Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9129969/CF395C381C6A11EEBF62AC0DC4F9AE02/37649AB0D6C511EEB512CC7FC4F9AE02.roa
File:                     37649AB0D6C511EEB512CC7FC4F9AE02.roa (raw, json)
Hash identifier:          Yf3syhODw0cAx33YmQD7J4oKJN2R4/9xKFbcxAFrzEc=
Subject key identifier:   F5:D2:6D:43:A2:F7:F9:2D:C8:41:EF:9B:C3:82:5F:33:1C:42:DB:E2
Certificate issuer:       /CN=A9129969/serialNumber=01666FC7DD875DFFA0E19BC73CBADA8ECF9A5827
Certificate serial:       0146
Authority key identifier: 01:66:6F:C7:DD:87:5D:FF:A0:E1:9B:C7:3C:BA:DA:8E:CF:9A:58:27
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AWZvx92HXf-g4ZvHPLrajs-aWCc.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9129969/CF395C381C6A11EEBF62AC0DC4F9AE02/37649AB0D6C511EEB512CC7FC4F9AE02.roa
Signing time:             Fri 07 Feb 2025 03:16:19 +0000
ROA not before:           Fri 07 Feb 2025 03:16:19 +0000
ROA not after:            Fri 01 May 2026 00:00:00 +0000
asID:                     16509
IP address blocks:        103.212.67.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9129969/CF395C381C6A11EEBF62AC0DC4F9AE02/AWZvx92HXf-g4ZvHPLrajs-aWCc.crl
                          rsync://rpki.apnic.net/member_repository/A9129969/CF395C381C6A11EEBF62AC0DC4F9AE02/AWZvx92HXf-g4ZvHPLrajs-aWCc.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AWZvx92HXf-g4ZvHPLrajs-aWCc.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 21 Feb 2025 05:15:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 326 (0x146)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9129969
        Validity
            Not Before: Feb  7 03:16:19 2025 GMT
            Not After : May  1 00:00:00 2026 GMT
        Subject: CN=67a57b02-b597
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:08:71:d8:39:48:4f:4e:17:03:e1:ac:3b:2d:
                    ee:4c:ee:1c:05:e5:9d:60:96:89:5f:f2:f0:90:a5:
                    fe:65:6d:9c:15:1e:12:33:73:f8:e5:ad:98:a5:85:
                    49:91:fb:97:df:c8:38:12:06:46:48:24:9f:11:45:
                    09:a8:3b:ca:3c:47:f7:b5:2a:41:30:b7:14:0c:66:
                    cb:6e:d8:55:1e:e8:dc:1e:62:22:b7:02:e3:4a:a0:
                    b5:0b:43:80:ef:7f:a9:6c:e5:6e:65:54:f3:e3:c2:
                    16:b9:09:3a:a6:7d:50:a8:d4:d4:e7:c7:b7:76:e9:
                    7e:34:7c:0e:b4:46:2f:fe:4d:b8:d7:9e:d8:c3:c1:
                    4d:c3:c8:9b:6e:15:02:b2:b0:31:62:3b:f8:5b:cc:
                    e9:82:54:5a:eb:91:0e:95:df:00:16:6f:6b:2c:a0:
                    7d:1b:71:ce:7f:60:a0:55:d6:4f:99:84:46:9a:ec:
                    82:eb:a5:88:8c:0d:5c:c8:cc:cd:56:0d:bb:e7:21:
                    ae:43:d6:95:66:20:87:f1:7f:e9:99:c4:9d:2a:5e:
                    e7:4f:d3:78:56:60:c9:45:62:93:72:ef:6b:4a:7e:
                    2b:bc:a4:25:5a:75:37:00:3c:f8:e4:fd:24:96:b7:
                    a7:5a:40:e1:54:29:d3:da:94:26:dc:56:4b:41:bc:
                    31:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F5:D2:6D:43:A2:F7:F9:2D:C8:41:EF:9B:C3:82:5F:33:1C:42:DB:E2
            X509v3 Authority Key Identifier:
                keyid:01:66:6F:C7:DD:87:5D:FF:A0:E1:9B:C7:3C:BA:DA:8E:CF:9A:58:27

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9129969/CF395C381C6A11EEBF62AC0DC4F9AE02/AWZvx92HXf-g4ZvHPLrajs-aWCc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AWZvx92HXf-g4ZvHPLrajs-aWCc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9129969/CF395C381C6A11EEBF62AC0DC4F9AE02/37649AB0D6C511EEB512CC7FC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.212.67.0/24

    Signature Algorithm: sha256WithRSAEncryption
         59:c5:20:ee:d8:d6:12:2c:be:27:de:09:3f:6d:f0:47:2b:5f:
         b9:60:13:5f:c5:ce:f0:4b:1b:1a:ea:b8:c6:97:d3:03:6c:d3:
         ec:e6:fb:ef:d7:c2:17:45:19:67:38:9d:e3:79:da:c4:03:eb:
         43:14:a1:87:6d:85:43:73:5f:85:2f:5c:9b:69:38:38:04:9c:
         7f:6a:0e:08:ed:71:b7:11:bf:d2:15:69:a7:f7:e9:c2:43:70:
         30:c9:8a:7f:fe:06:84:c2:07:0d:4c:00:dc:3e:32:ea:59:e3:
         50:40:9d:3f:48:d5:2c:b1:fb:fe:ad:40:29:82:97:2a:a4:69:
         80:c1:9f:6e:de:e3:56:f7:1a:11:07:c0:8b:81:77:ce:42:04:
         42:1c:56:44:93:e5:f6:78:3a:34:13:71:fa:51:95:7b:3a:6c:
         0f:ab:be:87:3a:1b:0d:44:11:2d:c3:23:b9:6c:41:89:73:d3:
         10:4f:4b:3e:82:ad:75:2a:77:d6:27:2a:3f:12:94:7d:88:ea:
         f8:9e:dc:0f:86:eb:60:9f:32:24:39:81:b6:b4:65:27:03:0e:
         f2:23:34:fc:6d:f3:79:e9:6d:65:4c:a1:77:87:c3:b9:72:dd:
         00:7b:93:8d:4f:1c:55:86:72:20:33:ea:36:62:4b:2c:c2:56:
         a3:45:c4:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 15:15:32 2025 by rpki-client