Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9194C67/C2A761908E8911EEBC286358C4F9AE02/97C7ABEE8EAA11EEA8406C67C4F9AE02.roa
File:                     97C7ABEE8EAA11EEA8406C67C4F9AE02.roa (raw, json)
Hash identifier:          g09cAtW7q38tkGDCJXd5RjCBSKiULHxUGiRzWgP6Rj4=
Subject key identifier:   67:71:0F:6F:5F:84:9F:69:F3:D5:14:5C:8B:FD:01:08:F9:21:02:FC
Certificate issuer:       /CN=A9194C67/serialNumber=22D021488AE1317FC95C74A38825254AB7926137
Certificate serial:       EF
Authority key identifier: 22:D0:21:48:8A:E1:31:7F:C9:5C:74:A3:88:25:25:4A:B7:92:61:37
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ItAhSIrhMX_JXHSjiCUlSreSYTc.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9194C67/C2A761908E8911EEBC286358C4F9AE02/97C7ABEE8EAA11EEA8406C67C4F9AE02.roa
Signing time:             Wed 25 Dec 2024 04:17:36 +0000
ROA not before:           Wed 25 Dec 2024 04:17:36 +0000
ROA not after:            Mon 02 Mar 2026 00:00:00 +0000
asID:                     135407
IP address blocks:        36.50.12.0/24 maxlen: 24
                          36.50.13.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9194C67/C2A761908E8911EEBC286358C4F9AE02/ItAhSIrhMX_JXHSjiCUlSreSYTc.crl
                          rsync://rpki.apnic.net/member_repository/A9194C67/C2A761908E8911EEBC286358C4F9AE02/ItAhSIrhMX_JXHSjiCUlSreSYTc.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ItAhSIrhMX_JXHSjiCUlSreSYTc.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 18 Apr 2025 04:20:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 239 (0xef)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9194C67
        Validity
            Not Before: Dec 25 04:17:36 2024 GMT
            Not After : Mar  2 00:00:00 2026 GMT
        Subject: CN=676b8760-0469
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:61:b9:a4:7e:21:91:33:85:50:53:9f:99:8a:
                    b9:c0:e3:3b:a2:0c:c9:f8:6f:62:d4:f8:bb:61:85:
                    fd:f9:df:33:d3:57:3a:d2:d5:6a:0b:90:4c:2e:cd:
                    c0:49:ae:92:fc:b4:ac:78:8c:f6:25:f2:a6:4c:2d:
                    dc:06:43:ce:2b:d1:46:00:c6:d3:f1:ae:eb:1b:26:
                    ca:84:ab:c1:f1:b7:b4:76:bf:29:4e:58:5d:9b:c0:
                    bc:ea:19:2d:15:ae:0e:a6:56:57:c2:8b:aa:ab:fb:
                    78:e2:c1:0e:79:2c:5f:21:5d:b8:3f:db:80:0b:95:
                    5d:15:32:b1:89:ab:8d:5e:c9:b7:ec:67:1d:2d:f6:
                    a2:83:f1:75:bb:ce:12:81:ba:d4:58:8d:0a:39:9c:
                    23:94:85:be:48:3f:af:d9:31:cb:5c:d7:3f:38:fd:
                    0d:71:9b:ad:00:0d:8a:f5:b8:69:3e:c9:8f:26:23:
                    fd:84:3f:75:4e:78:2c:21:8c:8c:12:b3:8b:16:6c:
                    5a:97:8d:8a:13:89:98:39:3e:1c:cd:a4:4f:86:01:
                    05:b8:80:60:b3:4e:97:33:e6:14:61:e3:e7:b0:05:
                    ac:26:84:11:3e:58:98:55:10:45:e5:67:60:77:0d:
                    cd:da:5f:b9:12:15:a7:c0:35:68:03:fb:c9:3e:bd:
                    89:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                67:71:0F:6F:5F:84:9F:69:F3:D5:14:5C:8B:FD:01:08:F9:21:02:FC
            X509v3 Authority Key Identifier:
                keyid:22:D0:21:48:8A:E1:31:7F:C9:5C:74:A3:88:25:25:4A:B7:92:61:37

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9194C67/C2A761908E8911EEBC286358C4F9AE02/ItAhSIrhMX_JXHSjiCUlSreSYTc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ItAhSIrhMX_JXHSjiCUlSreSYTc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9194C67/C2A761908E8911EEBC286358C4F9AE02/97C7ABEE8EAA11EEA8406C67C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  36.50.12.0/23

    Signature Algorithm: sha256WithRSAEncryption
         40:d5:85:1b:76:bd:c7:cc:a2:fa:77:64:cf:e1:ed:50:ca:2c:
         ea:aa:39:fb:aa:20:c1:33:b7:2f:df:99:0c:8e:d6:f0:b7:5d:
         31:db:42:06:66:41:9d:e4:a4:33:22:51:23:4d:3e:01:50:f8:
         58:70:e5:54:16:d6:5d:07:e6:54:6a:f8:94:cd:b3:b5:18:f1:
         9e:79:73:d1:cb:f5:27:d8:1c:e9:2b:ee:e6:60:49:33:cb:80:
         f3:73:4d:05:da:ce:20:44:cf:b6:7e:2a:2e:0b:47:80:d8:9e:
         ba:71:c8:ca:ab:4d:77:17:a0:9b:47:1c:1c:7b:88:ab:98:04:
         02:03:18:3f:8e:06:92:39:49:5d:9e:ce:97:e4:31:23:d3:25:
         22:1a:b7:f1:98:bb:de:64:0b:fc:79:8e:2e:42:b2:93:83:45:
         61:ff:a2:33:dd:10:d6:69:b6:a1:bf:af:67:5d:62:6a:8a:0c:
         6e:cb:b0:f2:e3:bd:95:33:7c:0e:18:39:e3:8b:c6:bf:5d:05:
         d1:0c:0c:19:a2:2a:fd:41:ab:f1:53:7a:a4:e9:a4:51:e6:89:
         44:74:c9:81:13:ee:43:df:20:fe:2c:90:8b:3e:1d:d6:7f:ed:
         17:c3:ec:65:84:26:6f:8b:3e:10:98:13:f6:12:9d:7e:05:73:
         c7:38:85:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 09:40:10 2025 by rpki-client