Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A916156D/7CD3DEAC4E8911F0A81C6716C4F9AE02/850105504F3D11F0A0960F7CC4F9AE02.roa
File:                     850105504F3D11F0A0960F7CC4F9AE02.roa (raw, json)
Hash identifier:          ycoxpKT+DpgcLoAUSWd+EWSk4JnPGKou98k0R1luHMk=
Subject key identifier:   44:1D:6A:72:58:3B:CF:89:65:DF:CB:97:95:1D:3F:16:FA:26:8D:5C
Certificate issuer:       /CN=A916156D/serialNumber=49DDD1E4C5A9FC766626D2FA3B6637DA80EA2FD2
Certificate serial:       06
Authority key identifier: 49:DD:D1:E4:C5:A9:FC:76:66:26:D2:FA:3B:66:37:DA:80:EA:2F:D2
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Sd3R5MWp_HZmJtL6O2Y32oDqL9I.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A916156D/7CD3DEAC4E8911F0A81C6716C4F9AE02/850105504F3D11F0A0960F7CC4F9AE02.roa
Signing time:             Sun 22 Jun 2025 07:50:59 +0000
ROA not before:           Sun 22 Jun 2025 07:50:59 +0000
ROA not after:            Wed 01 Jul 2026 00:00:00 +0000
asID:                     153777
IP address blocks:        163.227.61.0/24 maxlen: 24
                          2001:df5:5b40::/64 maxlen: 64
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A916156D/7CD3DEAC4E8911F0A81C6716C4F9AE02/Sd3R5MWp_HZmJtL6O2Y32oDqL9I.crl
                          rsync://rpki.apnic.net/member_repository/A916156D/7CD3DEAC4E8911F0A81C6716C4F9AE02/Sd3R5MWp_HZmJtL6O2Y32oDqL9I.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Sd3R5MWp_HZmJtL6O2Y32oDqL9I.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 10 Jul 2025 03:15:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 6 (0x6)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A916156D, serialNumber=49DDD1E4C5A9FC766626D2FA3B6637DA80EA2FD2
        Validity
            Not Before: Jun 22 07:50:59 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=6857b5e3-3df4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:d6:74:ab:85:88:34:94:bc:5c:15:d4:be:c3:
                    56:cf:fd:43:75:68:fa:0d:21:50:ae:08:3d:47:d8:
                    b6:56:8b:68:b6:68:da:02:f4:29:b2:22:61:b6:c8:
                    8b:b4:e1:0d:56:63:76:b8:98:36:b7:46:dd:ab:d7:
                    3a:58:22:1f:b0:05:b2:55:be:5f:5f:ff:78:d0:6f:
                    25:08:66:04:51:c8:6c:41:16:55:c2:b4:06:fa:4a:
                    32:11:a0:c4:de:82:f9:47:ae:ae:0e:64:28:47:3b:
                    a8:f9:3e:43:75:37:40:c9:f7:c7:32:67:54:9e:a2:
                    3d:f0:f1:68:be:c7:46:2e:80:eb:1c:9a:9a:da:8d:
                    96:c7:ea:47:47:30:1c:35:35:85:bb:bc:e6:62:b8:
                    77:39:5c:b9:04:00:0d:6f:a7:04:25:b5:73:07:21:
                    cb:c3:89:6d:be:42:e6:98:4d:96:44:83:d7:15:a9:
                    f0:db:13:a8:0a:7c:89:02:2c:65:25:75:39:70:17:
                    2c:ab:95:32:f1:ec:1d:13:0b:52:6e:5f:e4:8c:56:
                    01:10:b6:a0:86:ed:47:36:57:79:a7:b3:7c:fa:ec:
                    07:b8:23:76:2a:81:33:85:12:34:cb:cc:fa:26:df:
                    68:e4:27:60:9a:83:06:0b:a1:d9:df:fe:cd:47:0a:
                    17:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                44:1D:6A:72:58:3B:CF:89:65:DF:CB:97:95:1D:3F:16:FA:26:8D:5C
            X509v3 Authority Key Identifier:
                keyid:49:DD:D1:E4:C5:A9:FC:76:66:26:D2:FA:3B:66:37:DA:80:EA:2F:D2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A916156D/7CD3DEAC4E8911F0A81C6716C4F9AE02/Sd3R5MWp_HZmJtL6O2Y32oDqL9I.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Sd3R5MWp_HZmJtL6O2Y32oDqL9I.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916156D/7CD3DEAC4E8911F0A81C6716C4F9AE02/850105504F3D11F0A0960F7CC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  163.227.61.0/24
                IPv6:
                  2001:df5:5b40::/64

    Signature Algorithm: sha256WithRSAEncryption
         83:5c:73:9a:45:eb:4d:4c:90:bb:20:aa:40:e4:cd:39:a3:66:
         ec:63:30:51:74:8e:a1:37:ea:45:da:c6:4e:35:1a:18:b3:64:
         84:7b:5d:52:fb:6e:24:16:73:f9:f3:cc:d9:ff:12:c1:aa:7b:
         4e:72:58:7b:f8:9f:d9:84:8c:d5:77:b4:42:5c:3a:5c:08:d7:
         af:a7:88:9a:51:e3:e8:b3:9a:e4:b2:bc:58:2b:ac:60:bb:95:
         ec:06:b8:e5:a0:42:d9:c9:8e:42:14:8c:72:cf:47:c7:08:33:
         8f:94:99:c0:13:a0:3f:23:fc:55:03:08:5d:42:56:1a:b9:8d:
         b2:c2:88:c5:67:df:2f:73:0d:15:fc:46:60:5b:54:76:1c:20:
         db:8a:89:d0:c9:20:0e:41:d2:cd:65:b1:1a:22:5c:0a:a0:c5:
         cb:a8:91:3f:ae:5a:17:05:03:d7:1b:cd:45:6e:a9:71:ff:ed:
         a1:b6:52:9e:ea:49:03:00:15:8c:d0:c7:d8:b3:a1:98:95:53:
         f2:09:49:c3:d8:48:2e:c1:1f:5e:1d:ce:5f:52:58:87:2f:df:
         19:48:8f:49:f4:03:93:bd:9c:b3:27:5f:47:37:a3:32:ab:56:
         75:a8:50:21:e1:24:d8:81:84:c7:27:4b:37:fc:7e:59:33:43:
         b3:ce:3d:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 3 18:16:55 2025 by rpki-client