Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A915370F/7346E8A2604911E2A307578D2979BB20/6B016F4EB6C911EF9370FA5AC4F9AE02.roa
File:                     6B016F4EB6C911EF9370FA5AC4F9AE02.roa (raw, json)
Hash identifier:          70B3F87XSLKvXUF998Hdc/HoObUhGZVos2Z7tXO0ymU=
Subject key identifier:   E7:92:4D:E5:60:48:98:A6:3A:EC:7D:C0:B1:6C:C6:CC:BC:C4:CE:27
Certificate issuer:       /CN=A915370F/serialNumber=BB5B8156B037E5D22263EAC7F6A11C052FDF633F
Certificate serial:       349A
Authority key identifier: BB:5B:81:56:B0:37:E5:D2:22:63:EA:C7:F6:A1:1C:05:2F:DF:63:3F
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/u1uBVrA35dIiY-rH9qEcBS_fYz8.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A915370F/7346E8A2604911E2A307578D2979BB20/6B016F4EB6C911EF9370FA5AC4F9AE02.roa
Signing time:             Thu 20 Mar 2025 15:21:20 +0000
ROA not before:           Thu 20 Mar 2025 15:21:20 +0000
ROA not after:            Thu 28 May 2026 00:00:00 +0000
asID:                     62610
IP address blocks:        118.26.60.0/24 maxlen: 24
                          118.26.61.0/24 maxlen: 24
                          118.26.62.0/24 maxlen: 24
                          118.26.63.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A915370F/7346E8A2604911E2A307578D2979BB20/u1uBVrA35dIiY-rH9qEcBS_fYz8.crl
                          rsync://rpki.apnic.net/member_repository/A915370F/7346E8A2604911E2A307578D2979BB20/u1uBVrA35dIiY-rH9qEcBS_fYz8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/u1uBVrA35dIiY-rH9qEcBS_fYz8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 11 Apr 2025 15:24:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 13466 (0x349a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A915370F
        Validity
            Not Before: Mar 20 15:21:20 2025 GMT
            Not After : May 28 00:00:00 2026 GMT
        Subject: CN=67dc326f-3b55
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:54:88:c6:98:ba:de:d5:4d:c1:2e:5c:d8:75:
                    88:cc:9b:a0:10:48:42:46:16:7c:b2:90:84:89:54:
                    e9:7e:a5:6e:e7:89:a9:79:c9:ef:80:8b:5f:a7:e5:
                    a2:bb:95:61:2e:8f:6d:d7:f4:ce:b9:af:8e:52:a7:
                    77:da:09:f0:80:e0:06:5c:f7:3a:9d:7c:ed:6b:7c:
                    f1:31:d3:21:63:d8:2e:79:2a:fc:92:dd:f3:5b:d5:
                    a6:c1:17:05:a9:d7:82:56:ef:30:71:22:03:fc:88:
                    a4:1b:97:39:fe:cf:da:bf:49:f8:b8:36:18:b1:8a:
                    85:7b:db:d9:a7:c4:03:be:83:1a:f5:86:94:33:c4:
                    42:2c:a2:5b:e3:d0:2f:fb:fa:40:82:77:46:3f:fa:
                    80:cb:e8:52:7c:9b:94:95:bc:fb:f4:58:35:94:59:
                    e1:6c:47:86:79:ba:29:f9:92:bc:3e:93:96:5d:17:
                    90:10:b6:c7:5d:f7:1f:25:e4:37:19:e4:3e:4a:01:
                    01:f5:ca:34:75:41:3f:36:c6:c9:c4:d4:5b:2d:c2:
                    41:16:6f:1e:2c:70:bb:9a:2c:03:03:27:a3:ea:7b:
                    de:0f:50:c6:69:ca:ba:ed:76:1d:f5:79:1e:3f:69:
                    f9:f8:eb:f7:37:68:cc:ea:ea:67:ed:77:6b:80:b0:
                    2b:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E7:92:4D:E5:60:48:98:A6:3A:EC:7D:C0:B1:6C:C6:CC:BC:C4:CE:27
            X509v3 Authority Key Identifier:
                keyid:BB:5B:81:56:B0:37:E5:D2:22:63:EA:C7:F6:A1:1C:05:2F:DF:63:3F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A915370F/7346E8A2604911E2A307578D2979BB20/u1uBVrA35dIiY-rH9qEcBS_fYz8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/u1uBVrA35dIiY-rH9qEcBS_fYz8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915370F/7346E8A2604911E2A307578D2979BB20/6B016F4EB6C911EF9370FA5AC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  118.26.60.0/22

    Signature Algorithm: sha256WithRSAEncryption
         4b:5c:a6:74:b2:49:fc:8a:61:46:99:60:09:aa:94:73:b9:cc:
         3b:b4:af:36:5e:52:16:cc:65:85:b1:37:04:92:04:80:97:2d:
         f2:b2:54:e1:5b:13:1a:4a:01:1b:5b:26:4c:18:69:cc:3b:08:
         9e:64:68:44:6a:8b:b1:fe:78:3c:9e:e4:3c:f1:2c:00:f5:e5:
         67:f8:9a:50:87:5a:ce:8e:b3:1e:d2:8f:7a:ee:0b:90:2a:4b:
         0d:9a:b4:43:7b:e0:0c:d1:96:37:04:10:5d:d5:48:41:f6:9b:
         26:4f:7d:06:ed:4d:ee:48:1b:da:37:4e:a7:91:65:c3:ab:f7:
         04:54:88:9f:3e:ed:6c:cc:66:e5:83:27:cd:17:ae:db:fb:db:
         48:b1:8b:52:0d:b2:9e:a4:42:3a:6b:1c:a0:a9:84:09:5d:eb:
         7e:31:8b:4f:dd:b3:f7:79:07:28:02:90:fe:1e:80:09:03:27:
         2e:ea:5d:b6:60:eb:f4:0e:2c:9b:82:00:58:03:2e:f2:e3:8e:
         6f:e7:18:d7:50:6a:a3:d0:a0:e0:36:4e:c2:ee:b3:b1:8f:86:
         2d:9d:ae:87:e2:8e:28:a1:4d:f2:40:02:99:8e:94:f8:b7:97:
         cd:98:cd:4a:d4:0f:19:83:3c:ce:54:e4:d6:83:8e:0c:b3:87:
         3b:70:62:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 00:55:29 2025 by rpki-client