fc:7d:17:27:c4:cf:7a:a5:82:ce:ac:b9:6f:20:c6:
                    bf:8a:22:14:d2:d0:0a:3d:a8:17:d1:06:81:2c:12:
                    c2:b0:69:a7:7a:3e:22:50:f1:33:4f:9f:b3:13:b0:
                    2c:7d:cf:6f:c3:da:c6:d8:c9:d1:e1:82:c1:73:3e:
                    c0:7f:78:6b:d1:da:97:c2:4d:db:22:bd:85:d1:8f:
                    8b:51:7c:02:19:d5:e4:49:f0:ac:26:7f:3f:da:97:
                    c9:11:a6:cd:ca:05:d3:c2:de:17:c5:00:a1:cf:3c:
                    71:7e:00:e8:5e:1f:38:12:01:45:f0:18:68:61:52:
                    b4:c3:82:5f:44:4b:d3:07:cf:2a:42:a6:68:14:18:
                    c4:9f:d4:7e:7d:fb:a9:dc:3b:f0:9c:48:af:23:e0:
                    82:6c:f1:56:a6:4a:20:a0:6c:84:f0:64:7f:cd:90:
                    cf:92:c1:3b:da:1f:48:82:5f:ae:2f:1d:81:a4:92:
                    a8:74:ac:a8:3e:63:9f:92:eb:47:b2:df:00:de:93:
                    2c:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D1:1C:5B:B6:C0:05:82:BA:42:64:41:1F:7B:4A:6F:29:E3:6F:81:D2
            X509v3 Authority Key Identifier:
                keyid:0A:A6:E4:83:28:42:5E:12:4C:56:1C:2A:C1:87:C8:A1:96:24:71:10

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9176E1D/FE8835BCF9F011EFB77A8C6EC4F9AE02/CqbkgyhCXhJMVhwqwYfIoZYkcRA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CqbkgyhCXhJMVhwqwYfIoZYkcRA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9176E1D/FE8835BCF9F011EFB77A8C6EC4F9AE02/4C9617646D0611F0BBBF9039C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  163.223.4.0/23

    Signature Algorithm: sha256WithRSAEncryption
         2b:37:1c:5b:8a:62:90:e1:76:8f:5a:04:2c:f1:f7:49:d9:07:
         e4:f5:d1:68:35:65:5c:a3:dd:ea:75:a4:f4:f7:62:b6:af:85:
         dc:e6:1c:75:0a:7c:34:01:55:51:9d:6b:c0:97:30:ed:b6:d5:
         bd:06:70:bf:aa:e9:6c:a0:b1:6c:73:43:de:af:9b:dc:db:b0:
         31:71:ba:61:fe:e0:ce:c2:33:3e:76:06:e9:e7:ac:8e:99:8b:
         b2:b8:6d:38:1e:d2:e6:05:97:0d:75:22:44:d9:c6:f7:c8:d6:
         2d:f0:0e:df:af:73:74:3c:0a:f9:73:36:d1:84:30:6a:0b:76:
         83:8a:2f:ba:dc:bf:6a:03:bc:d2:b6:3b:b4:31:d7:90:07:5d:
         78:e6:90:db:48:86:32:69:96:fd:6f:4c:ce:15:a1:69:a7:cc:
         08:dc:fc:38:dd:d7:d9:c1:e6:62:52:36:39:a3:83:c3:f9:75:
         ab:7e:7c:20:a2:ac:c9:21:74:23:65:be:c0:24:35:34:83:0f:
         b1:4a:f9:c4:64:f2:6d:ca:1f:0a:59:44:bc:ae:d6:91:7b:be:
         b6:67:7f:98:31:6f:10:67:b7:86:a7:12:9e:a9:62:a8:61:fa:
         b5:00:04:ce:bc:fb:e1:9e:0e:14:4a:bb:15:6a:4a:3c:33:26:
         9f:a0:3b:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 10 03:50:54 2025 by rpki-client