Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A915370F/7346E8A2604911E2A307578D2979BB20/B06C3C12AD6911EF9690E658C4F9AE02.roa
File:                     B06C3C12AD6911EF9690E658C4F9AE02.roa (raw, json)
Hash identifier:          R80o79Cf/gewMorDyo1D6ic4qzsusUsJXg7M2vOiDxY=
Subject key identifier:   D9:F1:AE:11:32:F2:81:E1:DA:80:28:89:FC:B2:0C:27:CF:1E:98:11
Certificate issuer:       /CN=A915370F/serialNumber=BB5B8156B037E5D22263EAC7F6A11C052FDF633F
Certificate serial:       348F
Authority key identifier: BB:5B:81:56:B0:37:E5:D2:22:63:EA:C7:F6:A1:1C:05:2F:DF:63:3F
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/u1uBVrA35dIiY-rH9qEcBS_fYz8.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A915370F/7346E8A2604911E2A307578D2979BB20/B06C3C12AD6911EF9690E658C4F9AE02.roa
Signing time:             Thu 20 Mar 2025 15:21:11 +0000
ROA not before:           Thu 20 Mar 2025 15:21:11 +0000
ROA not after:            Thu 28 May 2026 00:00:00 +0000
asID:                     4826
IP address blocks:        122.8.32.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A915370F/7346E8A2604911E2A307578D2979BB20/u1uBVrA35dIiY-rH9qEcBS_fYz8.crl
                          rsync://rpki.apnic.net/member_repository/A915370F/7346E8A2604911E2A307578D2979BB20/u1uBVrA35dIiY-rH9qEcBS_fYz8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/u1uBVrA35dIiY-rH9qEcBS_fYz8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 15 Apr 2025 15:22:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 13455 (0x348f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A915370F
        Validity
            Not Before: Mar 20 15:21:11 2025 GMT
            Not After : May 28 00:00:00 2026 GMT
        Subject: CN=67dc3267-03ac
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e5:11:d2:99:42:1c:32:ab:68:65:02:70:0e:b0:
                    60:6d:94:6e:a0:f3:fe:8b:43:e0:69:64:e8:26:36:
                    01:e7:b7:10:87:0d:08:16:44:ca:5d:8e:db:76:f4:
                    8f:7c:67:04:69:72:bb:15:3e:7d:39:1d:d3:ad:a1:
                    94:93:52:54:f1:b2:56:8d:14:be:f3:c0:62:5d:43:
                    50:2e:2c:5a:22:c2:ec:ec:e2:0b:73:1d:6f:d0:73:
                    aa:bd:d6:b3:4c:2e:74:cb:67:7f:42:91:e7:1c:04:
                    fe:82:ee:42:ab:16:09:01:b4:47:a9:f1:1e:ca:81:
                    10:5a:12:85:5f:ff:39:f6:5a:c1:b5:8f:ee:30:f5:
                    6c:81:93:c1:6f:35:93:a2:fe:73:2a:6b:6a:76:b9:
                    5b:9d:07:88:0b:e7:c6:b0:a3:ba:a1:58:fa:a2:cf:
                    70:f7:67:33:15:f9:b9:6e:83:ee:e6:82:25:31:b5:
                    83:d2:36:63:31:a8:8c:86:0c:57:6e:77:8d:37:3f:
                    51:f2:72:8f:8f:f7:82:7c:34:93:e5:85:49:09:a4:
                    dc:c0:37:f1:41:18:f7:61:98:59:37:00:24:b7:c5:
                    b6:88:ee:ba:cb:05:55:cb:46:7e:c3:29:d8:4a:ce:
                    ec:a5:9a:81:ca:15:cb:3b:26:75:13:70:28:39:ed:
                    55:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D9:F1:AE:11:32:F2:81:E1:DA:80:28:89:FC:B2:0C:27:CF:1E:98:11
            X509v3 Authority Key Identifier:
                keyid:BB:5B:81:56:B0:37:E5:D2:22:63:EA:C7:F6:A1:1C:05:2F:DF:63:3F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A915370F/7346E8A2604911E2A307578D2979BB20/u1uBVrA35dIiY-rH9qEcBS_fYz8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/u1uBVrA35dIiY-rH9qEcBS_fYz8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915370F/7346E8A2604911E2A307578D2979BB20/B06C3C12AD6911EF9690E658C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  122.8.32.0/22

    Signature Algorithm: sha256WithRSAEncryption
         a2:5c:3b:63:c9:f5:06:60:ad:aa:8e:34:c3:dd:2a:06:42:d1:
         6b:13:34:ea:40:b7:1c:23:d1:68:35:eb:e1:14:da:3d:8e:ec:
         3b:67:aa:97:09:8b:41:25:e3:85:ce:63:cc:33:57:b2:8b:3e:
         d7:25:cf:ab:aa:f4:3e:09:8e:f5:6d:30:f5:2d:e8:75:e3:05:
         ad:84:3a:45:f8:aa:a5:67:ea:a2:4a:01:1e:90:ed:6b:a9:a7:
         c7:d2:0e:7d:be:9d:b2:b2:87:d5:c0:1a:06:3b:d1:71:96:31:
         3b:fe:13:7d:f0:7f:c6:f7:2d:86:c3:a2:12:33:66:64:cb:74:
         6e:71:9d:31:2c:cd:9c:b1:26:93:85:d1:71:c7:82:bb:ea:e0:
         a6:26:77:dd:9b:21:08:48:69:54:4c:d0:c0:ce:a1:3c:78:d7:
         2c:ba:5d:df:24:2e:69:2b:08:c8:bd:f1:8a:34:2a:5e:cf:36:
         ce:6d:02:6a:c2:b6:e4:5e:7d:1b:01:50:93:73:31:e1:12:3e:
         e8:b2:c8:f6:ea:f3:ac:3c:91:8f:f9:60:6f:0e:15:4d:2d:07:
         72:93:a1:24:cc:cd:be:a1:f3:4f:fa:dc:09:59:74:18:b5:cf:
         d7:36:f8:e5:90:50:92:00:fd:a5:e9:a3:1d:00:f7:9d:aa:cc:
         7b:c7:02:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 18:42:40 2025 by rpki-client