Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A919E1FC/5B325FA6E9B911EFB6DA414CC4F9AE02/09852FF6E9FC11EF9D3DE972C4F9AE02.roa
File:                     09852FF6E9FC11EF9D3DE972C4F9AE02.roa (raw, json)
Hash identifier:          DPBnqYDTJSln1r3AOtKRNxAr3JL7tCw2D7o2HDWUU1c=
Subject key identifier:   4B:F5:A3:8A:7C:8A:FD:B3:74:3D:1F:CC:29:E5:0F:5C:21:BD:90:87
Certificate issuer:       /CN=A919E1FC/serialNumber=CA5F7A3121C1F5F989520C7A519713FB3A68CA7E
Certificate serial:       5D
Authority key identifier: CA:5F:7A:31:21:C1:F5:F9:89:52:0C:7A:51:97:13:FB:3A:68:CA:7E
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yl96MSHB9fmJUgx6UZcT-zpoyn4.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A919E1FC/5B325FA6E9B911EFB6DA414CC4F9AE02/09852FF6E9FC11EF9D3DE972C4F9AE02.roa
Signing time:             Wed 30 Jul 2025 03:58:44 +0000
ROA not before:           Wed 30 Jul 2025 03:58:44 +0000
ROA not after:            Thu 28 May 2026 00:00:00 +0000
asID:                     14618
IP address blocks:        163.61.116.0/24 maxlen: 24
                          2001:df5:14c0::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A919E1FC/5B325FA6E9B911EFB6DA414CC4F9AE02/yl96MSHB9fmJUgx6UZcT-zpoyn4.crl
                          rsync://rpki.apnic.net/member_repository/A919E1FC/5B325FA6E9B911EFB6DA414CC4F9AE02/yl96MSHB9fmJUgx6UZcT-zpoyn4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yl96MSHB9fmJUgx6UZcT-zpoyn4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 18 Aug 2025 07:21:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 93 (0x5d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A919E1FC, serialNumber=CA5F7A3121C1F5F989520C7A519713FB3A68CA7E
        Validity
            Not Before: Jul 30 03:58:44 2025 GMT
            Not After : May 28 00:00:00 2026 GMT
        Subject: CN=68899874-a283
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:b0:3b:f6:80:b9:0e:9b:30:84:26:f8:06:04:
                    54:46:cf:13:01:d7:3e:58:3c:17:3e:46:ad:5f:90:
                    2b:08:87:69:44:14:e1:12:c0:ad:c5:71:52:82:c9:
                    b0:20:e2:a1:cc:27:85:bc:8b:f6:48:8f:cc:f4:ed:
                    10:44:f4:3b:cd:c1:38:e4:6e:ac:3c:0f:d2:26:92:
                    b4:f0:e5:36:3b:d6:51:23:c3:79:2c:6d:7b:a3:ba:
                    9e:a4:ea:f6:f2:76:70:89:69:d3:9b:e4:39:0f:60:
                    ad:88:11:f0:97:91:2d:35:f4:f1:5c:3f:3a:c1:bb:
                    3a:25:7f:16:1d:af:98:5c:31:68:8d:2c:dc:1f:58:
                    64:72:73:37:be:87:14:1b:a3:91:c0:2a:ab:d3:fd:
                    37:17:6b:b8:0d:14:8f:e3:c2:78:7d:8e:c9:94:f6:
                    bf:63:53:c2:c0:78:e8:8d:46:c3:09:f7:5a:2f:dd:
                    48:84:64:11:20:6b:3b:00:26:0d:1e:f8:06:09:73:
                    3d:e9:89:8f:9c:1a:34:dd:53:a9:5f:24:4c:d5:f5:
                    5d:6a:ac:d0:a7:30:f7:48:84:ca:c6:d1:2f:95:17:
                    af:a4:36:8e:91:ae:af:62:da:d6:b7:cd:ee:fa:89:
                    a5:28:b5:15:54:5c:bc:e4:ed:e9:93:e7:95:24:97:
                    19:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4B:F5:A3:8A:7C:8A:FD:B3:74:3D:1F:CC:29:E5:0F:5C:21:BD:90:87
            X509v3 Authority Key Identifier:
