Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A918E843/957BCB44395F11EABB854755C4F9AE02/01553E10396311EAB24C5A5FC4F9AE02.roa
File:                     01553E10396311EAB24C5A5FC4F9AE02.roa (raw, json)
Hash identifier:          Jhq/OLItI0gDhEIBYho+XP9iO0Y/7Srvb27SpQGuffU=
Subject key identifier:   2F:09:6D:72:58:6F:45:5D:A4:5F:98:FE:82:20:D6:8B:90:0A:19:8F
Certificate issuer:       /CN=A918E843/serialNumber=5CFBA28916EAC07B2359094855D89E16A0814BAC
Certificate serial:       0B37
Authority key identifier: 5C:FB:A2:89:16:EA:C0:7B:23:59:09:48:55:D8:9E:16:A0:81:4B:AC
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XPuiiRbqwHsjWQlIVdieFqCBS6w.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918E843/957BCB44395F11EABB854755C4F9AE02/01553E10396311EAB24C5A5FC4F9AE02.roa
Signing time:             Wed 30 Apr 2025 19:28:56 +0000
ROA not before:           Wed 30 Apr 2025 19:28:56 +0000
ROA not after:            Wed 01 Jul 2026 00:00:00 +0000
asID:                     55497
IP address blocks:        103.4.114.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918E843/957BCB44395F11EABB854755C4F9AE02/XPuiiRbqwHsjWQlIVdieFqCBS6w.crl
                          rsync://rpki.apnic.net/member_repository/A918E843/957BCB44395F11EABB854755C4F9AE02/XPuiiRbqwHsjWQlIVdieFqCBS6w.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XPuiiRbqwHsjWQlIVdieFqCBS6w.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 23 May 2025 19:24:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2871 (0xb37)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918E843, serialNumber=5CFBA28916EAC07B2359094855D89E16A0814BAC
        Validity
            Not Before: Apr 30 19:28:56 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=681279f8-eca7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:20:ae:b7:43:20:d2:a6:14:a2:0d:d3:65:8a:
                    2a:93:df:65:9a:81:f0:22:7a:d2:54:95:60:a9:11:
                    db:fd:d3:7e:b4:2a:36:e3:03:51:10:e9:a2:16:14:
                    e6:b3:6e:f1:ac:73:b1:6c:9d:96:0c:ca:ee:92:ab:
                    73:0e:18:57:ab:92:f6:81:b1:26:d8:ad:6f:6a:ed:
                    96:1b:04:02:f0:63:7a:36:1c:3a:90:0f:e6:1e:16:
                    d1:11:25:cb:b3:4d:6a:b0:69:93:61:06:e2:97:3f:
                    c8:ed:48:d7:b5:ea:ed:47:78:c3:b2:b2:c7:33:64:
                    49:b9:c8:33:87:58:60:95:d8:8b:ec:e9:93:3c:6a:
                    ea:35:15:fa:d8:f2:63:f2:9e:cc:82:c4:15:14:d5:
                    2c:d4:46:e8:43:3e:3b:33:52:0a:26:61:9e:04:df:
                    08:7d:bc:85:52:32:9d:99:3b:d3:24:4c:39:81:ed:
                    98:8f:cf:19:6f:ee:31:0d:81:97:f6:fc:5e:1b:17:
                    4d:5b:1b:d1:31:f0:07:ad:dc:8c:b5:8f:ca:a7:e7:
                    ec:d2:bc:ea:57:f6:af:17:b8:ee:52:c4:bc:93:49:
                    5b:af:55:e4:06:87:cd:d5:50:f4:49:2b:22:e9:96:
                    fe:a1:58:bb:0b:d5:ca:52:35:6c:02:76:98:dc:8a:
                    32:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2F:09:6D:72:58:6F:45:5D:A4:5F:98:FE:82:20:D6:8B:90:0A:19:8F
            X509v3 Authority Key Identifier:
                keyid:5C:FB:A2:89:16:EA:C0:7B:23:59:09:48:55:D8:9E:16:A0:81:4B:AC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918E843/957BCB44395F11EABB854755C4F9AE02/XPuiiRbqwHsjWQlIVdieFqCBS6w.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XPuiiRbqwHsjWQlIVdieFqCBS6w.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918E843/957BCB44395F11EABB854755C4F9AE02/01553E10396311EAB24C5A5FC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.4.114.0/23

    Signature Algorithm: sha256WithRSAEncryption
         41:bd:2b:d9:cb:86:ef:44:58:c8:7b:bd:fe:30:66:8c:b3:11:
         5c:fc:a4:88:51:b2:71:2e:bb:28:ff:f0:e5:bd:00:9a:aa:eb:
         e6:0c:eb:13:a8:51:59:4d:b9:c6:0b:0d:a3:3d:d2:eb:0c:be:
         45:e7:37:30:12:b0:ad:e8:9b:25:6d:b5:a5:eb:fb:d7:75:8c:
         e4:7c:99:47:27:be:11:b1:ab:a9:b6:d3:62:81:e1:c5:2d:eb:
         dc:55:85:7c:87:6f:f8:3d:2a:82:4d:68:2a:28:62:97:f3:93:
         85:9f:e7:19:89:a3:57:92:e6:80:b7:f3:f6:a9:ee:a7:de:45:
         b0:1e:e3:1a:e5:48:a5:b1:22:81:ee:ee:8e:8e:9f:24:23:a1:
         07:5a:46:c4:c8:51:13:93:88:81:7d:c8:0b:39:85:36:f5:2c:
         49:12:0e:25:12:43:bc:6f:ae:c3:60:75:e4:69:0f:48:95:a0:
         6d:69:3d:d3:84:96:34:07:6e:15:aa:19:20:a8:07:77:a2:59:
         21:b9:44:d8:5a:d9:e4:2f:b6:cd:6f:0c:e1:72:20:d2:60:8c:
         af:a7:50:f1:9e:2b:15:8f:30:38:99:74:7e:79:25:f0:c7:75:
         39:82:20:37:8f:64:eb:85:f2:82:a6:27:b8:da:ae:8f:e2:83:
         0e:ae:b4:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 17 03:19:54 2025 by rpki-client