Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/1336FB66ED7311EC86064A84C4F9AE02.roa
File:                     1336FB66ED7311EC86064A84C4F9AE02.roa (raw, json)
Hash identifier:          srUfW+j+fcyUzOA6O0414cUwNIeTRIDKkV6Q21RBWG8=
Subject key identifier:   8F:B6:F3:3D:02:3D:9F:AE:2A:F9:E2:81:B5:24:63:8F:39:A3:49:10
Certificate issuer:       /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Certificate serial:       B7F8
Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/1336FB66ED7311EC86064A84C4F9AE02.roa
Signing time:             Thu 08 May 2025 16:22:44 +0000
ROA not before:           Thu 08 May 2025 16:22:44 +0000
ROA not after:            Wed 01 Jul 2026 00:00:00 +0000
asID:                     149539
IP address blocks:        103.185.213.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
                          rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 20 May 2025 13:22:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 47096 (0xb7f8)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918EDB2, serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
        Validity
            Not Before: May  8 16:22:44 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=681cda54-5afd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:eb:00:23:e7:3c:99:c1:e7:9a:d4:28:4c:d5:70:
                    fe:0c:1a:4c:a6:68:f9:3f:30:8c:73:a4:6f:7a:ec:
                    bc:73:31:e5:e8:51:8e:4e:69:25:20:46:7d:bd:b3:
                    6d:45:dd:a2:45:a9:d5:d9:38:8b:3d:e5:8c:15:5d:
                    9d:c8:5a:7f:50:7f:30:64:3d:c9:cc:35:ec:f5:c4:
                    17:2c:82:4d:08:ee:7f:65:f8:d6:7a:bd:79:10:95:
                    61:b3:c2:96:f6:94:7e:ce:08:2a:3a:ba:30:9c:b8:
                    63:6d:b4:13:c1:c4:91:3a:01:b1:73:15:de:b0:cb:
                    5c:42:60:69:37:64:80:f0:ff:2c:ee:33:17:b9:f0:
                    15:7b:95:26:04:f6:77:27:91:a4:05:80:22:70:ff:
                    36:58:e9:c1:95:38:d2:46:4d:5c:57:c7:86:ce:72:
                    01:a2:f8:65:c3:d1:48:f9:18:16:b0:f4:68:d0:5d:
                    0e:25:aa:4f:87:27:b8:ea:ce:2b:53:11:06:fa:02:
                    23:8d:43:d4:b3:a7:5c:97:84:96:82:e9:c5:11:be:
                    dc:2d:88:fb:d1:73:b3:97:13:5e:2c:46:88:60:56:
                    57:7d:d8:fc:c4:19:22:11:b0:d9:2a:3d:0e:62:d4:
                    94:2f:f5:47:8a:db:aa:00:57:cc:c3:4d:11:ce:87:
                    10:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8F:B6:F3:3D:02:3D:9F:AE:2A:F9:E2:81:B5:24:63:8F:39:A3:49:10
            X509v3 Authority Key Identifier:
                keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/1336FB66ED7311EC86064A84C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.185.213.0/24

    Signature Algorithm: sha256WithRSAEncryption
         a4:76:f6:11:01:1f:ef:35:cf:a7:64:f4:bb:ea:68:d8:f8:58:
