Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91D17E6/0594FAE21E5F11F09518664DC4F9AE02/AF69D6BA4C0311F08D3CD93AC4F9AE02.roa
File:                     AF69D6BA4C0311F08D3CD93AC4F9AE02.roa (raw, json)
Hash identifier:          rcGL+ObZ3SX0Z7dA7NG3vylGQnp7zRpBYV2OeNWL8lQ=
Subject key identifier:   AF:B9:DD:90:90:17:F9:A9:20:03:EA:A1:0D:D0:BD:3D:D3:7D:E7:BD
Certificate issuer:       /CN=A91D17E6/serialNumber=162CCE86E2A3697E918B7CB5D56DA0A002C79371
Certificate serial:       1E
Authority key identifier: 16:2C:CE:86:E2:A3:69:7E:91:8B:7C:B5:D5:6D:A0:A0:02:C7:93:71
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FizOhuKjaX6Ri3y11W2goALHk3E.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91D17E6/0594FAE21E5F11F09518664DC4F9AE02/AF69D6BA4C0311F08D3CD93AC4F9AE02.roa
Signing time:             Wed 18 Jun 2025 05:18:36 +0000
ROA not before:           Wed 18 Jun 2025 05:18:36 +0000
ROA not after:            Wed 01 Jul 2026 00:00:00 +0000
asID:                     17660
IP address blocks:        163.227.30.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91D17E6/0594FAE21E5F11F09518664DC4F9AE02/FizOhuKjaX6Ri3y11W2goALHk3E.crl
                          rsync://rpki.apnic.net/member_repository/A91D17E6/0594FAE21E5F11F09518664DC4F9AE02/FizOhuKjaX6Ri3y11W2goALHk3E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FizOhuKjaX6Ri3y11W2goALHk3E.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 25 Jun 2025 05:18:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 30 (0x1e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91D17E6, serialNumber=162CCE86E2A3697E918B7CB5D56DA0A002C79371
        Validity
            Not Before: Jun 18 05:18:36 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=68524c2c-f085
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:16:c6:f3:2b:e4:54:8b:ad:4b:05:48:47:e4:
                    ed:fe:ab:d7:f3:0b:9c:bf:5c:4f:02:76:73:9f:be:
                    11:f4:05:45:3a:1b:b0:e7:a3:cb:f9:53:27:56:74:
                    d0:13:f1:6c:45:8b:6e:d2:fc:8c:8d:02:79:51:39:
                    28:ad:e5:03:96:62:e7:62:84:c7:4f:d7:fe:67:94:
                    eb:e5:29:d4:62:e9:2d:44:66:65:09:34:e6:9b:27:
                    8a:f8:b2:6e:1e:a0:59:ef:ad:98:14:9c:e7:a5:89:
                    73:35:c6:f7:41:36:ed:ea:16:f8:d2:59:f6:15:0d:
                    ad:8a:46:7f:84:1f:a4:c5:80:a6:0d:83:96:a3:90:
                    47:0e:e1:7d:bc:bf:91:cd:ed:a0:a8:81:b1:25:c9:
                    cb:8e:81:02:27:a1:a6:35:14:33:89:48:23:60:ca:
                    13:48:70:f7:81:3f:1e:b8:34:2c:aa:2b:20:11:e9:
                    33:39:12:91:10:65:69:d2:5f:f3:80:75:e8:6c:29:
                    12:54:16:40:d3:f4:79:e1:31:45:3f:dd:75:c6:20:
                    df:97:54:04:04:e6:fe:31:05:cf:e9:94:0b:53:32:
                    e6:b5:1f:f9:bb:e0:4b:02:f2:48:aa:3d:66:32:76:
                    3b:a6:24:b6:2d:b6:2b:a0:ef:1a:c3:2a:af:02:f7:
                    15:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AF:B9:DD:90:90:17:F9:A9:20:03:EA:A1:0D:D0:BD:3D:D3:7D:E7:BD
            X509v3 Authority Key Identifier:
                keyid:16:2C:CE:86:E2:A3:69:7E:91:8B:7C:B5:D5:6D:A0:A0:02:C7:93:71

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91D17E6/0594FAE21E5F11F09518664DC4F9AE02/FizOhuKjaX6Ri3y11W2goALHk3E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FizOhuKjaX6Ri3y11W2goALHk3E.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D17E6/0594FAE21E5F11F09518664DC4F9AE02/AF69D6BA4C0311F08D3CD93AC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  163.227.30.0/23

    Signature Algorithm: sha256WithRSAEncryption
         0f:79:8d:29:66:b5:d2:7b:ba:b9:57:2d:6e:63:db:ed:da:23:
         72:66:ca:1e:64:e2:66:32:78:61:84:ff:d5:ec:15:3a:49:46:
         10:af:d4:fe:d1:1e:60:f9:13:69:e6:31:92:d2:ad:95:e9:64:
         1b:84:e4:ea:77:9e:97:8d:b3:dc:02:67:d9:7d:84:04:78:22:
         11:0c:3e:00:64:41:4d:e1:9f:f1:a9:f1:20:14:5b:9f:24:f6:
         ea:5f:aa:7d:4d:fb:58:d1:a3:b2:46:94:2e:5e:f5:de:ef:1e:
         74:4c:4f:7f:0b:ed:93:93:fd:bb:11:0b:80:75:15:74:16:8a:
         fb:7e:0d:3f:e9:d2:93:fe:b5:64:eb:a5:07:2d:7f:4b:0f:f0:
         cb:9a:b4:1c:1d:2d:0a:19:56:f1:68:35:cc:ef:9d:b8:90:f2:
         2a:4a:c1:55:47:f9:62:c2:92:de:7f:b5:6a:f3:4f:64:26:1c:
         5b:72:e4:db:32:48:5b:a6:88:a4:35:f4:6b:41:51:a9:6e:0c:
         55:73:bb:17:ba:53:f3:11:b8:e4:b8:be:37:28:a3:e2:44:61:
         42:57:94:9a:0c:e9:91:84:e2:dd:26:d5:f7:f3:e1:31:f1:50:
         82:9b:fa:94:35:91:c4:3a:e1:7e:38:1c:32:9e:ff:40:c8:02:
         d1:8f:25:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 19 02:25:51 2025 by rpki-client