Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A918AACD/8EA19AA2199C11EF9697347FC4F9AE02/7DA22F2C199D11EFB19DA380C4F9AE02.roa
File:                     7DA22F2C199D11EFB19DA380C4F9AE02.roa (raw, json)
Hash identifier:          m/G/Sff8tqA/XbNYboOxx50mkuYuHxKvPy3vRj80oOo=
Subject key identifier:   CF:62:DA:67:45:F3:7B:B7:4F:AB:5D:E1:1E:97:78:44:7C:BE:60:CD
Certificate issuer:       /CN=A918AACD/serialNumber=8A27F1B51459FD36CB2C8060871C5538F9D23D7E
Certificate serial:       B8
Authority key identifier: 8A:27:F1:B5:14:59:FD:36:CB:2C:80:60:87:1C:55:38:F9:D2:3D:7E
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iifxtRRZ_TbLLIBghxxVOPnSPX4.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918AACD/8EA19AA2199C11EF9697347FC4F9AE02/7DA22F2C199D11EFB19DA380C4F9AE02.roa
Signing time:             Wed 07 May 2025 05:13:00 +0000
ROA not before:           Wed 07 May 2025 05:13:00 +0000
ROA not after:            Thu 30 Jul 2026 00:00:00 +0000
asID:                     152715
IP address blocks:        103.42.50.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918AACD/8EA19AA2199C11EF9697347FC4F9AE02/iifxtRRZ_TbLLIBghxxVOPnSPX4.crl
                          rsync://rpki.apnic.net/member_repository/A918AACD/8EA19AA2199C11EF9697347FC4F9AE02/iifxtRRZ_TbLLIBghxxVOPnSPX4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iifxtRRZ_TbLLIBghxxVOPnSPX4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 22 May 2025 05:14:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 184 (0xb8)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918AACD, serialNumber=8A27F1B51459FD36CB2C8060871C5538F9D23D7E
        Validity
            Not Before: May  7 05:13:00 2025 GMT
            Not After : Jul 30 00:00:00 2026 GMT
        Subject: CN=681aebdc-01f0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:5e:24:86:62:da:e1:3e:84:19:7b:9c:19:3e:
                    d0:05:9e:91:3e:7a:4c:b4:e9:9d:19:5a:e3:da:38:
                    e0:48:ae:ac:be:10:e7:d4:bf:95:a3:d5:96:89:1e:
                    d1:1a:1a:06:63:fc:bc:21:77:54:e5:20:9b:3a:d7:
                    a1:57:bb:e8:f5:89:97:e5:fb:cf:f4:01:73:39:24:
                    4f:62:40:dd:16:33:00:62:e1:60:0a:7b:c3:86:8a:
                    18:0a:15:e1:5c:d3:8c:28:d3:e8:d8:46:dc:fd:ac:
                    0b:3a:b4:1d:57:96:89:98:aa:1c:0b:2a:9d:ee:db:
                    d3:c5:8b:57:20:d2:51:e4:5c:94:08:7a:c4:ba:b6:
                    2f:8f:a4:52:a6:66:56:91:28:2f:5b:63:93:f1:9e:
                    d2:f7:7f:bf:d2:01:3b:1e:b9:1a:54:5e:5f:aa:b9:
                    99:70:78:0e:d2:d4:94:cf:f6:04:0c:3b:a9:79:2f:
                    e6:ae:4a:e9:20:a6:76:a6:b4:e0:6e:e0:9b:42:4b:
                    ed:c1:d6:f9:99:e0:5c:06:fc:62:8a:94:01:35:bf:
                    bf:1d:7b:2c:c8:70:4c:5c:3b:66:59:ad:18:c7:0b:
                    30:01:44:96:84:b6:56:aa:27:1e:14:f5:09:bb:bb:
                    af:09:17:39:cc:35:76:a1:04:88:69:8a:ed:e3:44:
                    57:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CF:62:DA:67:45:F3:7B:B7:4F:AB:5D:E1:1E:97:78:44:7C:BE:60:CD
            X509v3 Authority Key Identifier:
                keyid:8A:27:F1:B5:14:59:FD:36:CB:2C:80:60:87:1C:55:38:F9:D2:3D:7E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918AACD/8EA19AA2199C11EF9697347FC4F9AE02/iifxtRRZ_TbLLIBghxxVOPnSPX4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iifxtRRZ_TbLLIBghxxVOPnSPX4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918AACD/8EA19AA2199C11EF9697347FC4F9AE02/7DA22F2C199D11EFB19DA380C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.42.50.0/23

    Signature Algorithm: sha256WithRSAEncryption
         40:cd:6b:43:a7:5c:a2:89:66:7c:62:3b:a8:a6:7d:5f:5e:5e:
         a0:9f:db:a9:08:06:da:57:05:06:c4:bb:23:dd:ad:5c:0f:d7:
         82:4c:95:20:aa:a8:e2:8f:70:aa:b2:d2:29:52:9f:ff:a6:77:
         0c:9d:6c:96:10:ca:e0:d6:82:c1:fc:15:fc:7d:c1:7e:59:e3:
         28:d4:4b:61:3b:41:9b:01:a2:41:82:29:43:d4:d4:26:1b:c6:
         63:23:5b:66:0d:c9:6d:9d:9e:ea:7e:21:2e:06:2b:62:04:17:
         fb:7a:fb:7b:a4:bb:86:54:20:9c:12:7d:1e:11:65:09:75:da:
         e9:32:63:8a:59:28:68:6f:6d:1e:d3:66:9a:8c:2b:79:24:32:
         56:19:38:c1:9c:84:f1:bc:d4:8e:6e:bc:9e:14:6d:12:27:ed:
         c4:8f:03:52:5f:90:07:0d:23:4f:70:f3:bb:2b:d8:db:0f:34:
         28:2a:fc:d4:84:8a:72:d6:e5:a2:ff:72:fe:25:f8:7b:4e:b6:
         18:49:6a:51:d0:8f:18:41:37:d5:2e:a8:62:ce:cd:10:06:f5:
         9c:83:cb:40:e0:c7:08:4b:a6:fd:45:29:cf:da:fc:e8:6e:34:
         6d:43:75:48:f3:24:b6:3d:11:e8:fd:dd:7b:2d:ff:50:c3:c1:
         e9:4b:40:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 17 03:23:24 2025 by rpki-client