Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9186C2F/773D39B6B34111EC8203195BC4F9AE02/9837349AB41E11ECAFDA1F1AC4F9AE02.roa
File:                     9837349AB41E11ECAFDA1F1AC4F9AE02.roa (raw, json)
Hash identifier:          dAddIv0JPSHHamMka9fq5eu7LbrsYsvnj5ro8P4sxvE=
Subject key identifier:   32:3F:69:77:4E:BB:C3:2A:EB:6F:B6:B7:C6:47:7A:8B:3D:9D:BF:3B
Certificate issuer:       /CN=A9186C2F/serialNumber=FE19778A0D07BDDB5FF6B9F05BE2D545520EC494
Certificate serial:       036A
Authority key identifier: FE:19:77:8A:0D:07:BD:DB:5F:F6:B9:F0:5B:E2:D5:45:52:0E:C4:94
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_hl3ig0Hvdtf9rnwW-LVRVIOxJQ.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9186C2F/773D39B6B34111EC8203195BC4F9AE02/9837349AB41E11ECAFDA1F1AC4F9AE02.roa
Signing time:             Fri 23 May 2025 01:17:26 +0000
ROA not before:           Fri 23 May 2025 01:17:26 +0000
ROA not after:            Thu 30 Jul 2026 00:00:00 +0000
asID:                     137995
IP address blocks:        103.150.212.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9186C2F/773D39B6B34111EC8203195BC4F9AE02/_hl3ig0Hvdtf9rnwW-LVRVIOxJQ.crl
                          rsync://rpki.apnic.net/member_repository/A9186C2F/773D39B6B34111EC8203195BC4F9AE02/_hl3ig0Hvdtf9rnwW-LVRVIOxJQ.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_hl3ig0Hvdtf9rnwW-LVRVIOxJQ.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 10 Jun 2025 01:11:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 874 (0x36a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9186C2F, serialNumber=FE19778A0D07BDDB5FF6B9F05BE2D545520EC494
        Validity
            Not Before: May 23 01:17:26 2025 GMT
            Not After : Jul 30 00:00:00 2026 GMT
        Subject: CN=682fcca6-c85e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f5:3f:dd:51:c4:a5:c5:ff:85:ff:fd:a9:f2:bf:
                    b5:65:8d:69:ea:b9:02:6b:22:eb:44:fa:d4:6e:3c:
                    d2:fd:ef:5e:3b:09:e0:af:53:1a:22:7c:84:9c:2e:
                    a9:8d:99:93:27:41:94:58:22:2f:48:0e:0f:ea:ec:
                    f2:6a:ad:94:09:85:65:3a:87:23:f7:ae:7a:42:83:
                    fa:12:1e:00:74:98:4a:30:4f:4e:3d:91:69:63:4d:
                    04:17:8c:e9:82:b9:37:3e:ff:16:e5:24:3d:f7:cf:
                    e9:24:16:8c:09:fb:d3:60:85:17:38:57:1f:bc:f2:
                    56:20:69:7d:7b:4b:5b:3b:40:ed:fa:d1:87:24:62:
                    45:7d:ff:59:24:55:16:15:56:9f:91:62:b7:0f:c5:
                    c1:67:5f:97:a0:19:16:ca:33:72:ca:fe:2f:7b:46:
                    de:8f:8e:b9:57:88:96:cd:48:3b:74:08:e3:07:85:
                    50:d3:4b:98:d2:ca:2b:4b:fd:7c:de:ac:b1:06:86:
                    4d:b5:56:b8:76:b1:34:f6:81:43:75:77:12:5d:36:
                    e8:9b:0b:42:a8:0d:0f:39:e7:63:22:f4:bb:1c:86:
                    a0:ae:c4:64:7a:9f:47:7f:75:09:4c:fd:ea:ee:a6:
                    1c:ac:f9:54:83:3d:32:e3:32:f8:a8:45:67:87:c5:
                    3b:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                32:3F:69:77:4E:BB:C3:2A:EB:6F:B6:B7:C6:47:7A:8B:3D:9D:BF:3B
            X509v3 Authority Key Identifier:
                keyid:FE:19:77:8A:0D:07:BD:DB:5F:F6:B9:F0:5B:E2:D5:45:52:0E:C4:94

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9186C2F/773D39B6B34111EC8203195BC4F9AE02/_hl3ig0Hvdtf9rnwW-LVRVIOxJQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_hl3ig0Hvdtf9rnwW-LVRVIOxJQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9186C2F/773D39B6B34111EC8203195BC4F9AE02/9837349AB41E11ECAFDA1F1AC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.150.212.0/24

    Signature Algorithm: sha256WithRSAEncryption
         31:65:de:97:ea:0d:fa:1e:51:9c:54:d0:09:c1:54:7f:6b:26:
         5b:c3:d7:07:91:ec:da:05:ce:ae:93:1c:60:67:b9:7a:9c:e9:
         45:74:c5:e2:6e:ac:a2:90:b2:d4:66:85:e8:fd:2e:0e:eb:ea:
         f4:31:3f:cd:cb:7a:d0:e8:80:07:20:8a:99:ed:a3:25:72:e4:
         0f:90:cc:93:a9:bc:8d:5d:02:cf:32:d2:5c:87:d4:9d:e0:f8:
         4c:62:8a:24:75:d9:57:65:87:d7:16:3c:48:76:4e:8e:6b:80:
         42:2d:9c:f2:37:86:59:6d:e4:6e:b3:a6:f0:23:86:7d:fb:86:
         60:72:96:b8:47:0e:0d:35:2f:12:94:b0:a3:27:97:10:10:b0:
         3e:10:d2:40:ad:e2:94:4e:78:18:90:da:9d:23:fa:43:72:c7:
         24:90:10:6f:e4:47:14:b8:db:04:86:db:57:5a:61:aa:89:22:
         06:f2:66:67:0a:bd:c5:fa:2a:53:af:13:61:ba:f7:61:43:13:
         eb:90:fd:b1:3d:a1:fb:6c:d7:75:f6:b0:bb:1b:2d:55:7f:e8:
         87:57:c9:12:10:24:79:ee:ec:99:86:55:2b:19:4c:66:d7:20:
         fd:e6:1c:d6:83:d2:5d:63:d0:76:3c:a3:66:ff:e4:dd:40:d3:
         75:2b:96:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 3 23:57:22 2025 by rpki-client