Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9119850/FE19EA6C072C11EDBD415E13C4F9AE02/A12944DA072F11ED98F82715C4F9AE02.roa
File:                     A12944DA072F11ED98F82715C4F9AE02.roa (raw, json)
Hash identifier:          7jtdUUMNkZQV5fAIk4bHsRHoQs21J7uJF789PXDFAsc=
Subject key identifier:   72:6C:40:83:9B:36:C8:EE:9F:62:B3:50:5A:FB:04:55:9B:84:FC:36
Certificate issuer:       /CN=A9119850/serialNumber=7F27A788DC0C12041702C796C6DD5A174401F347
Certificate serial:       0248
Authority key identifier: 7F:27:A7:88:DC:0C:12:04:17:02:C7:96:C6:DD:5A:17:44:01:F3:47
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fyeniNwMEgQXAseWxt1aF0QB80c.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9119850/FE19EA6C072C11EDBD415E13C4F9AE02/A12944DA072F11ED98F82715C4F9AE02.roa
Signing time:             Thu 09 Jan 2025 01:46:12 +0000
ROA not before:           Thu 09 Jan 2025 01:46:12 +0000
ROA not after:            Mon 02 Mar 2026 00:00:00 +0000
asID:                     63852
IP address blocks:        103.42.216.0/22 maxlen: 22
                          103.42.216.0/24 maxlen: 24
                          103.42.217.0/24 maxlen: 24
                          103.42.218.0/24 maxlen: 24
                          103.42.219.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9119850/FE19EA6C072C11EDBD415E13C4F9AE02/fyeniNwMEgQXAseWxt1aF0QB80c.crl
                          rsync://rpki.apnic.net/member_repository/A9119850/FE19EA6C072C11EDBD415E13C4F9AE02/fyeniNwMEgQXAseWxt1aF0QB80c.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fyeniNwMEgQXAseWxt1aF0QB80c.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 12 Apr 2025 01:49:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 584 (0x248)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9119850
        Validity
            Not Before: Jan  9 01:46:12 2025 GMT
            Not After : Mar  2 00:00:00 2026 GMT
        Subject: CN=677f2a63-10a1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:c8:07:11:db:72:27:c1:ac:e9:03:11:83:e0:
                    59:d3:f5:71:5e:e6:0e:5c:f9:a0:5a:56:f8:a0:47:
                    b2:36:da:3c:8d:4e:b5:69:4d:73:99:d6:5b:40:6e:
                    97:47:38:9f:18:13:05:21:b9:36:c4:43:82:46:e9:
                    d1:06:48:2f:b8:c6:75:d5:0e:09:28:e3:38:93:17:
                    f3:42:9a:1a:70:04:a2:79:75:f5:e2:f5:ff:c7:f9:
                    0b:2d:48:7d:76:54:90:e8:1e:3b:85:4c:de:e9:bc:
                    55:41:cf:55:cf:bf:30:a6:0c:92:e7:8e:98:97:67:
                    d2:79:40:01:ca:79:4c:a3:04:dd:00:7d:80:e4:5a:
                    97:6d:88:b5:1e:de:48:4f:f1:2f:19:c9:87:6d:e0:
                    16:0a:ea:e1:5d:26:5a:8f:16:c6:38:09:a1:d3:a5:
                    1b:f3:1c:74:8e:ce:78:18:97:a6:0c:4e:09:83:8b:
                    ea:21:28:b1:4b:29:83:6f:5d:7c:16:3a:22:ab:82:
                    55:12:35:90:5a:50:0f:18:6d:84:4b:99:46:a7:52:
                    27:b4:14:1a:af:9d:6d:49:da:ad:52:82:97:c4:d3:
                    62:8a:db:47:12:31:51:95:17:c5:74:a9:d6:23:ad:
                    ef:fc:09:40:7b:52:4b:5d:a3:47:72:5a:05:35:6e:
                    9a:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                72:6C:40:83:9B:36:C8:EE:9F:62:B3:50:5A:FB:04:55:9B:84:FC:36
            X509v3 Authority Key Identifier:
                keyid:7F:27:A7:88:DC:0C:12:04:17:02:C7:96:C6:DD:5A:17:44:01:F3:47

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9119850/FE19EA6C072C11EDBD415E13C4F9AE02/fyeniNwMEgQXAseWxt1aF0QB80c.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fyeniNwMEgQXAseWxt1aF0QB80c.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9119850/FE19EA6C072C11EDBD415E13C4F9AE02/A12944DA072F11ED98F82715C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.42.216.0/22

    Signature Algorithm: sha256WithRSAEncryption
         6d:7b:81:f5:9d:c0:b9:d9:6c:8c:da:4a:53:57:3d:7b:2b:92:
         c2:60:d7:f9:bd:65:f2:01:9b:66:9e:9f:66:28:1f:47:a6:2c:
         11:1c:c2:9b:e2:22:40:55:e8:07:6a:62:12:3c:ff:e7:84:b7:
         e3:d3:c1:77:ba:81:ca:e2:d6:67:5f:36:4c:85:82:95:8d:0b:
         4d:76:54:d5:24:c4:08:f5:c7:18:22:44:be:bc:fa:df:75:f6:
         eb:b3:39:21:be:d8:60:09:c8:b9:06:ec:a8:65:c5:86:c6:a2:
         8d:fa:1d:a8:74:ff:43:f3:61:a2:14:c2:dd:03:fc:5a:92:9d:
         8c:9e:12:2e:3e:55:bf:d0:4b:51:33:ef:b0:a9:45:1e:64:79:
         3a:4c:7f:ba:e9:45:96:70:ee:de:98:12:18:8f:0b:4c:29:5a:
         68:03:b4:3b:a8:2c:87:11:bb:79:51:59:93:ea:fd:52:fd:34:
         0d:f2:2c:9a:59:2c:5d:48:c0:90:26:da:02:16:7d:46:26:52:
         58:03:49:fb:5d:f4:72:05:85:84:65:0a:88:c6:4b:51:2a:cd:
         b6:cb:c4:04:d2:c0:99:b0:f0:27:f0:f9:e6:3e:b1:16:fe:7f:
         d2:cc:e2:74:5f:45:aa:45:d2:b0:0f:e2:6f:f6:b5:cb:d3:25:
         6b:0d:ec:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 23:07:35 2025 by rpki-client