Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/05D1770411EB11EBA58CA43AC4F9AE02.roa
File:                     05D1770411EB11EBA58CA43AC4F9AE02.roa (raw, json)
Hash identifier:          YIJIQZA33cj024jms1m3a0PDYl9TOA+o+05z+LY0CVw=
Subject key identifier:   8F:B7:78:54:7F:62:E8:48:1D:99:D0:23:92:DD:55:EC:18:60:13:E6
Certificate issuer:       /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Certificate serial:       B219
Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/05D1770411EB11EBA58CA43AC4F9AE02.roa
Signing time:             Thu 08 May 2025 15:59:48 +0000
ROA not before:           Thu 08 May 2025 15:59:48 +0000
ROA not after:            Wed 01 Jul 2026 00:00:00 +0000
asID:                     133975
IP address blocks:        103.54.64.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
                          rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 19 May 2025 18:54:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 45593 (0xb219)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918EDB2, serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
        Validity
            Not Before: May  8 15:59:48 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=681cd4f4-f1ca
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:0c:de:f6:68:9d:97:d0:ae:cf:35:87:0b:6b:
                    1b:95:3e:54:05:cb:94:f9:fb:e3:f9:a0:fc:28:85:
                    f3:02:b0:37:6b:09:f6:30:fa:e5:04:fd:c2:d5:b1:
                    7b:d6:b5:14:98:0d:50:e2:8c:ad:8c:8c:d9:0e:ee:
                    19:f5:9b:b5:4f:2c:98:21:db:41:07:d0:c7:d1:87:
                    0c:f8:8f:4a:db:97:ce:72:99:9f:2f:82:d9:ab:a8:
                    89:1e:fb:9b:89:1e:e6:5c:bc:84:a0:2d:ee:5a:ba:
                    15:02:3f:ba:1a:20:58:c6:4a:1b:1f:0a:98:d8:7a:
                    ef:5f:8a:dd:5e:8e:77:f7:c5:a7:0e:2e:32:3e:7b:
                    f9:c7:b3:10:03:5d:7d:05:e6:eb:b6:17:5b:f5:43:
                    48:12:55:e3:58:37:4e:90:ae:d2:61:33:5b:9a:09:
                    f3:51:5c:53:fd:5a:43:c6:36:4a:20:08:4d:6e:03:
                    9c:25:02:56:80:85:4e:de:73:d1:8e:6f:b1:fe:20:
                    7d:40:12:85:8a:59:31:50:83:53:40:42:8f:82:af:
                    f0:5e:95:dd:29:04:47:e8:c1:19:08:b8:5b:b2:e5:
                    75:b6:51:9e:86:a7:c2:4c:19:d7:4d:4e:a1:05:47:
                    d7:c2:18:7e:2f:1f:c3:dd:82:10:c0:76:69:f8:02:
                    71:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8F:B7:78:54:7F:62:E8:48:1D:99:D0:23:92:DD:55:EC:18:60:13:E6
            X509v3 Authority Key Identifier:
                keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/05D1770411EB11EBA58CA43AC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.54.64.0/22

    Signature Algorithm: sha256WithRSAEncryption
         6a:f4:94:b4:ee:0c:84:96:24:5a:86:fa:70:e9:79:19:fe:16:
         f2:53:57:10:20:43:80:9d:48:77:d1:b7:fb:d7:cc:8c:aa:ca:
         5a:0a:5f:0c:33:2a:5b:2d:71:ee:f9:0a:4b:5f:3b:91:df:44:
         f1:4e:2c:1b:c6:ed:db:e9:1e:b2:3f:d2:ff:c3:e0:4c:48:2a:
         e4:3f:2a:c5:d7:87:02:d4:88:a5:e0:5e:61:c6:4d:19:49:3f:
         2c:a3:ec:ee:64:f7:24:42:b9:77:52:7d:4a:e0:f0:d5:9d:4f:
         c1:79:c0:13:61:1a:c2:ce:93:d3:a6:c8:c0:ad:e7:d5:37:a2:
         31:71:4e:64:e5:7d:0c:3d:e0:ff:b5:03:81:34:18:21:e8:47:
         ac:ff:52:51:f6:04:76:f0:9a:76:82:2d:4a:3b:7a:00:87:02:
         ed:bb:aa:4c:e8:5e:82:6a:09:f5:01:36:74:23:d7:f3:25:63:
         57:d7:03:e0:26:3a:01:ba:16:5e:d2:ce:21:a4:5e:91:a0:e8:
         a1:7a:26:44:34:e8:1d:ff:47:99:f3:4b:6e:7b:4a:90:bb:25:
         5c:dd:6f:04:9a:40:df:aa:67:45:fb:78:fe:7e:7d:b9:2a:9b:
         19:f0:13:5f:ec:f4:95:75:05:68:88:e8:8f:ed:b1:48:a4:79:
         3a:e2:4a:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 13 02:00:45 2025 by rpki-client