Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9175648/218F268ADC9E11EF8B62DD5FC4F9AE02/F830F4564F3611F0A970852BC4F9AE02.roa
File:                     F830F4564F3611F0A970852BC4F9AE02.roa (raw, json)
Hash identifier:          fiG3ruzyUrai5g5VaE9UAGeJtws3GlUHxnca+lWelW4=
Subject key identifier:   88:2B:41:E6:7B:37:60:4E:93:DB:A8:D2:00:7E:0A:AA:AA:7E:66:C8
Certificate issuer:       /CN=A9175648/serialNumber=2C1C07D151271969E13E1CFD161B1F60770E290D
Certificate serial:       AE
Authority key identifier: 2C:1C:07:D1:51:27:19:69:E1:3E:1C:FD:16:1B:1F:60:77:0E:29:0D
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LBwH0VEnGWnhPhz9FhsfYHcOKQ0.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9175648/218F268ADC9E11EF8B62DD5FC4F9AE02/F830F4564F3611F0A970852BC4F9AE02.roa
Signing time:             Sun 22 Jun 2025 07:03:16 +0000
ROA not before:           Sun 22 Jun 2025 07:03:16 +0000
ROA not after:            Fri 01 May 2026 00:00:00 +0000
asID:                     137385
IP address blocks:        163.61.17.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9175648/218F268ADC9E11EF8B62DD5FC4F9AE02/LBwH0VEnGWnhPhz9FhsfYHcOKQ0.crl
                          rsync://rpki.apnic.net/member_repository/A9175648/218F268ADC9E11EF8B62DD5FC4F9AE02/LBwH0VEnGWnhPhz9FhsfYHcOKQ0.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LBwH0VEnGWnhPhz9FhsfYHcOKQ0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 10 Jul 2025 03:15:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 174 (0xae)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9175648, serialNumber=2C1C07D151271969E13E1CFD161B1F60770E290D
        Validity
            Not Before: Jun 22 07:03:16 2025 GMT
            Not After : May  1 00:00:00 2026 GMT
        Subject: CN=6857aab4-6074
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:ff:6a:4f:05:45:43:8b:b8:b5:df:85:e8:bd:
                    3a:63:c6:e3:8f:9a:ae:49:26:b7:09:d4:8c:a6:df:
                    db:f4:c4:06:03:8d:7a:1f:c5:5e:d6:d6:a7:fc:51:
                    b1:27:5e:0f:41:56:26:21:b5:65:21:ed:8c:24:79:
                    02:f9:fe:56:a1:51:d4:ee:98:77:6d:b6:47:e2:77:
                    f7:80:c8:f5:b3:88:af:43:78:e0:40:52:c5:5e:f7:
                    36:a9:cd:10:7d:b6:49:89:17:83:d6:d1:39:98:af:
                    bd:83:27:c4:16:90:21:14:9c:fa:e7:6a:08:26:e0:
                    47:65:d2:de:61:10:df:6d:b0:0d:e6:ba:12:33:20:
                    3e:61:da:63:89:55:18:ea:c2:d8:a0:c9:6d:b2:cd:
                    ee:56:d5:bc:44:56:92:ac:32:58:b6:03:ac:6a:29:
                    e8:d8:7f:93:2e:40:f4:cc:f8:88:da:04:4d:de:33:
                    cb:08:7a:ed:16:7a:78:5c:f0:fc:d7:d5:3f:79:25:
                    ec:e0:a8:a9:d3:b2:39:0b:b0:0b:69:da:e1:29:a6:
                    92:3a:0a:c4:37:a0:30:a9:07:0c:03:2a:d8:e5:1c:
                    54:f0:e2:d8:e8:21:f8:df:fc:76:99:f7:14:1e:2d:
                    c7:0a:39:03:bb:e4:55:81:f4:95:97:03:68:b7:05:
                    f5:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                88:2B:41:E6:7B:37:60:4E:93:DB:A8:D2:00:7E:0A:AA:AA:7E:66:C8
            X509v3 Authority Key Identifier:
                keyid:2C:1C:07:D1:51:27:19:69:E1:3E:1C:FD:16:1B:1F:60:77:0E:29:0D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9175648/218F268ADC9E11EF8B62DD5FC4F9AE02/LBwH0VEnGWnhPhz9FhsfYHcOKQ0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LBwH0VEnGWnhPhz9FhsfYHcOKQ0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9175648/218F268ADC9E11EF8B62DD5FC4F9AE02/F830F4564F3611F0A970852BC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  163.61.17.0/24

    Signature Algorithm: sha256WithRSAEncryption
         19:17:dc:3a:b7:cd:d1:d8:21:dc:a3:be:6d:8c:bd:79:8e:22:
         52:66:ce:6c:46:ee:96:c6:99:3e:25:53:63:0f:73:e9:41:2d:
         63:60:ed:43:50:4f:df:b3:1b:02:25:db:c8:b5:c3:26:c1:f0:
         c5:6b:30:10:01:1d:78:d4:36:59:85:b6:95:8d:f7:43:e9:08:
         da:a7:c5:e7:1e:bd:59:83:61:14:3f:69:b7:12:a6:bc:43:16:
         f2:9b:ab:ef:bf:dd:30:f0:85:1f:3c:81:08:d6:b2:22:d7:1e:
         85:b5:9c:4c:7c:b9:38:d8:e8:e1:47:cd:0d:dc:61:eb:81:a6:
         9f:48:7c:57:c7:27:af:23:78:41:86:fe:f6:57:ad:4b:da:55:
         1d:bc:bf:94:ed:a5:b6:9d:9b:71:a1:f2:44:35:e1:d0:f1:5c:
         bb:9a:d3:33:7a:c8:42:f2:4f:63:7c:0f:2c:16:61:8a:94:52:
         8d:0b:92:5d:ba:bb:0f:e3:c8:43:98:82:24:c2:b7:c7:07:41:
         6d:c9:de:37:71:52:14:d3:2c:f0:73:6f:4b:b2:0a:cf:11:cc:
         5c:46:ea:f5:bf:af:ef:12:b0:4e:29:c6:ba:99:e8:f5:4e:c0:
         e5:29:44:89:98:1a:06:51:2e:d6:63:3a:c8:a7:57:f2:3f:85:
         2a:fe:28:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 3 09:11:03 2025 by rpki-client