         72:f0:a2:e6:4e:33:76:04:c8:0f:ec:a9:35:e2:90:10:f0:c5:
         0c:c2:9a:45:e7:25:b4:40:ac:ba:a6:88:d3:c7:46:fd:9d:8d:
         4c:80:00:24:10:b0:61:d5:09:1d:5e:ef:78:f0:fa:ae:03:54:
         f7:74:a8:e6:da:1d:c8:3f:9c:b7:08:12:08:e7:6b:ea:e4:65:
         3b:92:62:69:6e:aa:43:47:c5:fc:02:46:9e:1f:bd:18:7a:9f:
         dd:d6:6e:d5:54:f0:61:96:5d:a2:56:d1:4f:25:8f:b0:82:fe:
         a7:18:97:6b:cc:17:bb:88:e1:93:05:af:d0:43:ea:01:77:09:
         2b:e9:23:12:e2:ab:09:7c:18:2f:5b:05:1d:76:ad:94:07:0c:
         2c:3b:8c:29:da:b2:c5:f8:21:59:d0:9d:bb:64:0e:10:fe:9e:
         18:18:7f:26:eb:4a:00:99:1a:cb:da:c3:1c:47:f4:3e:60:07:
         f3:55:86:81:e6:3f:1d:07:55:db:6c:d7:9e:7f:61:d9:91:47:
         7a:89:8a:46:b5:73:b3:19:b5:e6:69:2d:d1:59:67:cf:5b:d7:
         a2:9d:6e:70:cf:97:80:3d:60:c4:54:9d:46:dc:ad:f3:73:4e:
         c5:3c:43:4e
-----BEGIN CERTIFICATE-----
MIIFcjCCBFqgAwIBAgIDALf4MA0GCSqGSIb3DQEBCwUAMEYxETAPBgNVBAMTCEE5
MThFREIyMTEwLwYDVQQFEygyOTZFREI2NEYzQUY2RTlEOTgwOTMyRTgxNkY5NTk4
M0UzQUJDODIzMB4XDTI1MDUwODE2MjI0NFoXDTI2MDcwMTAwMDAwMFowGDEWMBQG
A1UEAxMNNjgxY2RhNTQtNWFmZDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBAOsAI+c8mcHnmtQoTNVw/gwaTKZo+T8wjHOkb3rsvHMx5ehRjk5pJSBGfb2z
bUXdokWp1dk4iz3ljBVdnchaf1B/MGQ9ycw17PXEFyyCTQjuf2X41nq9eRCVYbPC
lvaUfs4IKjq6MJy4Y220E8HEkToBsXMV3rDLXEJgaTdkgPD/LO4zF7nwFXuVJgT2
dyeRpAWAInD/NljpwZU40kZNXFfHhs5yAaL4ZcPRSPkYFrD0aNBdDiWqT4cnuOrO
K1MRBvoCI41D1LOnXJeEloLpxRG+3C2I+9Fzs5cTXixGiGBWV33Y/MQZIhGw2So9
DmLUlC/1R4rbqgBXzMNNEc6HEA8CAwEAAaOCApUwggKRMB0GA1UdDgQWBBSPtvM9
Aj2frir54oG1JGOPOaNJEDAfBgNVHSMEGDAWgBQpbttk869unZgJMugW+VmD46vI
IzAOBgNVHQ8BAf8EBAMCB4AwgYMGA1UdHwR8MHoweKB2oHSGcnJzeW5jOi8vcnBr
aS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkxOEVEQjIvMkE0M0UzMEM3
MEU5MTFFMkIzNkQ0QjZCMjk3OUJCMjAvS1c3YlpQT3ZicDJZQ1RMb0Z2bFpnLU9y
eUNNLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBr
aS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3
MkZEMUZGMi9LVzdiWlBPdmJwMllDVExvRnZsWmctT3J5Q00uY2VyMEoGA1UdIAEB
/wRAMD4wPAYIKwYBBQUHDgIwMDAuBggrBgEFBQcCARYiaHR0cHM6Ly93d3cuYXBu
aWMubmV0L1JQS0kvQ1BTLnBkZjCBywYIKwYBBQUHAQsEgb4wgbswgYMGCCsGAQUF
BzALhndyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5
MThFREIyLzJBNDNFMzBDNzBFOTExRTJCMzZENEI2QjI5NzlCQjIwLzEzMzZGQjY2
RUQ3MzExRUM4NjA2NEE4NEM0RjlBRTAyLnJvYTAzBggrBgEFBQcwDYYnaHR0cHM6
Ly9ycmRwLmFwbmljLm5ldC9ub3RpZmljYXRpb24ueG1sMB8GCCsGAQUFBwEHAQH/
BBAwDjAMBAIAATAGAwQAZ7nVMA0GCSqGSIb3DQEBCwUAA4IBAQCkdvYRAR/vNc+n
ZPS76mjY+Fhy8KLmTjN2BMgP7Kk14pAQ8MUMwppF5yW0QKy6pojTx0b9nY1MgAAk
ELBh1QkdXu948PquA1T3dKjm2h3IP5y3CBII52vq5GU7kmJpbqpDR8X8AkaeH70Y
ep/d1m7VVPBhll2iVtFPJY+wgv6nGJdrzBe7iOGTBa/QQ+oBdwkr6SMS4qsJfBgv
WwUddq2UBwwsO4wp2rLF+CFZ0J27ZA4Q/p4YGH8m60oAmRrL2sMcR/Q+YAfzVYaB
5j8dB1XbbNeef2HZkUd6iYpGtXOzGbXmaS3RWWfPW9einW5wz5eAPWDEVJ1G3K3z
c07FPENO
-----END CERTIFICATE-----
Generated at Tue May 13 22:21:40 2025 by rpki-client