Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9121821/AB22EAC4D54911EE9497D880C4F9AE02/B999A66AD54E11EE842E2F58C4F9AE02.roa
File:                     B999A66AD54E11EE842E2F58C4F9AE02.roa (raw, json)
Hash identifier:          Dv8FHkvwnQ3z5aZYb79leCdrEu8mWPfelNVBwszWr8k=
Subject key identifier:   8D:C7:52:CF:47:DF:EF:1C:C0:9F:3A:88:08:FA:BF:F7:67:FB:4F:65
Certificate issuer:       /CN=A9121821/serialNumber=9EBCB0C34E4F77F2278DB15C59E1EDAC7E55756E
Certificate serial:       D2
Authority key identifier: 9E:BC:B0:C3:4E:4F:77:F2:27:8D:B1:5C:59:E1:ED:AC:7E:55:75:6E
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nryww05Pd_InjbFcWeHtrH5VdW4.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9121821/AB22EAC4D54911EE9497D880C4F9AE02/B999A66AD54E11EE842E2F58C4F9AE02.roa
Signing time:             Thu 03 Apr 2025 05:03:09 +0000
ROA not before:           Thu 03 Apr 2025 05:03:09 +0000
ROA not after:            Fri 01 Aug 2025 00:00:00 +0000
asID:                     150736
IP address blocks:        103.77.216.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9121821/AB22EAC4D54911EE9497D880C4F9AE02/nryww05Pd_InjbFcWeHtrH5VdW4.crl
                          rsync://rpki.apnic.net/member_repository/A9121821/AB22EAC4D54911EE9497D880C4F9AE02/nryww05Pd_InjbFcWeHtrH5VdW4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nryww05Pd_InjbFcWeHtrH5VdW4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 12 Apr 2025 04:59:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 210 (0xd2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9121821
        Validity
            Not Before: Apr  3 05:03:09 2025 GMT
            Not After : Aug  1 00:00:00 2025 GMT
        Subject: CN=67ee168c-db4c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:12:49:9c:30:00:23:66:de:6a:c7:76:07:fe:
                    b5:ab:af:99:5d:a4:f8:98:4d:d7:71:0e:d6:25:4f:
                    68:cd:15:56:91:90:b8:81:51:53:64:a8:19:1a:3f:
                    13:01:f7:3e:1e:4f:be:f1:6e:47:5a:db:55:50:87:
                    75:ec:0e:5d:6e:4c:39:81:8f:1e:a7:13:2b:b3:2d:
                    ad:f1:ac:47:bf:2c:01:7e:da:8e:fd:6d:dc:e6:3b:
                    42:53:13:4f:e1:32:8c:bc:b7:12:66:01:a2:91:46:
                    89:f5:07:d8:8a:ab:43:37:8d:b3:6e:b2:93:91:87:
                    ac:b3:ce:3e:e0:06:8b:19:bc:e1:6c:a4:37:3e:a9:
                    a7:97:88:86:1b:82:d8:7b:83:c4:f5:b4:1b:bb:83:
                    77:eb:50:22:97:71:16:8e:98:e1:9b:8d:5c:c2:d0:
                    2e:d3:c7:fb:8d:5d:01:12:b1:d9:d7:46:d1:30:2f:
                    e7:ad:33:90:c4:d9:f1:f9:e4:93:a6:a7:92:28:bf:
                    7b:6e:49:b7:61:fe:47:9c:b2:5c:1e:c6:f5:c0:0e:
                    c3:c5:e1:f8:f9:d6:4f:69:7c:b4:2a:60:c8:af:8b:
                    72:fd:90:eb:24:c2:a9:f7:06:87:73:08:9e:e8:a0:
                    01:6b:c1:e0:fd:bb:63:03:3f:c8:2b:5b:26:d4:76:
                    68:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8D:C7:52:CF:47:DF:EF:1C:C0:9F:3A:88:08:FA:BF:F7:67:FB:4F:65
            X509v3 Authority Key Identifier:
                keyid:9E:BC:B0:C3:4E:4F:77:F2:27:8D:B1:5C:59:E1:ED:AC:7E:55:75:6E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9121821/AB22EAC4D54911EE9497D880C4F9AE02/nryww05Pd_InjbFcWeHtrH5VdW4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nryww05Pd_InjbFcWeHtrH5VdW4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9121821/AB22EAC4D54911EE9497D880C4F9AE02/B999A66AD54E11EE842E2F58C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.77.216.0/23

    Signature Algorithm: sha256WithRSAEncryption
         0f:22:57:ed:e7:11:34:b3:9d:3f:63:b7:4d:3c:0b:62:b3:66:
         6f:80:83:27:28:51:ff:df:4c:70:ce:ca:2a:4e:d0:fa:c0:9c:
         0d:2f:1d:d8:d0:53:84:d7:73:b1:25:6e:84:02:63:c0:93:5a:
         8b:67:9d:72:af:5f:fb:22:14:7f:6e:63:50:a9:c1:c7:3d:b8:
         8d:77:c1:5e:96:74:d1:a7:c0:c2:36:22:c4:d2:dc:cd:57:de:
         f5:ed:95:12:c7:da:fa:9c:f5:89:db:ea:0e:54:1f:13:e2:49:
         10:16:0a:25:fe:31:db:ac:fa:ab:8c:ab:39:3d:96:1c:b3:e6:
         38:51:41:83:cc:78:a6:51:c0:3e:0a:8d:fe:50:98:c7:24:b3:
         27:ed:cb:70:76:13:58:9e:ce:13:32:00:eb:6a:c6:64:d0:04:
         40:f5:e7:d5:82:ba:54:f3:29:1d:6d:84:19:64:2d:ab:5d:d6:
         a9:71:55:60:64:10:29:2c:ab:8e:64:ae:3f:39:77:bc:83:19:
         2d:90:c6:4c:7b:9a:5c:3c:7d:e0:d5:3c:e7:e7:2b:11:e2:61:
         64:8a:fa:bb:ef:66:53:31:61:18:b2:79:e3:b8:6a:ac:1e:35:
         c7:c3:52:c0:2f:6b:f6:d5:87:4d:4d:ef:70:cf:d4:21:50:ca:
         af:de:74:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 01:44:12 2025 by rpki-client