Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91BDEEB/1EE7FA60E5F411EFABD39D7EC4F9AE02/B05A01A220E911F08F444270C4F9AE02.roa
File:                     B05A01A220E911F08F444270C4F9AE02.roa (raw, json)
Hash identifier:          3pjVRdH3b1U8cI2gfYNTneHn035nUDTEHaorObkQiNg=
Subject key identifier:   75:7E:2F:6B:B3:2C:76:14:69:9B:83:E4:5C:F8:02:2C:20:CD:F6:0B
Certificate issuer:       /CN=A91BDEEB/serialNumber=6B63A60E7D7F51D038728C6425906047016C9904
Certificate serial:       3A
Authority key identifier: 6B:63:A6:0E:7D:7F:51:D0:38:72:8C:64:25:90:60:47:01:6C:99:04
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/a2OmDn1_UdA4coxkJZBgRwFsmQQ.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91BDEEB/1EE7FA60E5F411EFABD39D7EC4F9AE02/B05A01A220E911F08F444270C4F9AE02.roa
Signing time:             Thu 24 Apr 2025 09:41:09 +0000
ROA not before:           Thu 24 Apr 2025 09:41:09 +0000
ROA not after:            Thu 28 May 2026 00:00:00 +0000
asID:                     134886
IP address blocks:        163.61.96.0/24 maxlen: 24
                          163.61.97.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91BDEEB/1EE7FA60E5F411EFABD39D7EC4F9AE02/a2OmDn1_UdA4coxkJZBgRwFsmQQ.crl
                          rsync://rpki.apnic.net/member_repository/A91BDEEB/1EE7FA60E5F411EFABD39D7EC4F9AE02/a2OmDn1_UdA4coxkJZBgRwFsmQQ.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/a2OmDn1_UdA4coxkJZBgRwFsmQQ.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 02 May 2025 06:43:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 58 (0x3a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91BDEEB, serialNumber=6B63A60E7D7F51D038728C6425906047016C9904
        Validity
            Not Before: Apr 24 09:41:09 2025 GMT
            Not After : May 28 00:00:00 2026 GMT
        Subject: CN=680a0735-4bfd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:5e:d9:0c:97:a3:3c:2f:fa:ef:4c:b2:5c:95:
                    57:6a:14:36:31:e0:3e:a5:ca:29:b2:23:d2:ba:7e:
                    26:f6:b2:83:c2:79:d0:c9:8d:ba:3b:37:58:d8:f4:
                    b9:52:47:4c:8b:73:4f:50:9d:e3:d5:d7:d8:24:fb:
                    e9:0d:a6:8d:99:17:32:0a:48:0d:66:3a:65:7f:1e:
                    ee:8f:59:06:fc:1b:3d:60:eb:8a:f8:64:1d:e4:a7:
                    19:e2:a5:43:b4:2e:4c:d4:64:0a:91:df:f8:4b:7d:
                    a5:aa:d2:93:93:4b:78:8d:e1:b3:2b:63:1c:76:b2:
                    7b:7c:2e:26:5b:46:99:8f:51:17:2b:d5:e3:eb:c1:
                    b9:0e:99:74:69:1f:40:10:82:0c:cf:7b:bf:82:33:
                    38:d6:ba:c4:13:67:44:70:f3:b4:78:39:a3:db:86:
                    b7:b8:aa:6c:29:74:57:67:89:c9:33:ce:61:a5:82:
                    37:a7:3f:7f:a3:da:e2:5a:7b:15:bb:73:be:bf:bd:
                    29:75:da:88:3d:7a:c9:93:29:1d:ae:3e:8d:34:0e:
                    eb:81:96:58:bc:09:ea:4c:a0:ab:f4:ab:03:bd:50:
                    81:42:5c:af:26:78:e4:f9:55:df:92:42:91:ad:59:
                    00:0e:a2:8e:1e:25:b2:e8:89:d1:02:7a:9f:cd:44:
                    4b:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                75:7E:2F:6B:B3:2C:76:14:69:9B:83:E4:5C:F8:02:2C:20:CD:F6:0B
            X509v3 Authority Key Identifier:
                keyid:6B:63:A6:0E:7D:7F:51:D0:38:72:8C:64:25:90:60:47:01:6C:99:04

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91BDEEB/1EE7FA60E5F411EFABD39D7EC4F9AE02/a2OmDn1_UdA4coxkJZBgRwFsmQQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/a2OmDn1_UdA4coxkJZBgRwFsmQQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BDEEB/1EE7FA60E5F411EFABD39D7EC4F9AE02/B05A01A220E911F08F444270C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  163.61.96.0/23

    Signature Algorithm: sha256WithRSAEncryption
         8b:35:f2:fd:d0:a2:c7:52:f4:c0:52:df:28:3c:79:96:06:6e:
         a0:11:1b:56:11:6d:7e:da:6d:49:01:f6:62:c2:0c:6d:9e:f1:
         e5:ae:fb:8c:89:8e:17:63:73:bd:80:5f:31:c7:00:43:24:8c:
         ad:81:c1:7f:ae:6c:22:7b:83:65:11:49:10:a6:56:19:55:ef:
         07:31:b7:ec:44:d2:d9:22:bf:8a:ce:e1:87:55:da:08:85:03:
         77:97:c3:b5:8d:5e:91:a3:8c:97:f3:4a:28:ef:83:5e:e7:ef:
         31:d4:55:2d:cf:94:6c:49:ee:3c:4e:76:40:a0:21:af:d3:52:
         4e:92:af:fe:54:54:0f:27:c8:31:2e:c1:00:d9:c4:e9:ca:a9:
         fd:13:a4:7e:7b:6f:1d:39:04:5d:9a:bf:d1:6e:39:77:ec:fb:
         67:18:45:be:f4:31:77:9f:c2:22:48:5e:57:6c:bb:3f:e8:16:
         15:b2:35:88:5a:32:76:24:e0:81:01:08:ce:66:1e:d9:0d:f9:
         06:7c:19:90:36:1e:7e:fa:3f:80:90:44:de:31:98:9a:19:54:
         2d:79:84:d9:3b:fc:94:e3:d3:4a:9d:f8:12:14:d5:8e:67:89:
         a3:d1:b8:db:2f:d7:37:21:08:79:ec:19:1a:fb:4c:d1:10:28:
         3b:24:ba:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 08:29:06 2025 by rpki-client