Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9120522/1C3DA3ACF0A611EA959D764AC4F9AE02/2E6008624A5711F0BD4BC13AC4F9AE02.roa
File:                     2E6008624A5711F0BD4BC13AC4F9AE02.roa (raw, json)
Hash identifier:          rEOJzqlAnVBPeZC3MOxbXAE7DFN8lpEBOlDK4eG1ZzA=
Subject key identifier:   BA:35:76:9D:CA:E4:52:1C:29:BD:E3:F8:78:8B:1F:8D:C6:4A:40:0B
Certificate issuer:       /CN=A9120522/serialNumber=4DBFB7C0F2D8576BA508F36369198B8491C2B334
Certificate serial:       07D7
Authority key identifier: 4D:BF:B7:C0:F2:D8:57:6B:A5:08:F3:63:69:19:8B:84:91:C2:B3:34
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Tb-3wPLYV2ulCPNjaRmLhJHCszQ.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9120522/1C3DA3ACF0A611EA959D764AC4F9AE02/2E6008624A5711F0BD4BC13AC4F9AE02.roa
Signing time:             Mon 16 Jun 2025 02:11:15 +0000
ROA not before:           Mon 16 Jun 2025 02:11:15 +0000
ROA not after:            Fri 31 Oct 2025 00:00:00 +0000
asID:                     24181
IP address blocks:        202.49.16.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9120522/1C3DA3ACF0A611EA959D764AC4F9AE02/Tb-3wPLYV2ulCPNjaRmLhJHCszQ.crl
                          rsync://rpki.apnic.net/member_repository/A9120522/1C3DA3ACF0A611EA959D764AC4F9AE02/Tb-3wPLYV2ulCPNjaRmLhJHCszQ.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Tb-3wPLYV2ulCPNjaRmLhJHCszQ.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 25 Jun 2025 20:50:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2007 (0x7d7)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9120522, serialNumber=4DBFB7C0F2D8576BA508F36369198B8491C2B334
        Validity
            Not Before: Jun 16 02:11:15 2025 GMT
            Not After : Oct 31 00:00:00 2025 GMT
        Subject: CN=684f7d43-c838
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:2b:8e:7b:cd:11:2b:a0:b4:f3:28:68:b5:2a:
                    9f:78:eb:07:b6:ea:f8:5e:b5:f0:03:cc:dd:74:0b:
                    ee:92:4c:ec:46:85:27:eb:a9:12:13:29:8d:85:3d:
                    27:9b:4a:b6:e2:bd:e9:9f:42:9d:c0:4b:bd:bf:89:
                    c2:e1:77:2d:20:19:c0:fc:16:2f:87:5e:af:31:ce:
                    b7:eb:5f:94:fd:25:8d:d5:7f:ed:8f:66:b5:c9:d1:
                    98:6d:f2:64:44:69:c8:20:c4:64:eb:8e:a6:03:3b:
                    ee:86:83:1c:c6:0d:a6:13:e7:3b:18:e1:18:52:0d:
                    5e:c6:af:82:88:51:3f:a0:32:65:7e:f2:a2:1f:ea:
                    b0:f1:a6:ee:1d:b7:27:f4:dd:e7:96:55:9d:c5:d7:
                    49:a8:84:06:be:c8:44:bc:b9:5f:ca:9f:eb:90:28:
                    8f:b3:05:45:47:20:0c:5a:85:05:80:13:b8:8f:11:
                    9b:79:e9:67:ba:cc:4b:06:b4:41:da:5e:62:58:97:
                    4f:ea:7f:0a:76:32:59:c4:4b:f5:06:ae:ca:cc:ab:
                    a1:31:8a:42:b8:13:a0:03:a8:c7:e2:2a:ce:a4:58:
                    36:39:ca:bb:cd:04:3b:5a:8a:0e:f7:14:08:e8:68:
                    ff:ea:37:c0:1d:4d:94:06:bf:3d:3e:02:67:54:a5:
                    c0:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BA:35:76:9D:CA:E4:52:1C:29:BD:E3:F8:78:8B:1F:8D:C6:4A:40:0B
            X509v3 Authority Key Identifier:
                keyid:4D:BF:B7:C0:F2:D8:57:6B:A5:08:F3:63:69:19:8B:84:91:C2:B3:34

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9120522/1C3DA3ACF0A611EA959D764AC4F9AE02/Tb-3wPLYV2ulCPNjaRmLhJHCszQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Tb-3wPLYV2ulCPNjaRmLhJHCszQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9120522/1C3DA3ACF0A611EA959D764AC4F9AE02/2E6008624A5711F0BD4BC13AC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  202.49.16.0/22

    Signature Algorithm: sha256WithRSAEncryption
         a5:c4:51:db:bf:7a:6b:e8:75:43:82:5e:07:af:9e:9f:9e:99:
         06:b0:04:aa:81:69:0a:23:1b:9d:9f:4d:d5:29:74:86:fd:40:
         35:36:be:b3:60:bb:19:f5:88:e3:dd:9d:8d:25:07:4f:9b:70:
         33:16:9d:6b:9c:c4:65:d1:2f:c6:88:57:c6:c8:2a:08:fa:62:
         5e:79:3b:0e:75:f9:6a:e4:5a:14:bd:dd:f9:b4:5a:62:ea:40:
         75:d1:fb:74:1a:65:dd:78:80:25:4b:e8:36:50:4d:67:61:83:
         93:bc:41:38:18:6f:ca:9a:4f:a0:b1:01:2d:a3:de:ff:be:36:
         61:35:02:b9:d2:2e:61:9e:ae:c2:15:e8:b7:d0:65:d2:85:f3:
         e4:7a:50:d1:d6:df:96:97:0f:12:3e:44:7c:4c:26:3f:de:30:
         92:3e:f2:68:9e:92:1c:71:e0:da:07:c5:73:b0:c8:01:36:2f:
         ef:7a:da:11:95:2a:b1:52:36:71:13:26:10:ad:8a:89:9f:d2:
         a3:4c:80:bd:fa:e2:9d:93:53:7b:00:bd:2e:89:3c:b7:20:de:
         cc:8d:e7:ad:16:f4:1a:b7:28:cf:86:4d:8e:59:a9:6b:20:ec:
         57:8a:bd:72:30:b4:0e:e8:66:f7:dd:25:57:96:e9:b0:79:be:
         cf:f2:63:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 20 05:04:07 2025 by rpki-client