Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A912D20C/D40EFF8EA85111EDBB32E749C4F9AE02/ABCAF01CA86211ED9ED67945C4F9AE02.roa
File:                     ABCAF01CA86211ED9ED67945C4F9AE02.roa (raw, json)
Hash identifier:          pCFkiRXMRg9FOPKtz2Gf1bOU3S2ZHbxwwV0mMwR4Ado=
Subject key identifier:   85:78:2E:8B:28:9D:0B:C9:8B:8F:BC:D5:AC:B8:24:29:EF:78:13:D5
Certificate issuer:       /CN=A912D20C/serialNumber=339D12CE37E3A261F6D0F453E59950A84BC8FEA2
Certificate serial:       0168
Authority key identifier: 33:9D:12:CE:37:E3:A2:61:F6:D0:F4:53:E5:99:50:A8:4B:C8:FE:A2
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/M50SzjfjomH20PRT5ZlQqEvI_qI.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A912D20C/D40EFF8EA85111EDBB32E749C4F9AE02/ABCAF01CA86211ED9ED67945C4F9AE02.roa
Signing time:             Fri 03 Jan 2025 02:45:55 +0000
ROA not before:           Fri 03 Jan 2025 02:45:55 +0000
ROA not after:            Tue 31 Mar 2026 00:00:00 +0000
asID:                     150718
IP address blocks:        103.67.22.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A912D20C/D40EFF8EA85111EDBB32E749C4F9AE02/M50SzjfjomH20PRT5ZlQqEvI_qI.crl
                          rsync://rpki.apnic.net/member_repository/A912D20C/D40EFF8EA85111EDBB32E749C4F9AE02/M50SzjfjomH20PRT5ZlQqEvI_qI.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/M50SzjfjomH20PRT5ZlQqEvI_qI.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 10 Apr 2025 02:46:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 360 (0x168)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A912D20C
        Validity
            Not Before: Jan  3 02:45:55 2025 GMT
            Not After : Mar 31 00:00:00 2026 GMT
        Subject: CN=67774f63-3aa7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:ca:4f:7b:77:b2:09:65:fe:1d:48:cf:85:c9:
                    34:b7:0b:31:63:46:bc:90:b4:36:ea:79:c4:36:e8:
                    3a:a7:96:ef:d6:2c:14:6c:d3:32:1a:e0:3a:d3:c7:
                    ae:88:d5:ad:3e:55:56:9c:a6:bb:ed:05:ea:7c:c0:
                    47:fb:f8:f8:e1:a4:49:01:b6:b5:f4:ec:db:03:f9:
                    a4:b1:17:84:7b:b6:fe:c7:01:85:95:26:f2:79:29:
                    49:55:85:3f:48:d6:a6:4c:a1:6d:d9:7c:08:c1:e8:
                    1f:e6:85:7d:6a:ee:e5:e0:8f:01:fb:ef:00:2b:e1:
                    83:e1:28:d1:8f:b3:2e:45:fe:b3:b2:9d:22:5d:16:
                    31:96:8c:61:24:8b:ce:73:4e:b0:8f:71:1b:2d:2d:
                    52:37:f8:17:3f:3d:14:19:a5:21:e7:45:91:00:3e:
                    f2:d1:10:bc:1e:ff:de:f6:b0:2b:78:11:d2:e8:4e:
                    5a:b2:6f:23:50:4e:61:7d:7f:dd:e4:54:a1:14:c8:
                    69:ad:b4:c9:26:88:cd:dd:00:3c:6e:1c:d3:50:74:
                    d5:bb:c4:66:0c:6f:9b:41:7d:2a:81:34:89:a5:5b:
                    99:4f:b6:05:e2:36:7a:f6:18:b3:da:39:a3:3e:e2:
                    30:d7:9c:71:79:78:77:c9:63:28:2d:9c:c1:7f:3c:
                    6d:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                85:78:2E:8B:28:9D:0B:C9:8B:8F:BC:D5:AC:B8:24:29:EF:78:13:D5
            X509v3 Authority Key Identifier:
                keyid:33:9D:12:CE:37:E3:A2:61:F6:D0:F4:53:E5:99:50:A8:4B:C8:FE:A2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A912D20C/D40EFF8EA85111EDBB32E749C4F9AE02/M50SzjfjomH20PRT5ZlQqEvI_qI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/M50SzjfjomH20PRT5ZlQqEvI_qI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912D20C/D40EFF8EA85111EDBB32E749C4F9AE02/ABCAF01CA86211ED9ED67945C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.67.22.0/24

    Signature Algorithm: sha256WithRSAEncryption
         8c:1e:8b:53:26:2b:aa:b5:45:f4:90:8c:ef:51:ef:81:b4:e2:
         70:b6:e4:15:d9:92:69:ec:b6:58:eb:c7:6c:37:08:fe:2c:2a:
         b5:45:fc:f2:b8:b4:9a:4c:59:50:c4:a1:d7:36:1f:a2:5e:2f:
         79:78:85:73:c7:b1:b0:a9:4f:93:b0:c4:0c:23:bc:86:de:59:
         3b:d5:ce:e6:9d:75:ce:59:4f:26:86:8c:63:29:b1:b6:d3:4a:
         f0:fd:1b:c4:22:36:68:ef:68:d2:b9:68:82:27:30:20:4e:ae:
         5e:76:72:c4:71:8a:dd:c3:51:2a:ea:87:d0:77:99:ba:85:3c:
         9f:ce:1d:31:63:80:4c:56:cd:08:9b:7a:6c:32:17:36:f1:74:
         b5:9d:da:d7:5c:26:4a:53:50:67:ec:32:cb:bb:ff:44:a9:9e:
         d2:68:7a:94:79:ef:22:ba:74:9f:bf:b7:40:ec:31:25:d8:96:
         f0:2b:75:94:96:76:8c:e8:f7:5d:23:9d:1f:47:87:6d:7a:b6:
         07:f0:05:72:8e:f6:ad:9d:a6:cb:67:01:00:9e:ea:ee:b6:1f:
         81:98:1f:5b:2e:15:dc:d6:f6:df:11:44:92:34:c0:6c:f3:c4:
         df:dc:f2:bf:6b:09:dc:ff:06:8b:a9:33:6d:26:99:29:ec:2e:
         1a:a4:e2:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 02:13:21 2025 by rpki-client