Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/1B4C4082831011EBBA0FEB33C4F9AE02.roa
File:                     1B4C4082831011EBBA0FEB33C4F9AE02.roa (raw, json)
Hash identifier:          GmgEpkBCj+MlDvuuENX1B9rV2HzII1jntPZ9v9D6QLY=
Subject key identifier:   E1:55:16:22:71:B0:3A:51:7B:43:1E:5C:2A:EB:F7:CF:82:01:81:F8
Certificate issuer:       /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Certificate serial:       B68E
Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/1B4C4082831011EBBA0FEB33C4F9AE02.roa
Signing time:             Thu 08 May 2025 16:17:22 +0000
ROA not before:           Thu 08 May 2025 16:17:22 +0000
ROA not after:            Wed 01 Jul 2026 00:00:00 +0000
asID:                     141785
IP address blocks:        103.164.47.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
                          rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 19 May 2025 18:54:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 46734 (0xb68e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918EDB2, serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
        Validity
            Not Before: May  8 16:17:22 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=681cd911-eefa
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:41:f1:e4:c0:e8:f7:d8:08:05:f2:5e:6c:06:
                    99:f8:c8:b6:27:96:22:8d:94:24:a8:99:a2:79:16:
                    3d:fe:27:40:e8:34:56:1d:a2:2c:ee:e3:4e:df:62:
                    3f:18:84:44:4f:55:69:95:6a:f2:0e:1e:dc:f9:55:
                    ac:86:76:12:ea:c7:cb:bf:36:4a:7f:39:93:de:aa:
                    67:bb:3a:9e:53:32:f6:ff:67:cd:ad:22:83:5e:75:
                    82:d1:d2:cb:fd:ae:32:f5:b0:05:1b:e1:54:c8:5e:
                    e5:20:ee:c6:5d:44:2c:7f:c8:61:31:04:fc:37:9a:
                    c0:8c:73:48:6a:d9:2e:ea:c2:df:09:a8:39:fe:e6:
                    b9:5f:69:26:99:e4:60:e8:9d:3a:e5:b2:bb:80:bc:
                    22:a2:b2:1f:d8:f0:c1:05:d1:6f:76:9f:60:15:be:
                    fc:5f:e6:ed:b8:bf:7a:41:20:c9:95:3d:9b:e1:9a:
                    5e:d2:b3:e0:fb:b9:99:d3:19:90:b8:ff:58:7a:82:
                    16:f1:88:97:89:28:1b:9e:a0:a6:c8:b2:f9:80:96:
                    c8:7c:c4:6f:10:b4:4c:db:4b:8e:b1:8c:41:71:9c:
                    74:83:00:31:08:47:b9:80:5a:54:d4:90:bc:b7:2f:
                    a6:4d:6a:6b:99:db:f1:9e:db:c6:f3:36:fd:3d:6b:
                    1d:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E1:55:16:22:71:B0:3A:51:7B:43:1E:5C:2A:EB:F7:CF:82:01:81:F8
            X509v3 Authority Key Identifier:
                keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/1B4C4082831011EBBA0FEB33C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.164.47.0/24

    Signature Algorithm: sha256WithRSAEncryption
         b8:9b:53:fc:20:ab:04:69:54:b0:e0:f2:61:5c:ec:85:6a:86:
         73:89:71:07:fc:6e:17:d1:1e:05:ba:2e:16:49:a9:5e:63:82:
         69:97:ac:e2:dc:3b:a3:94:c5:9b:48:a4:8e:b4:b4:6c:e5:8f:
         d4:23:9d:46:f7:a0:53:c4:3d:05:ce:c7:49:75:6d:90:dc:70:
         1c:03:7a:65:f4:0c:06:e2:38:b0:f4:75:41:3d:f3:44:58:01:
         53:07:cc:43:fe:d4:b3:3a:0a:ff:53:0d:a0:77:a6:0b:4a:cc:
         c2:89:ff:d0:19:cc:bf:75:88:e5:f1:85:5b:f6:7f:2d:10:22:
         74:46:74:1b:46:95:28:dc:6d:7d:6f:f9:28:ca:9f:be:11:c8:
         68:b9:f6:4f:bb:6a:74:45:50:68:bf:cc:16:82:c3:4d:b3:80:
         2b:d8:37:3b:8f:ea:13:ce:15:10:fd:b8:50:ea:d1:9e:04:92:
         a3:1a:dd:09:88:5c:9a:09:f4:08:de:f6:e5:20:09:77:84:e9:
         0b:39:ac:e1:fa:d1:b0:a6:a4:b3:e5:0e:38:39:85:e8:bd:b8:
         98:9f:79:f1:4d:d9:3f:b4:71:51:c4:84:14:3d:3c:3b:91:76:
         56:63:86:82:dc:ae:14:4b:6f:b0:aa:02:60:14:de:82:1f:63:
         04:84:8c:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 13 01:47:05 2025 by rpki-client