Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/1ED370DCA10911ECBC0CC97CC4F9AE02.roa
File:                     1ED370DCA10911ECBC0CC97CC4F9AE02.roa (raw, json)
Hash identifier:          QLoTXAIsrg+hRKNdRMc8vRZiqsIe7Z5ZAMrk9dL1aSM=
Subject key identifier:   FE:7B:C6:60:97:0A:66:87:54:57:24:67:ED:FE:59:2E:4A:58:84:92
Certificate issuer:       /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Certificate serial:       B7EE
Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/1ED370DCA10911ECBC0CC97CC4F9AE02.roa
Signing time:             Thu 08 May 2025 16:22:36 +0000
ROA not before:           Thu 08 May 2025 16:22:36 +0000
ROA not after:            Wed 01 Jul 2026 00:00:00 +0000
asID:                     149529
IP address blocks:        103.183.84.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
                          rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 19 May 2025 18:54:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 47086 (0xb7ee)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918EDB2, serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
        Validity
            Not Before: May  8 16:22:36 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=681cda4b-8ec1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:45:72:f8:dd:da:ab:18:f9:05:97:ea:63:76:
                    b7:aa:7e:b3:37:b9:5e:82:91:10:64:62:41:35:ce:
                    ed:ef:01:e1:87:ce:25:85:ed:7b:e8:0e:44:97:96:
                    09:e0:e5:0a:e3:cc:82:6d:80:64:c4:43:c1:6a:c2:
                    51:62:df:f4:79:6e:8a:84:90:46:d8:df:49:fb:33:
                    ba:9e:0b:c9:28:74:a6:a4:af:a7:35:5c:ce:dd:7c:
                    63:d5:5d:ee:04:83:7f:c2:16:4f:72:02:36:f5:62:
                    31:91:aa:6a:c7:b0:dc:3d:7e:93:21:7e:22:5b:e2:
                    c8:ef:08:d0:2d:b7:ba:9e:22:c1:56:c8:f1:fe:72:
                    12:29:b0:fe:93:a5:9e:0b:b4:32:b5:57:3d:3b:17:
                    30:04:0b:59:e0:44:82:ae:81:5c:9a:c3:41:3c:5f:
                    5f:f4:c8:dc:57:8d:a2:f6:e7:14:08:2a:5a:2c:c6:
                    4e:da:40:b4:6b:c3:7a:c1:f5:90:08:32:e5:4d:e6:
                    e8:d4:2f:85:72:d6:39:d2:48:f7:b9:6b:fc:86:89:
                    02:49:21:d2:49:cc:40:d7:eb:06:33:0a:19:3c:98:
                    62:67:7f:ce:87:f3:0d:b3:24:aa:88:97:a4:94:2b:
                    da:92:18:e8:d4:85:5b:10:dc:ae:3c:7e:61:7c:8d:
                    af:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FE:7B:C6:60:97:0A:66:87:54:57:24:67:ED:FE:59:2E:4A:58:84:92
            X509v3 Authority Key Identifier:
                keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/1ED370DCA10911ECBC0CC97CC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.183.84.0/23

    Signature Algorithm: sha256WithRSAEncryption
         88:c9:b3:a3:8a:33:f0:7d:4b:5d:9a:5d:5c:66:cc:3e:bb:7b:
         b7:e7:28:5a:29:55:f5:9b:3c:28:bc:25:94:99:8b:59:8b:33:
         2f:40:2d:e3:1f:54:e2:80:75:14:61:cf:26:72:25:8b:18:ba:
         68:52:41:be:f7:0c:89:44:77:11:ac:ad:e4:f7:db:06:47:88:
         f3:70:93:9d:e3:a5:e0:7c:87:ef:2f:c9:1f:19:46:f2:1b:91:
         b2:d2:f8:58:8a:f9:65:53:55:d2:28:5e:20:ed:cb:76:9d:cd:
         fe:35:f1:71:cb:2a:be:e9:83:b7:e8:92:3c:0d:a4:d0:1d:42:
         98:ed:91:11:50:93:3e:ce:74:a6:9d:72:03:40:a1:7f:a2:6c:
         45:6b:45:81:eb:58:f5:18:e1:b1:ef:61:8a:56:65:97:60:ff:
         df:e7:e6:f2:21:42:05:8d:b6:2b:f9:7d:fc:8e:32:7e:33:4c:
         80:5e:c8:9a:4f:82:1c:8c:73:6a:b8:04:00:c6:03:9e:b6:eb:
         2a:39:8a:de:34:1c:fd:19:8b:b1:df:bc:86:c2:12:98:8c:0e:
         6f:c9:a9:1f:8b:01:63:38:ba:4e:34:3a:8a:51:b0:b4:1a:e2:
         5c:ef:e5:22:5c:0e:60:d0:a3:b6:b6:73:09:d9:36:f9:2e:c9:
         ba:08:e9:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 13 00:11:28 2025 by rpki-client