                keyid:CA:5F:7A:31:21:C1:F5:F9:89:52:0C:7A:51:97:13:FB:3A:68:CA:7E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A919E1FC/5B325FA6E9B911EFB6DA414CC4F9AE02/yl96MSHB9fmJUgx6UZcT-zpoyn4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yl96MSHB9fmJUgx6UZcT-zpoyn4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919E1FC/5B325FA6E9B911EFB6DA414CC4F9AE02/09852FF6E9FC11EF9D3DE972C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  163.61.116.0/24
                IPv6:
                  2001:df5:14c0::/48

    Signature Algorithm: sha256WithRSAEncryption
         8f:c7:cf:59:eb:ac:b2:b6:91:a0:11:6f:2e:4b:28:b9:3a:ed:
         88:19:3c:d2:20:04:56:ea:5b:89:36:dd:08:22:e5:6e:1a:cf:
         fa:70:a7:e0:07:58:fc:9b:33:90:fd:a9:a5:4a:24:7a:83:50:
         79:1b:03:9e:86:b8:20:bb:07:d7:3d:5e:85:1e:35:c8:78:36:
         79:fc:c5:61:59:31:b2:78:6e:34:bd:98:fe:0c:a3:92:41:ea:
         43:04:99:9d:3f:d9:44:0c:61:83:98:92:cc:4e:c0:de:d7:78:
         2b:f1:d2:fd:ac:87:41:0b:bf:18:4e:0b:f8:cd:f0:04:51:15:
         95:b6:63:60:a5:db:87:98:47:3a:15:17:eb:3b:2d:e6:b4:f6:
         84:57:47:83:92:50:9b:99:56:79:83:61:fb:43:4a:5e:4e:85:
         0b:4d:0d:67:8d:50:9a:a5:0d:20:12:a4:36:d9:fb:04:6d:05:
         60:07:01:d8:65:29:c9:f9:fd:eb:28:f5:fd:33:09:f3:2f:26:
         6b:fd:83:d7:4b:87:a3:88:63:59:91:74:e5:c8:41:6e:75:47:
         13:79:f2:47:4f:75:4c:f4:90:5f:3c:39:6d:bb:53:cf:1e:40:
         91:6d:f4:a7:6a:2a:7d:8c:2b:19:a9:7a:7f:4c:86:43:f8:b6:
         af:fd:ca:8c
-----BEGIN CERTIFICATE-----
MIIFgTCCBGmgAwIBAgIBXTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE5
RTFGQzExMC8GA1UEBRMoQ0E1RjdBMzEyMUMxRjVGOTg5NTIwQzdBNTE5NzEzRkIz
QTY4Q0E3RTAeFw0yNTA3MzAwMzU4NDRaFw0yNjA1MjgwMDAwMDBaMBgxFjAUBgNV
BAMTDTY4ODk5ODc0LWEyODMwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQC5sDv2gLkOmzCEJvgGBFRGzxMB1z5YPBc+Rq1fkCsIh2lEFOESwK3FcVKCybAg
4qHMJ4W8i/ZIj8z07RBE9DvNwTjkbqw8D9ImkrTw5TY71lEjw3ksbXujup6k6vby
dnCJadOb5DkPYK2IEfCXkS019PFcPzrBuzolfxYdr5hcMWiNLNwfWGRycze+hxQb
o5HAKqvT/TcXa7gNFI/jwnh9jsmU9r9jU8LAeOiNRsMJ91ov3UiEZBEgazsAJg0e
+AYJcz3piY+cGjTdU6lfJEzV9V1qrNCnMPdIhMrG0S+VF6+kNo6Rrq9i2ta3ze76
iaUotRVUXLzk7emT55UklxltAgMBAAGjggKmMIICojAdBgNVHQ4EFgQUS/WjinyK
/bN0PR/MKeUPXCG9kIcwHwYDVR0jBBgwFoAUyl96MSHB9fmJUgx6UZcT+zpoyn4w
DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTlFMUZDLzVCMzI1RkE2RTlC
OTExRUZCNkRBNDE0Q0M0RjlBRTAyL3lsOTZNU0hCOWZtSlVneDZVWmNULXpwb3lu
NC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG
RDFGRjIveWw5Nk1TSEI5Zm1KVWd4NlVaY1QtenBveW40LmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwgcsGCCsGAQUFBwELBIG+MIG7MIGDBggrBgEFBQcw
C4Z3cnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5
RTFGQy81QjMyNUZBNkU5QjkxMUVGQjZEQTQxNENDNEY5QUUwMi8wOTg1MkZGNkU5
RkMxMUVGOUQzREU5NzJDNEY5QUUwMi5yb2EwMwYIKwYBBQUHMA2GJ2h0dHBzOi8v
cnJkcC5hcG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAwBggrBgEFBQcBBwEB/wQh
MB8wDAQCAAEwBgMEAKM9dDAPBAIAAjAJAwcAIAEN9RTAMA0GCSqGSIb3DQEBCwUA
A4IBAQCPx89Z66yytpGgEW8uSyi5Ou2IGTzSIARW6luJNt0IIuVuGs/6cKfgB1j8
mzOQ/amlSiR6g1B5GwOehrgguwfXPV6FHjXIeDZ5/MVhWTGyeG40vZj+DKOSQepD
BJmdP9lEDGGDmJLMTsDe13gr8dL9rIdBC78YTgv4zfAEURWVtmNgpduHmEc6FRfr
Oy3mtPaEV0eDklCbmVZ5g2H7Q0peToULTQ1njVCapQ0gEqQ22fsEbQVgBwHYZSnJ
+f3rKPX9MwnzLyZr/YPXS4ejiGNZkXTlyEFudUcTefJHT3VM9JBfPDltu1PPHkCR
bfSnaip9jCsZqXp/TIZD+Lav/cqM
-----END CERTIFICATE-----
Generated at Wed Aug 13 04:28:38 2025 by rpki-client