Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A916D8D9/5483BFB6C8FB11EBBA5BAE51C4F9AE02/37DF315640B111F0B139F22BC4F9AE02.roa
File:                     37DF315640B111F0B139F22BC4F9AE02.roa (raw, json)
Hash identifier:          4Gm7XiaugCNOeoZN6LJmkv/s+XyGBxUWo0FM4EVSPNU=
Subject key identifier:   B3:04:5F:80:0B:2C:E0:31:AB:C1:28:C0:9B:51:44:1E:DC:1A:C2:0F
Certificate issuer:       /CN=A916D8D9/serialNumber=031C9C26E5BAB1B01AF18A0BB1B970AB5773456B
Certificate serial:       0639
Authority key identifier: 03:1C:9C:26:E5:BA:B1:B0:1A:F1:8A:0B:B1:B9:70:AB:57:73:45:6B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AxycJuW6sbAa8YoLsblwq1dzRWs.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A916D8D9/5483BFB6C8FB11EBBA5BAE51C4F9AE02/37DF315640B111F0B139F22BC4F9AE02.roa
Signing time:             Tue 03 Jun 2025 19:30:34 +0000
ROA not before:           Tue 03 Jun 2025 19:30:34 +0000
ROA not after:            Mon 02 Mar 2026 00:00:00 +0000
asID:                     9387
IP address blocks:        122.50.0.0/24 maxlen: 24
                          122.50.2.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A916D8D9/5483BFB6C8FB11EBBA5BAE51C4F9AE02/AxycJuW6sbAa8YoLsblwq1dzRWs.crl
                          rsync://rpki.apnic.net/member_repository/A916D8D9/5483BFB6C8FB11EBBA5BAE51C4F9AE02/AxycJuW6sbAa8YoLsblwq1dzRWs.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AxycJuW6sbAa8YoLsblwq1dzRWs.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 11 Jun 2025 23:00:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1593 (0x639)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A916D8D9, serialNumber=031C9C26E5BAB1B01AF18A0BB1B970AB5773456B
        Validity
            Not Before: Jun  3 19:30:34 2025 GMT
            Not After : Mar  2 00:00:00 2026 GMT
        Subject: CN=683f4d5a-1526
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ea:0f:3a:3c:4b:4a:05:a8:c0:be:6d:8c:8c:ea:
                    32:ed:dd:0e:eb:b7:e2:2b:db:92:cd:42:0d:27:a9:
                    b9:aa:26:96:3a:26:aa:16:8c:70:e1:02:c5:46:e1:
                    31:06:33:bc:df:4c:6d:9f:6d:3a:d8:44:41:7a:9a:
                    dd:ad:ae:96:b1:94:1d:3c:48:ea:f0:17:ed:e6:d4:
                    11:af:2c:33:02:7b:60:01:38:f6:2e:a1:fb:37:82:
                    df:21:ee:fb:8c:62:c3:18:24:7b:8b:fd:ef:60:c5:
                    2c:34:aa:1e:f1:af:4b:3d:a8:77:b9:3b:32:d5:db:
                    c2:7e:eb:c3:1a:98:a7:fa:5f:99:1f:85:a2:b6:34:
                    0e:c9:99:a8:0e:6e:f0:de:2d:e4:25:32:6b:8d:6b:
                    3c:25:83:dc:04:21:76:45:ae:f5:5b:18:a3:9f:04:
                    15:bb:96:1e:c7:8c:3a:c8:fa:5b:74:a5:ae:92:df:
                    5b:a6:53:58:f0:8a:68:ef:d5:d1:a5:22:11:53:a5:
                    eb:a0:ba:b9:4b:f0:c4:06:61:26:95:ff:70:c2:16:
                    7e:36:ab:37:2d:9f:08:56:00:63:68:1c:26:6d:5a:
                    b0:78:79:27:af:f9:1b:62:ed:a0:d6:60:d6:97:6b:
                    ac:f4:8f:a4:c1:d1:50:d3:0d:81:79:ef:3b:50:0c:
                    fb:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B3:04:5F:80:0B:2C:E0:31:AB:C1:28:C0:9B:51:44:1E:DC:1A:C2:0F
            X509v3 Authority Key Identifier:
                keyid:03:1C:9C:26:E5:BA:B1:B0:1A:F1:8A:0B:B1:B9:70:AB:57:73:45:6B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A916D8D9/5483BFB6C8FB11EBBA5BAE51C4F9AE02/AxycJuW6sbAa8YoLsblwq1dzRWs.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AxycJuW6sbAa8YoLsblwq1dzRWs.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916D8D9/5483BFB6C8FB11EBBA5BAE51C4F9AE02/37DF315640B111F0B139F22BC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  122.50.0.0/24
                  122.50.2.0/24

    Signature Algorithm: sha256WithRSAEncryption
         66:ab:da:2c:c4:99:95:52:37:08:31:fc:e9:c5:09:d7:4b:5c:
         32:37:85:bd:31:4e:00:79:cc:39:b9:c8:0a:56:8a:d8:73:8b:
         06:46:68:b4:52:42:96:c3:29:6d:9a:5b:2b:11:1a:26:23:b7:
         ac:b5:d7:35:6c:06:05:06:52:a2:5b:02:ca:b6:2a:86:b8:b4:
         4f:9b:0f:e5:6d:b4:0b:48:d3:09:b2:a8:32:ed:50:8c:d3:87:
         89:ac:e5:5b:7f:da:6b:19:23:01:bf:d0:f3:75:b2:56:5a:63:
         26:4a:dd:fc:84:00:95:ee:5c:ba:79:68:be:63:8c:54:bb:c7:
         1f:3c:f6:8b:0c:07:bd:11:06:15:a3:7c:6f:52:d6:af:ce:4a:
         84:b3:76:3c:fa:3b:fd:ec:5e:a7:dc:5b:8c:be:63:f2:1e:94:
         c3:3b:9c:0f:50:c4:81:f8:82:d7:5f:d0:7a:9e:53:46:b4:4b:
         35:47:9c:a7:b8:71:ed:b3:d5:93:41:6a:9d:4f:a4:ad:4e:10:
         0d:e1:87:0d:3d:1a:0d:22:5f:3c:bf:c7:cb:d3:49:fb:14:97:
         e0:ce:96:c0:7a:9f:18:a7:07:8c:64:e4:cf:83:6b:80:59:4c:
         47:d3:95:32:88:b1:80:9e:41:80:a5:18:a9:34:18:98:3c:43:
         48:ac:26:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 5 19:15:55 2025 by rpki-client