Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A918D75D/7E272F7CA68911EBA44B024FC4F9AE02/D0763FECA68A11EB9F23D74FC4F9AE02.roa
File:                     D0763FECA68A11EB9F23D74FC4F9AE02.roa (raw, json)
Hash identifier:          otn7zJrk0PPbtnlH9qLQ0UvTzJRXUBW5NBaU6fJKloc=
Subject key identifier:   7C:B0:D8:BF:DE:78:1C:52:7F:D3:17:55:AE:B9:31:CF:E0:05:19:A2
Certificate issuer:       /CN=A918D75D/serialNumber=70512B3D32D05DC32541E98E575A31C532073648
Certificate serial:       05FD
Authority key identifier: 70:51:2B:3D:32:D0:5D:C3:25:41:E9:8E:57:5A:31:C5:32:07:36:48
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cFErPTLQXcMlQemOV1oxxTIHNkg.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918D75D/7E272F7CA68911EBA44B024FC4F9AE02/D0763FECA68A11EB9F23D74FC4F9AE02.roa
Signing time:             Sun 04 May 2025 22:34:15 +0000
ROA not before:           Sun 04 May 2025 22:34:15 +0000
ROA not after:            Thu 30 Jul 2026 00:00:00 +0000
asID:                     55720
IP address blocks:        103.166.118.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918D75D/7E272F7CA68911EBA44B024FC4F9AE02/cFErPTLQXcMlQemOV1oxxTIHNkg.crl
                          rsync://rpki.apnic.net/member_repository/A918D75D/7E272F7CA68911EBA44B024FC4F9AE02/cFErPTLQXcMlQemOV1oxxTIHNkg.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cFErPTLQXcMlQemOV1oxxTIHNkg.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 17 May 2025 22:30:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1533 (0x5fd)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918D75D, serialNumber=70512B3D32D05DC32541E98E575A31C532073648
        Validity
            Not Before: May  4 22:34:15 2025 GMT
            Not After : Jul 30 00:00:00 2026 GMT
        Subject: CN=6817eb67-0754
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:cf:97:7d:94:14:ce:2c:0f:24:fb:50:00:0c:
                    b1:61:b6:5b:bd:21:ee:0d:26:fc:5d:bb:c0:60:b3:
                    23:0c:bc:e1:a0:9c:b5:12:49:39:e7:b8:ce:53:b0:
                    b2:37:cb:f6:a8:c4:94:f3:fe:4c:c1:2c:4a:f5:c8:
                    a9:95:09:76:94:49:8e:8f:c1:cd:3c:2d:95:a4:bb:
                    74:37:6e:8f:a1:13:0b:19:61:4c:32:2d:89:7b:ad:
                    c9:d2:5b:5d:bc:41:e9:52:c5:40:18:47:f3:fb:ec:
                    d1:bb:e0:ea:22:e9:78:8a:fb:3f:eb:b7:68:b4:6e:
                    ae:87:e6:51:98:c1:ce:c2:8f:92:26:78:35:de:49:
                    80:37:45:bb:b3:de:dc:b1:92:43:36:b8:70:ed:aa:
                    ff:e3:94:27:a3:8c:61:95:54:8d:16:6e:66:7d:a3:
                    45:71:45:7c:16:8b:2a:87:03:ac:3d:3a:7c:1a:cc:
                    c3:ec:4b:75:26:bd:f4:13:4c:01:ce:1f:55:3a:f7:
                    92:ec:ab:ad:b3:e3:7d:f5:d8:90:16:1c:8b:aa:5b:
                    33:81:54:3b:6a:01:14:e4:c1:ab:59:13:7f:8a:e4:
                    79:b8:81:7a:34:b1:d8:d5:00:d9:a9:df:1d:47:62:
                    ec:d1:0a:b1:33:60:98:e5:5a:65:b6:98:da:33:fe:
                    12:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7C:B0:D8:BF:DE:78:1C:52:7F:D3:17:55:AE:B9:31:CF:E0:05:19:A2
            X509v3 Authority Key Identifier:
                keyid:70:51:2B:3D:32:D0:5D:C3:25:41:E9:8E:57:5A:31:C5:32:07:36:48

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918D75D/7E272F7CA68911EBA44B024FC4F9AE02/cFErPTLQXcMlQemOV1oxxTIHNkg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cFErPTLQXcMlQemOV1oxxTIHNkg.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918D75D/7E272F7CA68911EBA44B024FC4F9AE02/D0763FECA68A11EB9F23D74FC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.166.118.0/24

    Signature Algorithm: sha256WithRSAEncryption
         d0:07:57:ce:9a:a7:ae:71:18:c0:ea:e7:b0:2e:c8:f9:0f:22:
         98:5d:90:43:e6:75:9b:87:dc:e8:06:98:b2:08:d5:be:8f:4d:
         4b:18:b9:0d:e3:ab:85:07:15:13:27:b6:c7:97:fe:91:ac:16:
         79:91:66:c2:d6:07:be:7a:f1:a8:a6:a2:30:b2:3a:d3:f7:21:
         a3:eb:30:02:f8:72:e0:6f:dd:e0:d0:4d:32:bf:5d:85:50:69:
         28:68:be:42:60:1b:af:c0:d6:90:09:c4:3d:48:03:47:ad:50:
         52:ec:c7:1e:1b:ae:21:a9:f9:14:2b:73:18:f8:4d:de:c4:06:
         e7:36:61:2f:14:41:71:d7:5f:c7:31:d2:3d:e7:c7:f8:b0:ca:
         d3:74:ad:8a:d1:34:52:8f:7c:ef:c2:c1:29:33:fa:b8:ad:0d:
         54:33:8b:2c:c0:f0:ff:92:d0:71:41:a8:ce:0f:1f:f2:4e:c3:
         8c:5b:ed:07:d4:0e:cb:8d:c9:3a:ec:81:1a:8d:c2:12:e1:39:
         da:85:86:0c:bc:19:fc:c2:85:88:64:f4:d7:0a:9b:5b:04:f4:
         ac:85:e8:02:8f:e3:24:3f:bb:db:c9:ae:e4:a9:59:78:73:37:
         a1:f3:07:84:cc:8e:df:4a:42:65:ec:9b:6f:fd:d4:0a:dc:45:
         4f:55:57:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 06:37:25 2025 by rpki-client