Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/1E219CF6F19A11EA90B2B06BC4F9AE02.roa
File:                     1E219CF6F19A11EA90B2B06BC4F9AE02.roa (raw, json)
Hash identifier:          HQR/SrqHInxMmmmjCDC12QDAoWjnVwdamlKuWbqFUsM=
Subject key identifier:   73:28:31:5C:6D:67:00:16:09:54:09:71:77:21:80:5F:F9:F7:49:F0
Certificate issuer:       /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Certificate serial:       B5EA
Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/1E219CF6F19A11EA90B2B06BC4F9AE02.roa
Signing time:             Thu 08 May 2025 16:14:50 +0000
ROA not before:           Thu 08 May 2025 16:14:50 +0000
ROA not after:            Wed 01 Jul 2026 00:00:00 +0000
asID:                     140199
IP address blocks:        103.155.12.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
                          rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 19 May 2025 18:54:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 46570 (0xb5ea)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918EDB2, serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
        Validity
            Not Before: May  8 16:14:50 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=681cd87a-46b1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:79:5e:a0:2e:53:40:7b:8a:0a:ce:33:7f:30:
                    d6:da:3b:35:b1:e7:b6:d3:a1:04:78:6b:3c:56:b9:
                    cd:a7:f6:47:75:d1:b8:c5:5d:78:82:af:28:18:00:
                    00:39:6c:3e:45:b8:eb:17:0d:f0:ca:c1:8b:7e:3a:
                    eb:67:63:82:7d:f9:37:4d:c0:29:67:c3:c1:1d:fd:
                    c8:67:2f:a0:68:6d:a3:35:2c:89:63:5a:42:0a:85:
                    ec:7e:b2:5e:80:6e:c2:9d:f5:f0:df:87:aa:bf:18:
                    a9:18:60:d9:48:5d:94:10:cd:62:5e:c3:c9:e1:b6:
                    84:f5:80:f4:cb:7d:b6:62:ad:c0:87:31:e2:c6:1e:
                    80:ee:f4:e0:a3:81:58:55:a4:49:54:2b:ab:8a:17:
                    4a:d4:c2:72:c0:fa:74:1f:57:27:b0:c4:1a:71:8a:
                    1d:94:54:dc:96:36:e6:a2:39:94:d7:ae:f2:92:f6:
                    92:94:df:e1:b3:58:aa:c6:fc:44:b0:7e:0f:f9:21:
                    c5:35:ae:ae:4a:fe:e0:99:9b:1c:e7:6f:35:21:c0:
                    a8:62:f9:fb:0c:78:19:27:23:05:eb:b9:df:0c:e9:
                    6e:1a:82:41:27:1f:6b:bd:83:ba:b1:84:b8:e0:89:
                    87:34:0e:13:1a:cc:cc:ea:a2:92:e2:a6:91:fb:75:
                    c5:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                73:28:31:5C:6D:67:00:16:09:54:09:71:77:21:80:5F:F9:F7:49:F0
            X509v3 Authority Key Identifier:
                keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/1E219CF6F19A11EA90B2B06BC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.155.12.0/24

    Signature Algorithm: sha256WithRSAEncryption
         20:c1:47:70:78:c3:2c:7e:91:61:bb:f5:c1:f6:e7:28:d6:1d:
         10:07:44:27:e9:fe:4d:bb:51:04:3c:22:6d:5b:72:1f:c6:2b:
         b7:65:d4:c8:d1:be:e1:96:61:83:d8:b8:d2:b3:fd:2f:b6:64:
         56:7d:c9:92:02:3c:d8:19:81:38:9b:c6:b1:99:ed:a0:8a:8f:
         28:26:70:9a:a3:b2:a6:97:d8:cf:dc:fe:c2:ef:e2:21:86:a6:
         f3:03:ce:80:3e:79:f5:03:e6:4d:11:ff:d3:8e:47:98:a6:43:
         14:a9:e1:75:c7:15:4e:72:4d:eb:1e:09:d0:e2:20:f9:89:ba:
         cd:d9:06:5d:f6:4c:3e:9b:6a:62:61:06:b0:09:19:37:8d:06:
         64:af:e5:f3:a9:8f:29:b6:63:3c:c0:aa:33:26:18:5f:ad:05:
         ad:3c:2b:c4:50:31:1e:26:1b:cd:7e:6c:52:8d:6f:47:d5:7e:
         49:d0:22:19:b9:5a:d5:dd:68:0a:c5:41:a6:6c:8c:15:5c:dd:
         14:08:3f:fd:89:97:d4:55:14:95:ca:be:3d:d2:59:b7:9c:34:
         03:59:d8:ca:51:09:cb:93:f5:48:99:95:60:ea:7f:3c:23:4f:
         db:d0:19:a6:58:57:d5:7a:c0:e6:a7:e0:5e:17:79:d5:68:75:
         36:a0:51:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 13 01:05:15 2025 by rpki-client