Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A918C5C8/3DEF45CEF5E511EBAE946437C4F9AE02/012EAE068C1411EDA66E4F28C4F9AE02.roa
File:                     012EAE068C1411EDA66E4F28C4F9AE02.roa (raw, json)
Hash identifier:          bvK3RLeaCONliQ5wzuPxM2m0myPmTbQv9PJcnbReiQA=
Subject key identifier:   FD:DE:60:DF:A6:F7:F3:96:CF:3F:E3:8D:86:C7:E9:6A:02:83:F3:99
Certificate issuer:       /CN=A918C5C8/serialNumber=AB8A751417FF67FC9948E3D427B84DD6593E9183
Certificate serial:       0539
Authority key identifier: AB:8A:75:14:17:FF:67:FC:99:48:E3:D4:27:B8:4D:D6:59:3E:91:83
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/q4p1FBf_Z_yZSOPUJ7hN1lk-kYM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918C5C8/3DEF45CEF5E511EBAE946437C4F9AE02/012EAE068C1411EDA66E4F28C4F9AE02.roa
Signing time:             Sun 04 May 2025 23:34:38 +0000
ROA not before:           Sun 04 May 2025 23:34:38 +0000
ROA not after:            Wed 01 Jul 2026 00:00:00 +0000
asID:                     140499
IP address blocks:        103.149.240.0/24 maxlen: 24
                          103.149.241.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918C5C8/3DEF45CEF5E511EBAE946437C4F9AE02/q4p1FBf_Z_yZSOPUJ7hN1lk-kYM.crl
                          rsync://rpki.apnic.net/member_repository/A918C5C8/3DEF45CEF5E511EBAE946437C4F9AE02/q4p1FBf_Z_yZSOPUJ7hN1lk-kYM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/q4p1FBf_Z_yZSOPUJ7hN1lk-kYM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 15 May 2025 23:18:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1337 (0x539)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918C5C8, serialNumber=AB8A751417FF67FC9948E3D427B84DD6593E9183
        Validity
            Not Before: May  4 23:34:38 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=6817f98e-3dac
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:1b:74:51:a5:55:38:3b:66:4b:ce:66:77:ac:
                    ba:f2:00:ac:81:c7:f4:ad:8f:ba:f0:70:30:12:d4:
                    02:97:53:13:67:c2:41:1c:f6:34:58:be:f2:81:85:
                    df:36:4b:f2:13:43:3f:1b:33:45:2a:3a:e3:02:87:
                    6b:95:17:0b:21:9b:72:aa:74:63:c3:b7:ad:9e:39:
                    ee:23:79:58:8d:77:fa:f0:c3:5a:fb:92:1c:36:a8:
                    d0:c9:43:19:5b:c8:11:e0:80:5a:a5:c8:e2:cc:77:
                    f0:36:21:a2:20:93:91:cd:08:3e:7a:e6:a6:45:f3:
                    ac:9a:ba:67:71:a2:ec:ea:2a:9b:1f:62:da:56:7e:
                    eb:37:c3:c5:2e:f1:48:3c:25:9f:3c:7e:65:be:40:
                    9c:25:7b:8a:22:1f:0a:b4:7c:5c:c1:87:f2:6d:2c:
                    b3:38:e0:17:3c:9b:ea:44:a5:90:55:44:ae:b0:69:
                    5e:5e:2d:99:a3:40:9f:eb:94:69:47:30:79:9c:76:
                    66:d4:94:93:14:3c:bc:f4:91:7d:f4:55:44:8f:6e:
                    c9:8a:5f:0b:90:c4:c4:0d:b8:e5:d5:43:df:e6:5b:
                    16:39:e8:b5:1d:c3:1d:6a:4e:ce:70:7d:66:25:f8:
                    5e:f4:e2:0b:e7:e3:bf:70:6e:96:50:64:c2:d1:98:
                    2c:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FD:DE:60:DF:A6:F7:F3:96:CF:3F:E3:8D:86:C7:E9:6A:02:83:F3:99
            X509v3 Authority Key Identifier:
                keyid:AB:8A:75:14:17:FF:67:FC:99:48:E3:D4:27:B8:4D:D6:59:3E:91:83

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918C5C8/3DEF45CEF5E511EBAE946437C4F9AE02/q4p1FBf_Z_yZSOPUJ7hN1lk-kYM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/q4p1FBf_Z_yZSOPUJ7hN1lk-kYM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918C5C8/3DEF45CEF5E511EBAE946437C4F9AE02/012EAE068C1411EDA66E4F28C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.149.240.0/23

    Signature Algorithm: sha256WithRSAEncryption
         ba:2c:e4:2d:ab:3b:fa:28:9e:fd:0e:70:1a:8d:dd:a9:b7:be:
         46:88:ff:c7:f7:d8:cc:8e:cc:97:ac:d1:03:92:e1:97:33:6e:
         f5:67:9a:c4:9e:8f:5f:a5:9c:8d:c7:8d:a9:ec:30:9a:44:61:
         b0:5c:67:86:40:12:d4:62:83:70:f8:90:f9:4b:0f:bf:bc:b1:
         b9:bc:43:cb:c3:9d:33:a5:20:95:9f:c2:a2:1b:4f:fd:f7:66:
         93:d9:66:df:f1:47:49:90:bb:4f:83:2c:c3:b3:72:5f:6e:36:
         4d:74:82:b8:02:9c:68:59:05:08:d0:b1:d9:b7:3c:b0:98:cc:
         da:45:4f:38:9f:bd:6c:0c:95:a6:66:33:e2:3d:14:43:e3:32:
         a1:b5:27:93:cc:c9:98:c6:f0:86:9d:80:35:87:6a:6c:a6:f2:
         d5:d0:bb:1f:f9:31:23:37:7f:1d:10:1d:52:dd:f0:44:02:fb:
         05:5c:c2:76:48:3d:b2:4d:7b:06:a8:2d:cc:1d:e4:77:bc:af:
         ec:77:b4:f5:a6:8b:93:5b:53:a3:79:23:47:83:dd:81:3d:32:
         cc:04:55:57:09:a6:f3:c8:a5:7c:7b:a3:45:5e:2b:bb:22:26:
         f3:2b:99:6f:f3:7f:f2:7f:24:8a:0d:16:12:5b:12:10:54:5a:
         d8:6e:35:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 9 23:50:50 2025 by rpki-client