Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A915370F/7346E8A2604911E2A307578D2979BB20/917AE3784A8811F0B824E27EC4F9AE02.roa
File:                     917AE3784A8811F0B824E27EC4F9AE02.roa (raw, json)
Hash identifier:          UbSf4KUcku452ogJrDfH12QHJxIKc60iPEHrbfoRNgM=
Subject key identifier:   AF:CD:53:23:B4:9B:13:B7:5C:56:49:76:FB:14:9A:E2:D2:95:93:7F
Certificate issuer:       /CN=A915370F/serialNumber=BB5B8156B037E5D22263EAC7F6A11C052FDF633F
Certificate serial:       34D2
Authority key identifier: BB:5B:81:56:B0:37:E5:D2:22:63:EA:C7:F6:A1:1C:05:2F:DF:63:3F
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/u1uBVrA35dIiY-rH9qEcBS_fYz8.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A915370F/7346E8A2604911E2A307578D2979BB20/917AE3784A8811F0B824E27EC4F9AE02.roa
Signing time:             Mon 16 Jun 2025 08:04:47 +0000
ROA not before:           Mon 16 Jun 2025 08:04:47 +0000
ROA not after:            Thu 28 May 2026 00:00:00 +0000
asID:                     5650
IP address blocks:        122.8.76.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A915370F/7346E8A2604911E2A307578D2979BB20/u1uBVrA35dIiY-rH9qEcBS_fYz8.crl
                          rsync://rpki.apnic.net/member_repository/A915370F/7346E8A2604911E2A307578D2979BB20/u1uBVrA35dIiY-rH9qEcBS_fYz8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/u1uBVrA35dIiY-rH9qEcBS_fYz8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 09 Jul 2025 15:26:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 13522 (0x34d2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A915370F, serialNumber=BB5B8156B037E5D22263EAC7F6A11C052FDF633F
        Validity
            Not Before: Jun 16 08:04:47 2025 GMT
            Not After : May 28 00:00:00 2026 GMT
        Subject: CN=684fd01e-239d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:37:73:d9:49:33:9a:ff:0e:ef:bc:58:c7:a6:
                    09:09:85:d4:3d:65:fb:8c:03:23:08:7e:3b:c7:6a:
                    0e:33:38:61:73:9e:40:b3:1a:c4:2a:5d:0b:1d:5d:
                    9a:1c:45:89:5e:2c:50:d3:ce:2d:f4:7d:b3:9a:c9:
                    ad:3d:cc:2e:b7:84:eb:15:ff:9d:df:4d:22:47:17:
                    9d:ae:ed:25:e6:fb:c9:15:99:34:bf:0a:a1:d0:df:
                    b5:1c:83:82:82:68:c5:a7:28:e1:d0:a8:7d:89:04:
                    5e:a5:f6:0d:e4:ca:bf:95:d0:35:b6:49:c5:23:13:
                    e1:af:25:e7:29:22:2f:7e:e3:d0:ca:a4:21:4c:b6:
                    b0:4d:12:80:e3:97:f5:5f:aa:87:99:3a:59:a9:cb:
                    68:fb:af:0e:65:55:e9:61:dd:25:7c:fa:8c:9e:d9:
                    7b:54:96:9b:d6:27:96:94:ff:74:f8:a8:85:32:dd:
                    be:bc:5e:c7:9b:82:b4:a2:5e:b5:6c:7a:81:30:24:
                    90:e3:36:b5:d8:26:c0:a3:3e:40:35:36:02:50:65:
                    71:b2:39:ed:2a:5e:cf:f9:ee:c7:7c:b9:be:24:87:
                    e2:8c:f7:3b:f5:d3:1b:e0:c3:7b:fc:65:2d:13:44:
                    2c:91:fc:88:6c:de:ee:5c:b1:9e:db:e8:76:7e:a1:
                    22:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AF:CD:53:23:B4:9B:13:B7:5C:56:49:76:FB:14:9A:E2:D2:95:93:7F
            X509v3 Authority Key Identifier:
