Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/0A64208A151611EC8CB1CE21C4F9AE02.roa
File:                     0A64208A151611EC8CB1CE21C4F9AE02.roa (raw, json)
Hash identifier:          OvVZdaegS4S9p08POllBsK8izWKM0eB/eqA8EjIoU58=
Subject key identifier:   59:63:88:4C:43:14:A7:0A:CA:AF:4B:13:C8:C1:57:6C:43:D5:71:BD
Certificate issuer:       /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Certificate serial:       B733
Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/0A64208A151611EC8CB1CE21C4F9AE02.roa
Signing time:             Thu 08 May 2025 16:19:52 +0000
ROA not before:           Thu 08 May 2025 16:19:52 +0000
ROA not after:            Wed 01 Jul 2026 00:00:00 +0000
asID:                     146888
IP address blocks:        103.83.151.0/24 maxlen: 24
                          103.173.39.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
                          rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 22 May 2025 11:04:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 46899 (0xb733)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918EDB2, serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
        Validity
            Not Before: May  8 16:19:52 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=681cd9a7-1950
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e4:f6:70:4e:de:91:df:e6:74:c4:54:03:88:e6:
                    7c:fd:7e:8c:66:1e:ca:a7:2c:c2:88:58:1a:ce:c2:
                    6a:c6:d0:97:c0:4b:f1:f3:c8:4a:66:91:f4:43:ff:
                    95:28:84:57:df:1e:e1:f3:3c:b0:94:38:4f:44:07:
                    82:5b:00:a5:9d:81:22:63:fc:e8:1e:c5:b0:e3:6c:
                    57:a1:e7:cb:e6:6b:30:5c:a9:d1:70:92:25:dd:5c:
                    46:2f:22:ba:91:2f:46:94:ca:2e:90:c3:93:a7:44:
                    78:04:09:f1:6c:35:5c:d6:4b:e2:89:92:3c:85:96:
                    9b:1a:08:d9:76:e7:63:26:82:95:8a:ad:92:bb:d9:
                    b2:b2:b9:19:2a:b5:64:63:f6:88:bb:fb:7a:bf:2d:
                    e4:9d:34:45:f1:83:e9:e9:c4:1d:6f:30:bf:ad:9b:
                    9f:37:dc:6e:ae:80:7a:a3:ca:fe:67:4f:5b:2b:d7:
                    25:fd:15:2c:16:22:22:f0:e1:99:00:ef:fb:b0:4c:
                    ef:ba:a5:4c:5c:4e:a4:7b:a3:ee:7f:66:80:95:09:
                    1b:25:94:9b:e7:d5:a7:79:2c:d3:4f:fd:1f:41:d5:
                    6b:1e:29:3e:42:af:3a:29:42:33:2b:c5:d4:57:7a:
                    e4:a7:95:11:13:55:3b:2f:20:73:4c:44:48:af:6d:
                    b5:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                59:63:88:4C:43:14:A7:0A:CA:AF:4B:13:C8:C1:57:6C:43:D5:71:BD
            X509v3 Authority Key Identifier:
                keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/0A64208A151611EC8CB1CE21C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.83.151.0/24
                  103.173.39.0/24

    Signature Algorithm: sha256WithRSAEncryption
         81:4b:b2:77:d6:88:49:de:7e:76:72:a7:59:78:fc:34:97:67:
         6a:35:a4:9b:f0:c8:b1:1c:d6:6c:31:c2:22:66:9e:ac:1d:e8:
         aa:1b:27:3f:db:b5:89:2a:48:78:42:75:d7:2e:1c:a9:92:06:
         43:47:5f:bb:c1:6c:66:44:91:65:c3:cc:2a:48:43:1d:57:14:
         1a:18:c7:64:6e:dc:65:45:da:7d:0a:c9:cc:45:f0:55:d0:61:
         a1:c2:77:78:d9:c9:a0:e7:ad:ad:60:48:77:26:d6:9c:46:d3:
         ba:f5:e9:1a:22:8d:88:00:b6:57:4f:c3:7b:3e:fa:89:11:f3:
         bf:ed:50:9d:88:8e:47:96:26:4a:64:f4:a8:97:ab:ed:4e:73:
         d7:f2:55:a1:2b:13:fe:7d:89:65:88:62:8f:4b:bb:f0:0e:ee:
         98:f9:d7:76:b0:c4:56:16:40:1f:44:5b:ea:12:b0:23:23:79:
         3e:19:37:aa:1f:a4:08:4b:b7:f7:a7:a8:97:bf:db:bb:9d:93:
         d1:22:3d:96:e8:bc:7d:30:a0:aa:18:7d:91:ed:52:ed:52:1a:
         f4:83:80:c1:72:b6:04:52:31:33:65:89:10:2e:a1:45:b2:7f:
         94:01:cd:df:1d:a1:40:68:d7:6c:f0:ea:b0:fb:1a:10:fd:9b:
         ba:48:6a:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 15 16:06:14 2025 by rpki-client