Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9169BAF/CDF3DA16D22B11EE98ACDB43C4F9AE02/1416035CD22C11EE891B4A44C4F9AE02.roa
File:                     1416035CD22C11EE891B4A44C4F9AE02.roa (raw, json)
Hash identifier:          LAsIeNhYt5BHF0IaKn+G+8QXRLdvDCA/uEEEFG9I+DM=
Subject key identifier:   11:EE:5B:FB:DF:20:64:75:CD:6E:FE:67:D1:52:4C:FB:BD:88:AD:A2
Certificate issuer:       /CN=A9169BAF/serialNumber=D74740114CBAF4F599AA7E5DC3412E122FA8714C
Certificate serial:       CC
Authority key identifier: D7:47:40:11:4C:BA:F4:F5:99:AA:7E:5D:C3:41:2E:12:2F:A8:71:4C
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/10dAEUy69PWZqn5dw0EuEi-ocUw.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9169BAF/CDF3DA16D22B11EE98ACDB43C4F9AE02/1416035CD22C11EE891B4A44C4F9AE02.roa
Signing time:             Wed 05 Mar 2025 06:22:48 +0000
ROA not before:           Wed 05 Mar 2025 06:22:48 +0000
ROA not after:            Thu 28 May 2026 00:00:00 +0000
asID:                     152107
IP address blocks:        36.50.58.0/24 maxlen: 24
                          2401:9160::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9169BAF/CDF3DA16D22B11EE98ACDB43C4F9AE02/10dAEUy69PWZqn5dw0EuEi-ocUw.crl
                          rsync://rpki.apnic.net/member_repository/A9169BAF/CDF3DA16D22B11EE98ACDB43C4F9AE02/10dAEUy69PWZqn5dw0EuEi-ocUw.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/10dAEUy69PWZqn5dw0EuEi-ocUw.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 02 May 2025 04:36:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 204 (0xcc)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9169BAF, serialNumber=D74740114CBAF4F599AA7E5DC3412E122FA8714C
        Validity
            Not Before: Mar  5 06:22:48 2025 GMT
            Not After : May 28 00:00:00 2026 GMT
        Subject: CN=67c7edb7-084c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:9b:51:82:9d:dd:b6:85:44:ec:d1:2a:cd:2a:
                    9d:45:2d:6e:d1:c4:0f:cb:69:40:24:48:3e:dd:f0:
                    9e:03:bd:19:b6:cf:49:98:8a:d5:57:c3:38:a9:fb:
                    b2:34:be:76:a2:4c:3d:3f:e7:e2:82:f2:ed:63:2a:
                    5b:5a:73:5d:dc:bb:aa:7c:60:31:d1:75:fa:4a:7f:
                    91:d7:04:b9:9f:d4:48:19:14:61:52:7e:01:4e:3c:
                    20:59:5b:bf:b5:d6:35:99:74:ed:6a:ac:ef:d1:90:
                    10:34:c8:c1:67:30:d0:49:4a:fe:21:1a:2e:09:ed:
                    a1:bd:9d:e6:12:87:84:c3:28:ff:a5:23:b5:2c:f1:
                    1e:da:f1:10:07:8c:4c:81:ca:ad:d4:ec:a3:a9:eb:
                    72:38:ef:bc:7f:ec:52:06:27:1a:2d:62:be:65:77:
                    09:ea:f9:d5:5c:c3:97:4b:cf:e3:19:38:0a:51:ce:
                    ea:40:79:5a:f6:fd:a4:b5:c0:c3:82:ae:f0:f2:42:
                    32:9f:fb:06:e1:ea:67:9c:19:f6:35:44:59:f7:dd:
                    84:15:e0:88:52:67:af:0b:ca:21:0e:72:0f:6c:9d:
                    d2:68:10:6a:fc:27:13:c8:d8:38:4c:12:93:44:a9:
                    d8:c8:bd:e6:b4:28:dc:45:7f:cd:84:cf:52:d4:96:
                    8a:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                11:EE:5B:FB:DF:20:64:75:CD:6E:FE:67:D1:52:4C:FB:BD:88:AD:A2
            X509v3 Authority Key Identifier:
                keyid:D7:47:40:11:4C:BA:F4:F5:99:AA:7E:5D:C3:41:2E:12:2F:A8:71:4C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9169BAF/CDF3DA16D22B11EE98ACDB43C4F9AE02/10dAEUy69PWZqn5dw0EuEi-ocUw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/10dAEUy69PWZqn5dw0EuEi-ocUw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9169BAF/CDF3DA16D22B11EE98ACDB43C4F9AE02/1416035CD22C11EE891B4A44C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  36.50.58.0/24
                IPv6:
                  2401:9160::/32

    Signature Algorithm: sha256WithRSAEncryption
         d6:ce:f5:8e:fe:02:16:d2:db:10:87:7a:d5:e7:1d:b9:8c:cd:
         7d:3e:f7:cf:cf:98:f3:dd:17:d3:79:c5:42:7f:31:df:a8:67:
         31:6b:a8:4f:bb:d5:9b:06:69:98:75:f2:0d:48:9c:e6:61:2a:
         e8:be:47:40:e1:2d:3f:15:ce:6c:d1:80:e1:cc:62:e7:64:aa:
         8a:a8:7d:40:64:05:0b:66:82:58:17:08:d0:20:5e:b0:f3:87:
         68:eb:82:72:94:1e:34:fd:c5:60:ca:aa:9c:6d:ca:eb:9d:81:
         fb:d8:0e:08:66:ed:20:04:25:cc:aa:c6:4a:ba:0a:63:fe:c6:
         eb:b2:d0:98:ca:c5:aa:b8:bb:ec:14:74:67:f7:d3:7a:ca:98:
         f4:0d:ec:83:f4:1b:97:d2:2a:d1:da:ad:f2:0f:c5:f1:34:7b:
         7c:b3:8c:28:26:d3:a8:8c:dd:cf:85:c9:0c:06:33:05:71:37:
         db:1f:22:a4:6f:ee:7a:34:ad:d3:26:17:15:f0:a4:a7:a9:ed:
         f9:76:a7:d1:63:14:39:cc:cc:b6:e0:48:44:bf:92:d4:e5:90:
         f6:80:b8:b1:91:45:23:ed:78:21:fc:7e:73:e6:cf:f0:16:94:
         77:31:f3:bb:6e:7d:a9:b0:bb:c3:6e:65:a8:6b:1e:13:4c:c0:
         6a:f0:20:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 07:39:31 2025 by rpki-client