                keyid:BB:5B:81:56:B0:37:E5:D2:22:63:EA:C7:F6:A1:1C:05:2F:DF:63:3F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A915370F/7346E8A2604911E2A307578D2979BB20/u1uBVrA35dIiY-rH9qEcBS_fYz8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/u1uBVrA35dIiY-rH9qEcBS_fYz8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915370F/7346E8A2604911E2A307578D2979BB20/917AE3784A8811F0B824E27EC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  122.8.76.0/22

    Signature Algorithm: sha256WithRSAEncryption
         60:60:55:90:33:c4:4b:40:35:9a:50:e5:66:e7:c9:78:48:5f:
         85:e4:a5:5c:3a:83:3c:10:98:72:6c:33:04:b7:6a:2d:8a:9e:
         f4:84:02:54:8f:68:66:48:8f:3e:7d:a3:7c:cf:f4:be:05:23:
         b5:57:b9:7b:57:41:e8:91:c1:b1:79:1f:61:37:2e:0c:ef:d5:
         50:3b:29:b6:ac:ff:de:61:59:51:66:2e:65:af:e5:54:c7:c1:
         7a:2d:d9:f6:72:1c:91:d4:64:57:69:ed:b7:12:28:85:cd:3a:
         41:af:8a:88:12:1b:7d:5e:69:e0:ce:c2:db:d4:59:08:61:15:
         5d:c3:8d:39:26:4e:cb:49:bb:d7:79:b0:1d:78:e2:6d:40:51:
         02:24:d0:a6:87:8d:89:b3:5b:65:c1:f5:fd:37:97:c9:e3:39:
         48:86:52:ab:43:c4:26:86:15:e8:f7:54:c6:ce:44:a0:14:1e:
         6a:50:2b:30:f1:ea:93:9e:bc:b9:0d:98:f3:74:ef:46:be:45:
         48:38:01:54:7e:11:6c:63:d0:a7:43:42:8c:28:df:2a:7d:a6:
         fe:ad:0c:60:71:e0:b1:6b:9c:b3:85:10:26:f0:1b:99:e9:56:
         2b:e5:15:eb:c1:38:6e:86:b3:23:0a:0b:54:66:a3:16:d2:0a:
         3d:43:58:3a
-----BEGIN CERTIFICATE-----
MIIFcTCCBFmgAwIBAgICNNIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NTM3MEYxMTAvBgNVBAUTKEJCNUI4MTU2QjAzN0U1RDIyMjYzRUFDN0Y2QTExQzA1
MkZERjYzM0YwHhcNMjUwNjE2MDgwNDQ3WhcNMjYwNTI4MDAwMDAwWjAYMRYwFAYD
VQQDEw02ODRmZDAxZS0yMzlkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAxDdz2Ukzmv8O77xYx6YJCYXUPWX7jAMjCH47x2oOMzhhc55AsxrEKl0LHV2a
HEWJXixQ084t9H2zmsmtPcwut4TrFf+d300iRxedru0l5vvJFZk0vwqh0N+1HIOC
gmjFpyjh0Kh9iQRepfYN5Mq/ldA1tknFIxPhryXnKSIvfuPQyqQhTLawTRKA45f1
X6qHmTpZqcto+68OZVXpYd0lfPqMntl7VJab1ieWlP90+KiFMt2+vF7Hm4K0ol61
bHqBMCSQ4za12CbAoz5ANTYCUGVxsjntKl7P+e7HfLm+JIfijPc79dMb4MN7/GUt
E0QskfyIbN7uXLGe2+h2fqEilwIDAQABo4IClTCCApEwHQYDVR0OBBYEFK/NUyO0
mxO3XFZJdvsUmuLSlZN/MB8GA1UdIwQYMBaAFLtbgVawN+XSImPqx/ahHAUv32M/
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1MzcwRi83MzQ2RThBMjYw
NDkxMUUyQTMwNzU3OEQyOTc5QkIyMC91MXVCVnJBMzVkSWlZLXJIOXFFY0JTX2ZZ
ejguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL3UxdUJWckEzNWRJaVktckg5cUVjQlNfZll6OC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
NTM3MEYvNzM0NkU4QTI2MDQ5MTFFMkEzMDc1NzhEMjk3OUJCMjAvOTE3QUUzNzg0
QTg4MTFGMEI4MjRFMjdFQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E
EDAOMAwEAgABMAYDBAJ6CEwwDQYJKoZIhvcNAQELBQADggEBAGBgVZAzxEtANZpQ
5WbnyXhIX4XkpVw6gzwQmHJsMwS3ai2KnvSEAlSPaGZIjz59o3zP9L4FI7VXuXtX
QeiRwbF5H2E3Lgzv1VA7Kbas/95hWVFmLmWv5VTHwXot2fZyHJHUZFdp7bcSKIXN
OkGviogSG31eaeDOwtvUWQhhFV3DjTkmTstJu9d5sB144m1AUQIk0KaHjYmzW2XB
9f03l8njOUiGUqtDxCaGFej3VMbORKAUHmpQKzDx6pOevLkNmPN070a+RUg4AVR+
EWxj0KdDQowo3yp9pv6tDGBx4LFrnLOFECbwG5npVivlFevBOG6GsyMKC1RmoxbS
Cj1DWDo=
-----END CERTIFICATE-----
Generated at Thu Jul 3 02:56:08 2025 by rpki-client