Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9178AF2/73C88792E06711ECB9D2FF81C4F9AE02/118AD6DE11C611EEA9D06D11C4F9AE02.roa
File:                     118AD6DE11C611EEA9D06D11C4F9AE02.roa (raw, json)
Hash identifier:          ABW3By8YU2W6olwHz1/qOoSOHNFidR8eMB8CQ1rCUFk=
Subject key identifier:   9B:7C:B4:8A:E8:FA:3B:07:8D:9B:59:A5:50:F5:58:00:71:88:DC:CC
Certificate issuer:       /CN=A9178AF2/serialNumber=1005CCD5E18230FBA9ADD3D27F85DA38F13E4172
Certificate serial:       039E
Authority key identifier: 10:05:CC:D5:E1:82:30:FB:A9:AD:D3:D2:7F:85:DA:38:F1:3E:41:72
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EAXM1eGCMPuprdPSf4XaOPE-QXI.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9178AF2/73C88792E06711ECB9D2FF81C4F9AE02/118AD6DE11C611EEA9D06D11C4F9AE02.roa
Signing time:             Wed 07 May 2025 01:38:21 +0000
ROA not before:           Wed 07 May 2025 01:38:21 +0000
ROA not after:            Wed 01 Jul 2026 00:00:00 +0000
asID:                     21859
IP address blocks:        43.243.195.0/24 maxlen: 24
                          103.229.117.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9178AF2/73C88792E06711ECB9D2FF81C4F9AE02/EAXM1eGCMPuprdPSf4XaOPE-QXI.crl
                          rsync://rpki.apnic.net/member_repository/A9178AF2/73C88792E06711ECB9D2FF81C4F9AE02/EAXM1eGCMPuprdPSf4XaOPE-QXI.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EAXM1eGCMPuprdPSf4XaOPE-QXI.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 22 May 2025 01:20:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 926 (0x39e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9178AF2, serialNumber=1005CCD5E18230FBA9ADD3D27F85DA38F13E4172
        Validity
            Not Before: May  7 01:38:21 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=681ab98d-8e1a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:b4:1d:df:87:41:bb:00:86:9a:65:ba:cb:53:
                    5c:b6:16:d2:61:79:1b:1d:62:f0:e6:f9:1e:4d:d8:
                    4b:58:3c:84:85:95:ec:0d:bf:f3:11:7c:49:2a:c4:
                    1d:f1:c4:ca:74:40:6e:79:78:b7:ef:43:95:de:89:
                    73:0d:4d:1f:41:a7:be:f2:b0:4b:7d:a4:33:9c:9b:
                    eb:c8:01:e5:39:1c:98:40:e7:41:7d:14:05:21:9b:
                    b4:d3:79:0b:63:af:2b:41:85:92:9a:81:30:df:ae:
                    8c:d8:c4:6a:fe:8e:a2:48:73:1c:cc:b4:f9:88:22:
                    9a:c6:11:52:f1:44:87:62:4e:8b:7b:01:e1:53:47:
                    03:5f:ce:03:c8:43:1e:0c:99:a1:2b:64:85:68:25:
                    bf:d4:73:fd:d7:1e:f6:99:e2:c5:c9:ca:79:7d:ba:
                    fe:6a:e8:9b:89:db:3c:39:67:39:ff:7a:76:b4:ac:
                    c0:1c:54:4f:01:07:4b:a7:36:42:52:b1:91:4c:97:
                    21:f3:8b:c9:09:42:47:11:68:be:a7:93:85:99:15:
                    93:1d:55:d7:02:f6:7f:a8:67:06:93:9f:49:ff:77:
                    ec:b6:dc:20:09:d3:a4:4a:11:19:bb:02:cc:c1:72:
                    b2:2a:7e:be:44:65:c7:83:cc:1b:26:0d:f6:db:f7:
                    54:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9B:7C:B4:8A:E8:FA:3B:07:8D:9B:59:A5:50:F5:58:00:71:88:DC:CC
            X509v3 Authority Key Identifier:
                keyid:10:05:CC:D5:E1:82:30:FB:A9:AD:D3:D2:7F:85:DA:38:F1:3E:41:72

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9178AF2/73C88792E06711ECB9D2FF81C4F9AE02/EAXM1eGCMPuprdPSf4XaOPE-QXI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EAXM1eGCMPuprdPSf4XaOPE-QXI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9178AF2/73C88792E06711ECB9D2FF81C4F9AE02/118AD6DE11C611EEA9D06D11C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  43.243.195.0/24
                  103.229.117.0/24

    Signature Algorithm: sha256WithRSAEncryption
         b3:e9:92:0f:1b:f8:19:ca:4a:39:f6:bb:88:90:00:df:07:b0:
         36:9e:32:ed:2c:0e:03:1a:ab:d2:63:2c:c5:36:9b:d1:1f:1e:
         04:4d:d2:aa:c5:63:35:88:94:67:df:b1:08:35:60:3f:4d:52:
         56:e9:63:32:41:62:fe:fb:84:4d:ba:b1:27:5d:de:33:19:44:
         37:4e:ab:47:c9:02:dd:30:1b:36:f6:23:54:53:6b:fe:ed:ad:
         d4:d4:1b:a2:85:f4:d5:1f:91:59:e2:cb:9b:7b:4a:ff:cf:a0:
         49:0f:84:06:eb:c7:57:cd:1d:58:9c:86:a7:74:11:b9:6a:8e:
         37:32:cd:a5:fd:c6:73:fc:f6:eb:49:01:57:41:e2:bf:d1:dd:
         a0:a5:ef:be:6c:f7:79:1d:c7:ad:c8:c7:13:f8:87:26:59:e0:
         55:00:ed:4c:f3:76:e8:77:05:e3:3a:d7:70:09:a4:1f:8a:59:
         94:ee:dd:c3:90:b4:25:a9:ec:82:c7:b3:c3:d7:3b:7b:ba:4c:
         47:3f:98:bb:aa:0b:42:cd:3a:5a:b3:6d:0b:dd:92:b9:5a:34:
         78:58:4f:06:04:60:99:36:6c:2a:7b:24:a2:c8:53:90:29:1c:
         43:76:ad:28:21:0f:88:45:c5:16:ce:5f:c8:b9:19:70:9a:49:
         6a:1e:1a:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 15 06:43:30 2025 by rpki-client