Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91A0832/9DAF780E1D9411E29901F3F808B02CD2/160E2D60FF0D11EF8B23C73AC4F9AE02.roa
File:                     160E2D60FF0D11EF8B23C73AC4F9AE02.roa (raw, json)
Hash identifier:          DUYEU2WPRgGRjSa+GBl8Qamn18toiw7tspgbnam3lYo=
Subject key identifier:   32:5E:1F:79:6C:F5:FD:01:46:15:09:82:B3:46:50:D3:0A:A0:A3:F6
Certificate issuer:       /CN=A91A0832/serialNumber=9ED9055107C70F85BB91A8DA0270B5CA760AEB54
Certificate serial:       36C3
Authority key identifier: 9E:D9:05:51:07:C7:0F:85:BB:91:A8:DA:02:70:B5:CA:76:0A:EB:54
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ntkFUQfHD4W7kajaAnC1ynYK61Q.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91A0832/9DAF780E1D9411E29901F3F808B02CD2/160E2D60FF0D11EF8B23C73AC4F9AE02.roa
Signing time:             Sat 22 Mar 2025 15:01:13 +0000
ROA not before:           Sat 22 Mar 2025 15:01:13 +0000
ROA not after:            Wed 01 Jul 2026 00:00:00 +0000
asID:                     142300
IP address blocks:        39.62.0.0/19 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91A0832/9DAF780E1D9411E29901F3F808B02CD2/ntkFUQfHD4W7kajaAnC1ynYK61Q.crl
                          rsync://rpki.apnic.net/member_repository/A91A0832/9DAF780E1D9411E29901F3F808B02CD2/ntkFUQfHD4W7kajaAnC1ynYK61Q.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ntkFUQfHD4W7kajaAnC1ynYK61Q.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 01 May 2025 14:46:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 14019 (0x36c3)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A0832, serialNumber=9ED9055107C70F85BB91A8DA0270B5CA760AEB54
        Validity
            Not Before: Mar 22 15:01:13 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=67ded0b8-ae53
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:a9:73:f9:18:7c:eb:5f:95:d7:4f:c5:70:3d:
                    1c:35:f0:1b:f6:b5:c0:6f:94:ac:6a:ec:77:89:5d:
                    19:ba:0d:35:00:22:71:0b:52:45:34:ce:66:0d:7f:
                    08:e5:e8:95:86:81:61:44:97:6e:f4:e2:35:fe:b9:
                    7f:38:de:3a:3b:38:0c:d1:56:98:93:51:2f:38:92:
                    b4:20:01:5b:f5:83:a7:0d:4b:c8:49:90:65:5d:aa:
                    66:59:f2:15:8d:ee:54:99:94:35:5a:65:4d:ae:ed:
                    7a:ea:0d:d7:a8:91:46:18:11:79:4f:75:e0:bc:0b:
                    68:11:a7:35:90:04:7d:5a:59:59:a8:1b:5b:03:b6:
                    78:1c:40:6f:1f:17:da:b0:c1:62:ab:b2:3f:d4:89:
                    b6:ca:e8:0b:cc:82:c4:92:81:0f:74:9f:a4:5e:91:
                    31:35:95:19:6e:90:d4:69:3f:62:60:1d:e9:02:28:
                    f8:70:76:66:12:c8:92:7d:86:b8:1b:93:03:8d:6e:
                    6a:62:d4:74:4e:cb:b6:dd:91:0d:be:72:f9:cf:a2:
                    b3:09:32:52:dd:1f:07:9f:37:93:4e:79:43:37:d2:
                    87:42:23:a5:fb:78:74:d6:5a:f4:53:a5:1d:d5:08:
                    6e:31:6f:81:4f:a9:85:01:b1:0a:cf:0f:58:9d:85:
                    aa:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                32:5E:1F:79:6C:F5:FD:01:46:15:09:82:B3:46:50:D3:0A:A0:A3:F6
            X509v3 Authority Key Identifier:
                keyid:9E:D9:05:51:07:C7:0F:85:BB:91:A8:DA:02:70:B5:CA:76:0A:EB:54

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91A0832/9DAF780E1D9411E29901F3F808B02CD2/ntkFUQfHD4W7kajaAnC1ynYK61Q.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ntkFUQfHD4W7kajaAnC1ynYK61Q.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A0832/9DAF780E1D9411E29901F3F808B02CD2/160E2D60FF0D11EF8B23C73AC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  39.62.0.0/19

    Signature Algorithm: sha256WithRSAEncryption
         3c:d9:f7:7d:d3:cb:65:87:bb:14:ce:bf:20:a4:7d:d5:84:07:
         1c:2b:93:3b:b9:c7:1b:1e:48:8f:69:5a:a0:8b:61:c2:4d:d6:
         9c:d6:61:56:1e:16:a9:61:47:c0:04:a1:64:58:07:a7:52:fa:
         33:b9:09:8e:12:cc:93:8a:06:3e:70:b7:58:d4:3f:30:8b:61:
         e2:9e:1c:3e:ad:e9:2e:01:c1:86:7f:66:9f:d1:91:14:f4:8d:
         86:f7:48:6b:ae:ba:6f:0e:01:76:f6:4a:56:ad:df:c0:00:30:
         af:3f:d3:7f:9c:ff:2e:a6:06:22:9a:3c:01:e5:7a:0a:64:9c:
         7d:d1:47:c4:2c:96:23:e7:fe:6e:44:0c:31:b8:47:07:07:5c:
         1a:85:8e:f3:7f:b8:2f:18:7f:e6:58:d0:a5:51:1a:98:07:c7:
         ec:ee:12:b7:9c:69:5a:30:7b:3c:5a:f7:bb:b0:22:2d:04:54:
         86:6a:60:8a:24:f4:41:e3:59:6a:21:e4:44:a7:42:de:73:0d:
         4d:98:50:6e:d8:fb:23:9d:e8:cb:69:79:f8:f6:ea:58:30:7a:
         09:fe:a8:79:96:f9:7f:f3:7a:90:46:1d:46:50:90:a4:01:3f:
         04:a1:76:7c:e6:7e:60:13:bc:0a:24:33:fc:2e:ac:84:4f:30:
         0d:09:36:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 08:09:42 2025 by rpki-client