Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9164860/B401C982E97011E8B0359359C4F9AE02/DA505546B74C11ED916B5A6AC4F9AE02.roa
File:                     DA505546B74C11ED916B5A6AC4F9AE02.roa (raw, json)
Hash identifier:          9RHwtONKgQdHSDennn4HM2Ikhdy+C6zf57qmecAxamQ=
Subject key identifier:   73:8A:52:42:71:E6:EA:BF:8D:39:97:4C:83:A3:25:9B:D1:CD:8E:87
Certificate issuer:       /CN=A9164860/serialNumber=BC536C00F85F59041D9C4C2961F72242BF60D51E
Certificate serial:       1209
Authority key identifier: BC:53:6C:00:F8:5F:59:04:1D:9C:4C:29:61:F7:22:42:BF:60:D5:1E
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vFNsAPhfWQQdnEwpYfciQr9g1R4.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9164860/B401C982E97011E8B0359359C4F9AE02/DA505546B74C11ED916B5A6AC4F9AE02.roa
Signing time:             Sat 28 Dec 2024 17:14:59 +0000
ROA not before:           Sat 28 Dec 2024 17:14:59 +0000
ROA not after:            Mon 02 Mar 2026 00:00:00 +0000
asID:                     0
IP address blocks:        103.104.19.0/24 maxlen: 24
                          116.89.244.0/24 maxlen: 24
                          2401:fdc0::/44 maxlen: 44
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9164860/B401C982E97011E8B0359359C4F9AE02/vFNsAPhfWQQdnEwpYfciQr9g1R4.crl
                          rsync://rpki.apnic.net/member_repository/A9164860/B401C982E97011E8B0359359C4F9AE02/vFNsAPhfWQQdnEwpYfciQr9g1R4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vFNsAPhfWQQdnEwpYfciQr9g1R4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 12 Apr 2025 07:53:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4617 (0x1209)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9164860
        Validity
            Not Before: Dec 28 17:14:59 2024 GMT
            Not After : Mar  2 00:00:00 2026 GMT
        Subject: CN=67703212-ef8d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:0b:db:57:e2:40:d3:0d:5b:cf:72:28:0b:69:
                    c0:62:25:f5:0c:db:25:61:97:8c:63:7e:6f:d3:ea:
                    be:b6:f6:fb:55:03:53:a9:81:8a:64:8b:16:6b:e8:
                    77:b0:35:36:5b:84:e0:82:93:5d:87:c7:ae:19:f3:
                    56:58:50:84:70:a9:ef:1f:65:54:cf:54:66:d1:87:
                    1e:20:1a:3b:1a:84:52:9e:9d:63:9e:85:e6:7f:ff:
                    02:f7:5f:12:21:95:e0:24:63:95:79:ba:a7:7f:4b:
                    e2:d7:85:90:64:ac:d3:a7:c4:03:e9:14:d4:00:2b:
                    9b:7d:6c:ea:d3:c7:5e:6d:b4:96:99:08:67:22:e5:
                    c0:ac:28:82:d2:5d:57:29:49:33:ea:92:b1:74:fd:
                    a9:2f:ce:c1:93:10:f6:83:b0:95:25:45:7d:b7:52:
                    b3:34:d0:80:7f:a7:2a:f8:19:89:ff:34:0f:30:05:
                    18:b2:ec:9f:a6:46:da:37:0d:e4:68:2e:e4:28:4b:
                    44:ed:ca:1e:b7:2a:29:74:0e:e2:e2:3a:df:0d:6a:
                    46:5a:0c:9e:50:79:cc:8a:eb:cf:20:ea:5b:dd:71:
                    0e:6d:70:ad:ec:53:07:33:f5:c7:b7:57:00:2b:18:
                    fd:90:95:bc:41:22:8d:9b:30:80:c9:2e:a0:4c:ff:
                    b5:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                73:8A:52:42:71:E6:EA:BF:8D:39:97:4C:83:A3:25:9B:D1:CD:8E:87
            X509v3 Authority Key Identifier:
                keyid:BC:53:6C:00:F8:5F:59:04:1D:9C:4C:29:61:F7:22:42:BF:60:D5:1E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9164860/B401C982E97011E8B0359359C4F9AE02/vFNsAPhfWQQdnEwpYfciQr9g1R4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vFNsAPhfWQQdnEwpYfciQr9g1R4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9164860/B401C982E97011E8B0359359C4F9AE02/DA505546B74C11ED916B5A6AC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.104.19.0/24
                  116.89.244.0/24
                IPv6:
                  2401:fdc0::/44

    Signature Algorithm: sha256WithRSAEncryption
         87:27:31:09:6a:47:7a:14:95:86:d7:a1:22:5f:e1:14:fa:f8:
         02:ab:10:cf:8d:d1:28:09:17:5a:bf:6a:62:b3:27:63:8b:2d:
         07:9a:da:60:59:89:68:11:3d:46:a3:fb:4d:d7:b1:fe:01:09:
         75:dc:c0:36:c4:c9:cd:64:40:56:be:c8:d1:20:45:19:f5:ba:
         71:72:80:b6:64:42:a7:16:fe:c3:83:ae:c5:82:81:9a:5a:95:
         f6:4d:4c:38:74:71:2b:94:9e:e4:7e:ce:98:ba:60:48:4f:60:
         56:7b:34:44:a8:22:61:b7:f4:42:c1:61:b3:c4:6d:3b:00:c0:
         6a:56:9b:a3:bf:08:cf:d1:e9:de:ed:10:3e:24:df:d8:b4:39:
         ef:c9:b4:2f:8b:11:94:5e:f0:9b:1e:11:47:83:02:bf:98:a6:
         4c:c1:35:52:41:e1:d7:8d:88:da:59:9c:69:cf:ff:ca:12:ec:
         29:3e:fe:4c:bd:d0:56:6a:8f:e2:6a:2b:4d:18:b5:e1:b3:2a:
         34:08:87:a1:cb:9e:f5:94:0e:ac:9d:13:86:f3:47:39:db:fa:
         c7:3c:14:e1:2f:1e:e2:53:8a:08:ce:06:8a:06:ca:a2:29:ce:
         bf:54:d4:06:45:b8:83:b3:91:a3:a1:b2:b8:f2:c2:67:69:8a:
         5f:2f:03:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 22:04:49 2025 by rpki-client