Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9193EEE/DBB89F9E152B11F0892FD481C4F9AE02/39A906E8152C11F08DC35116C4F9AE02.roa
File:                     39A906E8152C11F08DC35116C4F9AE02.roa (raw, json)
Hash identifier:          Cz1xrc9bH/Qajq24iAukr+R/ULRnEJyRKhsQEM25fCw=
Subject key identifier:   A8:2B:E8:63:75:B5:19:0F:A0:7A:37:90:B6:E5:51:7E:E2:08:1C:79
Certificate issuer:       /CN=A9193EEE/serialNumber=015C82EF8F17F75D01F2A30678685DFDC25E1F7C
Certificate serial:       02
Authority key identifier: 01:5C:82:EF:8F:17:F7:5D:01:F2:A3:06:78:68:5D:FD:C2:5E:1F:7C
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AVyC748X910B8qMGeGhd_cJeH3w.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9193EEE/DBB89F9E152B11F0892FD481C4F9AE02/39A906E8152C11F08DC35116C4F9AE02.roa
Signing time:             Wed 09 Apr 2025 10:20:14 +0000
ROA not before:           Wed 09 Apr 2025 10:20:14 +0000
ROA not after:            Thu 30 Jul 2026 00:00:00 +0000
asID:                     147181
IP address blocks:        163.227.6.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9193EEE/DBB89F9E152B11F0892FD481C4F9AE02/AVyC748X910B8qMGeGhd_cJeH3w.crl
                          rsync://rpki.apnic.net/member_repository/A9193EEE/DBB89F9E152B11F0892FD481C4F9AE02/AVyC748X910B8qMGeGhd_cJeH3w.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AVyC748X910B8qMGeGhd_cJeH3w.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 02 May 2025 07:07:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2 (0x2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9193EEE, serialNumber=015C82EF8F17F75D01F2A30678685DFDC25E1F7C
        Validity
            Not Before: Apr  9 10:20:14 2025 GMT
            Not After : Jul 30 00:00:00 2026 GMT
        Subject: CN=67f649de-b6c8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:46:fe:e7:e9:ac:bb:bb:0c:f2:e6:97:64:4e:
                    0e:a9:d9:3f:57:10:ba:bc:ad:b8:0c:31:df:f1:4f:
                    37:f0:9f:b2:26:99:e2:61:36:fc:c0:1b:a2:68:77:
                    9e:b6:30:d1:88:dc:6c:03:66:b6:92:dd:8e:34:1f:
                    23:15:48:c4:fa:aa:0f:8f:9c:3f:aa:ea:ae:e4:24:
                    09:33:ce:8c:c1:14:b3:08:a2:ba:af:7e:a0:06:4f:
                    25:69:d0:b0:96:38:3b:fd:b0:a9:db:ad:7f:ba:4b:
                    1a:03:e4:3d:47:aa:9b:67:95:7c:03:e4:7a:6e:26:
                    14:a1:7a:96:0b:d6:f4:51:ad:a6:8b:d6:ae:18:e4:
                    44:ba:85:26:64:3f:d6:1d:8b:a5:ef:19:37:4a:6b:
                    e5:5b:6c:f8:85:ab:a2:b9:1c:0a:c4:d2:49:78:81:
                    e1:8f:84:24:a6:cc:e2:7c:cc:62:a4:19:f3:60:2e:
                    b3:77:34:43:8b:7d:2b:6b:6e:2b:04:98:eb:ec:5d:
                    ce:6f:20:7a:ab:6c:07:29:b0:ef:47:b4:1f:2f:bf:
                    b2:00:03:89:1a:49:ac:53:9c:68:8f:9f:e0:03:c0:
                    01:b7:a6:0c:42:7b:b5:b2:96:b2:51:22:c9:c7:fd:
                    5d:cc:3a:94:c7:ac:e8:58:4f:46:9d:e8:b0:81:7e:
                    b4:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A8:2B:E8:63:75:B5:19:0F:A0:7A:37:90:B6:E5:51:7E:E2:08:1C:79
            X509v3 Authority Key Identifier:
                keyid:01:5C:82:EF:8F:17:F7:5D:01:F2:A3:06:78:68:5D:FD:C2:5E:1F:7C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9193EEE/DBB89F9E152B11F0892FD481C4F9AE02/AVyC748X910B8qMGeGhd_cJeH3w.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AVyC748X910B8qMGeGhd_cJeH3w.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9193EEE/DBB89F9E152B11F0892FD481C4F9AE02/39A906E8152C11F08DC35116C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  163.227.6.0/24

    Signature Algorithm: sha256WithRSAEncryption
         88:37:9d:00:b2:5b:55:d3:51:72:54:72:9e:2a:4f:58:84:a0:
         fb:b2:4b:ab:f8:0e:a6:7b:bd:4c:b0:ae:fe:f0:b6:e4:bf:ff:
         11:b7:9b:5a:32:73:d4:c0:45:fa:62:26:93:63:f1:00:83:00:
         7c:c6:2e:80:f9:a2:78:6b:c3:fa:94:e0:19:5f:f7:07:e0:6d:
         70:8f:77:24:fb:89:05:9c:c9:68:4b:7d:06:37:0c:de:2d:4e:
         2b:27:53:a9:33:df:3c:98:4f:06:ca:54:03:2f:be:f9:1e:c1:
         db:29:d0:e8:ca:10:ed:4b:8b:70:0e:2d:e1:b4:4c:6d:4e:c1:
         cb:72:3c:4d:70:bb:26:9d:84:3f:bc:8a:74:be:f2:7b:b8:41:
         2d:06:9a:9e:64:12:91:b8:b4:7a:e1:38:cf:2d:a0:53:bb:94:
         b3:9f:66:a0:de:3c:46:5c:f8:fb:60:ba:22:1a:dc:14:9e:58:
         f3:1f:9a:cd:b8:78:56:f6:77:29:48:7a:47:98:9f:bb:ce:e4:
         54:8d:73:02:9a:85:b6:a7:c7:7c:73:5a:05:98:dd:a8:fb:b5:
         f2:cf:42:d7:db:60:c9:0d:95:60:e2:71:38:63:52:34:20:b0:
         2a:fb:bb:c7:51:6f:23:a5:e4:a8:c8:aa:f3:c0:3b:c1:6c:0f:
         8d:68:db:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 07:42:44 2025 by rpki-client