Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A918A56A/26FA1818772411EEA1674E1FC4F9AE02/E5502F78772411EE8659D21FC4F9AE02.roa
File:                     E5502F78772411EE8659D21FC4F9AE02.roa (raw, json)
Hash identifier:          QC3Es2zEONKxVGX898XgjJkGnVmiNLJUauLLvYvYOYw=
Subject key identifier:   B3:91:E6:58:85:FD:DD:17:36:6D:7E:6A:2E:45:00:18:EE:6F:61:08
Certificate issuer:       /CN=A918A56A/serialNumber=DA4310B2F0879DF4BD9839A14C8E3FBBB6F1EBF1
Certificate serial:       012C
Authority key identifier: DA:43:10:B2:F0:87:9D:F4:BD:98:39:A1:4C:8E:3F:BB:B6:F1:EB:F1
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2kMQsvCHnfS9mDmhTI4_u7bx6_E.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918A56A/26FA1818772411EEA1674E1FC4F9AE02/E5502F78772411EE8659D21FC4F9AE02.roa
Signing time:             Fri 09 May 2025 04:24:57 +0000
ROA not before:           Fri 09 May 2025 04:24:57 +0000
ROA not after:            Wed 01 Jul 2026 00:00:00 +0000
asID:                     9420
IP address blocks:        103.121.64.0/24 maxlen: 24
                          2400:efa0::/64 maxlen: 64
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918A56A/26FA1818772411EEA1674E1FC4F9AE02/2kMQsvCHnfS9mDmhTI4_u7bx6_E.crl
                          rsync://rpki.apnic.net/member_repository/A918A56A/26FA1818772411EEA1674E1FC4F9AE02/2kMQsvCHnfS9mDmhTI4_u7bx6_E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2kMQsvCHnfS9mDmhTI4_u7bx6_E.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 22 May 2025 04:05:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 300 (0x12c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918A56A, serialNumber=DA4310B2F0879DF4BD9839A14C8E3FBBB6F1EBF1
        Validity
            Not Before: May  9 04:24:57 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=681d8399-3bcf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:65:49:a9:5f:6b:3b:c5:32:e1:35:7a:72:cf:
                    7e:9e:94:3c:71:4e:57:2d:fe:b6:d7:40:d1:a5:58:
                    68:5c:70:d4:22:42:12:c9:05:9e:cd:63:95:a4:16:
                    03:02:92:e8:37:c8:88:45:26:4a:14:75:4a:b5:52:
                    ee:b1:7e:86:9f:3e:57:39:73:ae:9b:67:3e:c8:41:
                    03:cd:cc:8c:f7:63:95:af:61:c2:c8:09:26:16:9b:
                    bf:76:82:e6:36:c4:23:35:20:7d:33:fe:ef:c0:6a:
                    d1:ca:26:23:b3:37:7d:19:b1:e0:cd:e4:4d:72:a5:
                    b6:8f:05:5f:2d:62:f8:f1:d3:ab:f6:d8:90:2d:b4:
                    6b:eb:d8:ed:0d:08:a1:1e:cc:d9:91:47:da:2d:a0:
                    6a:dd:e1:02:f5:d7:7a:18:a2:eb:98:77:ec:8e:2e:
                    c8:76:8e:03:35:9f:da:92:63:74:99:4b:93:e5:e6:
                    b4:54:14:b5:51:ee:8d:50:78:d6:df:bc:95:a9:43:
                    24:15:cf:d1:3c:21:2b:9f:14:64:98:24:1a:c5:b9:
                    9f:c6:c1:bc:78:cf:1c:6d:00:da:91:88:16:6e:84:
                    31:10:04:05:13:1f:16:f5:86:0e:09:34:60:e1:34:
                    c8:f3:1d:49:7d:ba:d9:90:a5:d7:b5:fb:a4:d4:15:
                    b1:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B3:91:E6:58:85:FD:DD:17:36:6D:7E:6A:2E:45:00:18:EE:6F:61:08
            X509v3 Authority Key Identifier:
                keyid:DA:43:10:B2:F0:87:9D:F4:BD:98:39:A1:4C:8E:3F:BB:B6:F1:EB:F1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918A56A/26FA1818772411EEA1674E1FC4F9AE02/2kMQsvCHnfS9mDmhTI4_u7bx6_E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2kMQsvCHnfS9mDmhTI4_u7bx6_E.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918A56A/26FA1818772411EEA1674E1FC4F9AE02/E5502F78772411EE8659D21FC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.121.64.0/24
                IPv6:
                  2400:efa0::/64

    Signature Algorithm: sha256WithRSAEncryption
         41:94:e1:1d:7b:a7:28:6e:b3:9a:74:40:7f:ff:fc:ec:ac:9c:
         7d:be:c7:3d:b4:c2:c3:45:9f:e5:04:77:c0:51:96:e2:0a:92:
         c9:b3:94:7e:96:1a:a0:9e:e4:18:87:9e:57:12:6b:f2:a8:78:
         db:6f:8f:78:50:68:52:44:3d:2e:7a:e0:6d:26:4a:fc:3a:c1:
         f2:16:e7:bc:cb:15:c2:b3:7c:0d:88:3f:50:8d:46:3b:31:9e:
         49:d0:92:b3:c1:c7:80:fd:a6:05:75:84:ce:20:7e:8b:74:ca:
         a2:21:3e:59:b3:e4:76:18:66:10:9b:c7:78:20:34:09:a1:e9:
         34:b6:6b:c7:6e:31:c1:fb:2b:38:c0:e0:6f:ab:b2:36:c5:0a:
         7a:6f:ed:fa:25:1f:b0:7f:58:f8:ac:c2:df:aa:fd:90:c0:05:
         eb:20:8d:53:19:3b:58:15:27:6b:f3:96:63:08:b9:f1:43:2f:
         b5:64:03:b1:c0:45:8b:10:88:0f:7c:00:36:4c:bb:2d:5e:4d:
         72:66:da:18:b5:59:d8:28:a0:92:aa:6e:56:93:11:e1:91:85:
         b2:58:2b:da:f5:78:6b:ac:c3:60:4e:22:fc:35:7d:8d:0b:ca:
         bb:98:02:b5:5e:c0:35:4e:a1:e3:2e:07:48:37:34:24:3c:b6:
         9b:4c:c9:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 17 00:09:01 2025 by rpki-client