Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A913D1EA/9C932B48173A11EBA3B97E7FC4F9AE02/06166DF4DC6D11EFBD34F40EC4F9AE02.roa
File:                     06166DF4DC6D11EFBD34F40EC4F9AE02.roa (raw, json)
Hash identifier:          zAVhFCx+Y0sm2rtgFn1OnJdCE1tYjDSThjKJO14bltw=
Subject key identifier:   6D:12:7B:DE:C2:0D:E8:0A:46:B9:EE:2C:C6:5F:CC:21:6D:E1:1E:BC
Certificate issuer:       /CN=A913D1EA/serialNumber=E692C5B60B3EF1C2044439FC390AD56DC3CBCD63
Certificate serial:       0790
Authority key identifier: E6:92:C5:B6:0B:3E:F1:C2:04:44:39:FC:39:0A:D5:6D:C3:CB:CD:63
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5pLFtgs-8cIERDn8OQrVbcPLzWM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A913D1EA/9C932B48173A11EBA3B97E7FC4F9AE02/06166DF4DC6D11EFBD34F40EC4F9AE02.roa
Signing time:             Mon 27 Jan 2025 05:10:28 +0000
ROA not before:           Mon 27 Jan 2025 05:10:28 +0000
ROA not after:            Tue 30 Dec 2025 00:00:00 +0000
asID:                     142424
IP address blocks:        126.209.51.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A913D1EA/9C932B48173A11EBA3B97E7FC4F9AE02/5pLFtgs-8cIERDn8OQrVbcPLzWM.crl
                          rsync://rpki.apnic.net/member_repository/A913D1EA/9C932B48173A11EBA3B97E7FC4F9AE02/5pLFtgs-8cIERDn8OQrVbcPLzWM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5pLFtgs-8cIERDn8OQrVbcPLzWM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 11 Apr 2025 21:11:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1936 (0x790)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A913D1EA
        Validity
            Not Before: Jan 27 05:10:28 2025 GMT
            Not After : Dec 30 00:00:00 2025 GMT
        Subject: CN=67971544-ad5b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:8e:74:37:7d:d5:b7:de:d0:96:cb:b8:dd:b5:
                    bb:c5:1c:44:54:5b:af:7c:b3:3c:1c:ab:2d:42:eb:
                    f3:6c:b4:15:9d:86:62:3b:09:d3:d0:5f:19:fe:f9:
                    1a:61:08:cf:e3:c0:61:1b:e8:9e:ed:de:e3:70:bc:
                    9d:2d:6a:0b:a5:3a:e3:09:4e:e2:bb:76:70:0f:e6:
                    ed:41:62:3e:59:af:5f:45:04:e9:0b:19:89:e9:fe:
                    0f:a0:19:21:90:1a:2d:52:fb:99:a5:50:bc:11:69:
                    04:4f:91:78:ac:ec:a0:a2:48:66:b9:da:63:39:b4:
                    13:c7:72:3b:82:51:06:e2:a4:e9:32:6c:13:5b:da:
                    32:14:7a:d0:b5:06:d2:1c:d7:ea:fd:cb:71:2d:a8:
                    8f:f5:48:15:68:1f:e3:fd:05:05:ec:b4:b7:21:8c:
                    e2:f5:3f:a1:0e:c1:fa:39:76:a0:ed:44:89:4c:c1:
                    06:5f:e5:e5:bc:ab:d0:f9:75:55:ff:60:7d:fe:b6:
                    0b:fc:22:b7:c5:e8:65:97:99:79:ad:35:98:38:3c:
                    f3:6d:51:44:1f:08:a8:a9:0c:a4:b8:20:33:72:32:
                    fb:2e:65:bb:72:9e:4e:7f:26:ec:83:fe:51:b3:67:
                    ce:e4:a1:22:13:6d:68:39:48:4d:cd:39:aa:b0:c3:
                    df:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6D:12:7B:DE:C2:0D:E8:0A:46:B9:EE:2C:C6:5F:CC:21:6D:E1:1E:BC
            X509v3 Authority Key Identifier:
                keyid:E6:92:C5:B6:0B:3E:F1:C2:04:44:39:FC:39:0A:D5:6D:C3:CB:CD:63

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A913D1EA/9C932B48173A11EBA3B97E7FC4F9AE02/5pLFtgs-8cIERDn8OQrVbcPLzWM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5pLFtgs-8cIERDn8OQrVbcPLzWM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913D1EA/9C932B48173A11EBA3B97E7FC4F9AE02/06166DF4DC6D11EFBD34F40EC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  126.209.51.0/24

    Signature Algorithm: sha256WithRSAEncryption
         46:b9:9e:f8:63:bd:17:9a:a6:e1:13:ba:62:7f:63:14:e2:47:
         ed:63:25:a5:ed:15:99:89:bd:7a:46:61:b2:3c:7b:eb:b5:4a:
         4d:f2:f5:3f:d3:27:24:79:ce:3e:fc:d7:52:93:9a:4c:0b:25:
         b3:17:da:14:02:d6:20:48:87:be:bb:00:2d:5b:9f:94:77:58:
         e4:0f:f6:c5:50:2a:cc:ae:3c:1d:82:16:7b:3b:be:9d:8d:ef:
         73:26:14:30:7e:ce:33:a5:b6:b5:ea:61:ff:dd:a1:a0:ac:30:
         da:59:82:7a:dd:3d:a5:70:72:0a:bb:fc:32:d2:15:06:05:89:
         8a:ca:7f:5f:68:56:da:91:d4:5f:e4:b1:25:6b:d5:09:ca:0c:
         9b:32:8c:a0:69:2e:7d:49:84:eb:12:b3:df:22:84:f1:38:66:
         71:de:3d:e4:8e:96:6f:79:e2:21:66:db:61:58:87:3c:59:6a:
         26:ca:a5:84:94:85:64:a6:50:a5:09:ca:32:ed:d3:3c:1b:8b:
         40:4a:60:67:b4:ec:ec:36:94:01:dc:68:30:0a:b4:d3:fc:1e:
         aa:6d:cb:3e:15:94:5c:22:62:90:c3:5c:4c:77:5b:4e:6e:86:
         70:4e:c9:16:0e:7f:ec:72:63:df:b2:d9:e9:9f:2a:5b:bc:13:
         c0:df:90:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 01:58:04 2025 by rpki-client