Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A918E319/868DD6568C2611E7BC06C44EC4F9AE02/7AF2C29C50C811F09EF54B31C4F9AE02.roa
File:                     7AF2C29C50C811F09EF54B31C4F9AE02.roa (raw, json)
Hash identifier:          UMaG+oHN6wdgPHdFAoEaxbfuMqKBxy2LZOS3E9NJAeU=
Subject key identifier:   9F:F2:F6:EA:39:2F:5A:CD:6C:65:6D:6C:03:9F:02:4B:A3:E8:FA:9E
Certificate issuer:       /CN=A918E319/serialNumber=6CFD56A77EAD9E159BCB18EB6DE862735091B54A
Certificate serial:       1970
Authority key identifier: 6C:FD:56:A7:7E:AD:9E:15:9B:CB:18:EB:6D:E8:62:73:50:91:B5:4A
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bP1Wp36tnhWbyxjrbehic1CRtUo.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918E319/868DD6568C2611E7BC06C44EC4F9AE02/7AF2C29C50C811F09EF54B31C4F9AE02.roa
Signing time:             Tue 24 Jun 2025 06:57:23 +0000
ROA not before:           Tue 24 Jun 2025 06:57:23 +0000
ROA not after:            Sun 31 Aug 2025 00:00:00 +0000
asID:                     135567
IP address blocks:        103.70.250.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918E319/868DD6568C2611E7BC06C44EC4F9AE02/bP1Wp36tnhWbyxjrbehic1CRtUo.crl
                          rsync://rpki.apnic.net/member_repository/A918E319/868DD6568C2611E7BC06C44EC4F9AE02/bP1Wp36tnhWbyxjrbehic1CRtUo.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bP1Wp36tnhWbyxjrbehic1CRtUo.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 10 Jul 2025 03:15:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 6512 (0x1970)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918E319, serialNumber=6CFD56A77EAD9E159BCB18EB6DE862735091B54A
        Validity
            Not Before: Jun 24 06:57:23 2025 GMT
            Not After : Aug 31 00:00:00 2025 GMT
        Subject: CN=685a4c53-2f2d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:9b:94:a5:e6:79:68:66:ec:5a:bb:ec:a3:ec:
                    1e:c5:e2:02:bf:5e:56:9f:34:75:d0:c8:51:68:95:
                    a8:35:10:12:fe:df:d3:99:a7:51:b1:7a:a6:37:0d:
                    28:7c:61:e3:82:b8:05:41:78:4f:20:d7:8b:89:22:
                    0d:1d:16:13:9a:80:86:62:0e:ca:56:f8:6c:83:c3:
                    7c:cb:c1:9b:a2:66:99:32:6e:df:b2:ff:10:d1:69:
                    ab:8d:02:a5:a8:9f:7e:c2:c8:0c:42:51:b8:a1:f7:
                    62:f4:0a:d6:52:e1:63:85:6e:78:fe:70:25:09:91:
                    94:91:7e:75:23:77:5e:1e:35:82:2a:e2:55:81:48:
                    92:4e:b9:5f:40:01:2f:6e:4d:29:b3:c3:18:26:b2:
                    a4:ff:b5:03:a9:be:b4:12:00:65:1a:e1:7a:96:58:
                    f2:a9:8e:31:9c:ea:7e:61:85:3e:e8:87:4f:50:a2:
                    95:d7:dc:26:6c:28:b7:28:33:56:2b:7c:cc:93:1c:
                    84:de:e6:b3:4c:e5:66:7a:bf:c3:c5:a3:e8:4e:6f:
                    10:f2:21:56:26:25:a1:5c:2d:bd:9e:3f:18:91:c0:
                    18:d1:b7:19:28:4f:ab:5f:f9:52:53:66:39:ae:4d:
                    bd:ce:46:a8:9d:98:70:b7:d6:38:94:48:59:8b:1a:
                    30:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9F:F2:F6:EA:39:2F:5A:CD:6C:65:6D:6C:03:9F:02:4B:A3:E8:FA:9E
            X509v3 Authority Key Identifier:
