Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9166E07/6B56D1FA241A11F08F04BE44C4F9AE02/D7D79C92241A11F0A9D27045C4F9AE02.roa
File:                     D7D79C92241A11F0A9D27045C4F9AE02.roa (raw, json)
Hash identifier:          //G4AwnQA0nMb3DeflcQ+SQx5LkYQDI/08bvYQspQs0=
Subject key identifier:   5C:11:1E:FE:92:B7:30:5E:4F:E8:E9:89:9B:D8:F8:46:A3:85:85:B4
Certificate issuer:       /CN=A9166E07/serialNumber=B967D2EE82B7AEEB2C541CA9A5103B5A0CA6E712
Certificate serial:       04
Authority key identifier: B9:67:D2:EE:82:B7:AE:EB:2C:54:1C:A9:A5:10:3B:5A:0C:A6:E7:12
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uWfS7oK3russVByppRA7Wgym5xI.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9166E07/6B56D1FA241A11F08F04BE44C4F9AE02/D7D79C92241A11F0A9D27045C4F9AE02.roa
Signing time:             Mon 28 Apr 2025 10:32:55 +0000
ROA not before:           Mon 28 Apr 2025 10:32:55 +0000
ROA not after:            Thu 30 Jul 2026 00:00:00 +0000
asID:                     153790
IP address blocks:        163.227.90.0/24 maxlen: 24
                          163.227.91.0/24 maxlen: 24
                          2401:fea0::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9166E07/6B56D1FA241A11F08F04BE44C4F9AE02/uWfS7oK3russVByppRA7Wgym5xI.crl
                          rsync://rpki.apnic.net/member_repository/A9166E07/6B56D1FA241A11F08F04BE44C4F9AE02/uWfS7oK3russVByppRA7Wgym5xI.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uWfS7oK3russVByppRA7Wgym5xI.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 20 May 2025 07:22:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4 (0x4)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9166E07, serialNumber=B967D2EE82B7AEEB2C541CA9A5103B5A0CA6E712
        Validity
            Not Before: Apr 28 10:32:55 2025 GMT
            Not After : Jul 30 00:00:00 2026 GMT
        Subject: CN=680f5957-7452
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:ff:c6:ce:82:bb:13:f5:74:70:e6:44:c0:65:
                    83:f9:5e:21:39:53:96:c7:17:c2:c7:7c:63:eb:f9:
                    cd:51:ef:a6:28:91:34:f1:c6:24:fa:b6:e6:62:14:
                    8f:e7:5e:28:db:01:47:e4:e5:a3:9f:f5:e8:a2:82:
                    88:f8:8e:bc:f6:96:06:3d:dd:e6:b3:67:14:ab:ad:
                    7b:4d:17:cf:13:cd:af:5b:67:1d:6b:3f:c4:43:69:
                    83:4c:47:1b:b4:80:e3:39:44:bc:cb:08:4c:df:07:
                    ba:da:00:0f:f0:c4:62:f0:1a:93:b2:1e:2f:1d:6d:
                    8a:c3:4d:31:46:44:04:d9:cc:b0:21:5a:ec:69:bb:
                    88:90:59:cc:e2:9c:fe:38:b0:ab:ea:a2:97:4c:c1:
                    63:4a:4c:de:b7:39:6c:db:e3:da:16:70:7a:51:b4:
                    33:19:81:d7:0c:07:2f:a1:51:ed:11:f4:3a:a9:71:
                    f1:b5:20:22:59:00:c6:b6:58:c5:7f:e8:43:c9:5b:
                    a1:bf:90:31:4c:22:f3:f2:26:18:b6:a4:1f:b8:84:
                    ba:c3:99:96:ad:47:40:3c:d7:92:78:09:be:4c:3d:
                    79:f9:d4:48:c3:aa:81:95:7a:62:bf:1e:b9:42:1c:
                    50:8a:89:9c:2f:6d:4e:8c:55:52:32:01:49:bb:99:
                    7e:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5C:11:1E:FE:92:B7:30:5E:4F:E8:E9:89:9B:D8:F8:46:A3:85:85:B4
            X509v3 Authority Key Identifier:
                keyid:B9:67:D2:EE:82:B7:AE:EB:2C:54:1C:A9:A5:10:3B:5A:0C:A6:E7:12

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9166E07/6B56D1FA241A11F08F04BE44C4F9AE02/uWfS7oK3russVByppRA7Wgym5xI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uWfS7oK3russVByppRA7Wgym5xI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9166E07/6B56D1FA241A11F08F04BE44C4F9AE02/D7D79C92241A11F0A9D27045C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  163.227.90.0/23
                IPv6:
                  2401:fea0::/32

    Signature Algorithm: sha256WithRSAEncryption
         82:3b:a1:a2:12:30:14:d0:94:e8:98:88:04:00:fc:ce:c2:f4:
         26:41:11:5b:44:3a:2a:3f:c8:b2:35:73:c2:46:8a:51:04:24:
         f1:c9:bb:56:52:75:b8:57:8d:33:f8:a2:a1:d2:70:57:d0:44:
         9f:35:26:2b:f5:02:98:cd:4b:aa:cc:ce:b8:a3:d8:e1:d3:9e:
         2f:b7:90:ab:5c:7c:03:d7:22:ab:71:7b:80:d0:e8:e6:9e:1c:
         33:14:d4:88:05:32:ac:a1:8e:ff:4b:41:67:1b:9c:b2:8d:08:
         f0:67:ee:75:13:09:ea:8e:a7:dd:82:5b:5c:3f:2d:cd:c2:83:
         fe:60:e4:3c:b5:2f:5f:14:93:7c:cf:9d:3d:77:ff:56:48:b6:
         11:f7:c3:12:e7:b4:30:3e:f2:ad:d1:a0:0f:d0:23:54:06:fb:
         76:ec:67:f0:50:e7:9f:f4:d5:8d:54:eb:81:61:ec:9a:82:27:
         ce:ad:b7:7f:4c:4d:dd:c6:d4:5c:5b:58:42:72:b0:1d:f8:15:
         5b:3c:5a:d9:52:88:d5:c3:9e:8b:c6:e0:43:b0:57:e2:94:96:
         3f:ce:07:d4:fc:a8:98:f1:e6:28:6c:6e:aa:15:6c:ef:e9:a8:
         31:97:79:db:80:75:22:48:4f:0d:f7:2b:31:9b:78:4c:5b:65:
         f3:1a:a2:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 14 00:57:13 2025 by rpki-client