                keyid:6C:FD:56:A7:7E:AD:9E:15:9B:CB:18:EB:6D:E8:62:73:50:91:B5:4A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918E319/868DD6568C2611E7BC06C44EC4F9AE02/bP1Wp36tnhWbyxjrbehic1CRtUo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bP1Wp36tnhWbyxjrbehic1CRtUo.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918E319/868DD6568C2611E7BC06C44EC4F9AE02/7AF2C29C50C811F09EF54B31C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.70.250.0/24

    Signature Algorithm: sha256WithRSAEncryption
         35:db:c2:e3:72:fa:7f:cd:a3:73:ba:49:9d:9d:13:08:98:a8:
         0d:9a:1e:7b:d7:d1:36:5e:20:b9:ec:c9:6e:cb:42:fe:a4:e6:
         47:64:b2:cc:5b:df:ee:52:b8:f1:91:26:98:12:be:8b:46:43:
         c8:da:9f:98:1f:44:e9:b9:f9:47:64:76:50:f3:da:79:e8:e4:
         68:03:d2:98:5c:dc:b5:0e:87:00:b4:52:dd:2e:c3:bc:0c:c4:
         3e:c8:36:78:f7:ee:90:87:05:c0:b4:c5:4a:14:d1:8f:a0:d8:
         55:73:85:ef:bf:80:65:bf:8a:79:be:6e:b3:f2:b6:79:81:bc:
         a9:0e:ce:79:76:8a:ac:59:89:13:c6:cc:86:1b:eb:bd:69:04:
         91:ac:54:94:70:9a:fd:9d:22:a4:c7:8e:00:b0:ff:fb:da:bd:
         3a:b7:d6:97:13:9b:cd:6f:d9:2e:33:fa:84:02:46:9e:fb:92:
         c8:20:68:23:c7:be:c2:46:87:f1:65:5c:a5:6c:5a:92:48:51:
         8f:5d:47:65:b4:50:df:16:eb:b6:1e:eb:17:47:e6:fc:70:75:
         49:9d:20:e7:57:eb:66:9b:ad:e1:12:32:8b:97:29:11:e3:d4:
         86:20:13:1e:11:43:9f:4d:4e:7a:a7:4c:3b:ae:cc:2c:e2:1c:
         7f:5b:39:34
-----BEGIN CERTIFICATE-----
MIIFcTCCBFmgAwIBAgICGXAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
OEUzMTkxMTAvBgNVBAUTKDZDRkQ1NkE3N0VBRDlFMTU5QkNCMThFQjZERTg2Mjcz
NTA5MUI1NEEwHhcNMjUwNjI0MDY1NzIzWhcNMjUwODMxMDAwMDAwWjAYMRYwFAYD
VQQDEw02ODVhNGM1My0yZjJkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEApJuUpeZ5aGbsWrvso+wexeICv15WnzR10MhRaJWoNRAS/t/TmadRsXqmNw0o
fGHjgrgFQXhPINeLiSINHRYTmoCGYg7KVvhsg8N8y8GbomaZMm7fsv8Q0WmrjQKl
qJ9+wsgMQlG4ofdi9ArWUuFjhW54/nAlCZGUkX51I3deHjWCKuJVgUiSTrlfQAEv
bk0ps8MYJrKk/7UDqb60EgBlGuF6lljyqY4xnOp+YYU+6IdPUKKV19wmbCi3KDNW
K3zMkxyE3uazTOVmer/DxaPoTm8Q8iFWJiWhXC29nj8YkcAY0bcZKE+rX/lSU2Y5
rk29zkaonZhwt9Y4lEhZixowOQIDAQABo4IClTCCApEwHQYDVR0OBBYEFJ/y9uo5
L1rNbGVtbAOfAkuj6PqeMB8GA1UdIwQYMBaAFGz9Vqd+rZ4Vm8sY623oYnNQkbVK
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4RTMxOS84NjhERDY1NjhD
MjYxMUU3QkMwNkM0NEVDNEY5QUUwMi9iUDFXcDM2dG5oV2J5eGpyYmVoaWMxQ1J0
VW8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2JQMVdwMzZ0bmhXYnl4anJiZWhpYzFDUnRVby5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
OEUzMTkvODY4REQ2NTY4QzI2MTFFN0JDMDZDNDRFQzRGOUFFMDIvN0FGMkMyOUM1
MEM4MTFGMDlFRjU0QjMxQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E
EDAOMAwEAgABMAYDBABnRvowDQYJKoZIhvcNAQELBQADggEBADXbwuNy+n/No3O6
SZ2dEwiYqA2aHnvX0TZeILnsyW7LQv6k5kdkssxb3+5SuPGRJpgSvotGQ8jan5gf
ROm5+UdkdlDz2nno5GgD0phc3LUOhwC0Ut0uw7wMxD7INnj37pCHBcC0xUoU0Y+g
2FVzhe+/gGW/inm+brPytnmBvKkOznl2iqxZiRPGzIYb671pBJGsVJRwmv2dIqTH
jgCw//vavTq31pcTm81v2S4z+oQCRp77ksggaCPHvsJGh/FlXKVsWpJIUY9dR2W0
UN8W67Ye6xdH5vxwdUmdIOdX62abreESMouXKRHj1IYgEx4RQ59NTnqnTDuuzCzi
HH9bOTQ=
-----END CERTIFICATE-----
Generated at Fri Jul 4 22:08:05 2025 by rpki-client