Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/3260679CF10811EB9858DF70C4F9AE02.roa
File:                     3260679CF10811EB9858DF70C4F9AE02.roa (raw, json)
Hash identifier:          JjTUlDqKt8QKmMEVshk0JY/FQgkQ/SZ7begLM/PqXpo=
Subject key identifier:   48:64:06:7B:33:E8:F8:B1:9F:FF:75:DF:8A:12:CE:3E:1D:0A:C1:1F
Certificate issuer:       /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Certificate serial:       B192
Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/3260679CF10811EB9858DF70C4F9AE02.roa
Signing time:             Thu 08 May 2025 15:57:42 +0000
ROA not before:           Thu 08 May 2025 15:57:42 +0000
ROA not after:            Wed 01 Jul 2026 00:00:00 +0000
asID:                     133005
IP address blocks:        103.90.4.0/23 maxlen: 24
                          103.90.6.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
                          rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 19 May 2025 18:54:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 45458 (0xb192)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918EDB2, serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
        Validity
            Not Before: May  8 15:57:42 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=681cd476-e1f6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:2a:22:c3:b2:53:1b:a8:33:3b:a8:0c:70:08:
                    ea:21:38:b2:54:d5:51:ca:d1:83:7e:f2:b6:8f:53:
                    79:68:29:32:6e:96:89:a3:b7:d5:c8:bc:47:2d:d0:
                    59:db:30:6a:d8:12:50:3e:f6:6c:55:03:2c:5a:b2:
                    45:18:3c:9e:3b:ca:34:63:8d:d3:16:61:b5:24:61:
                    b1:3d:9d:c6:a8:aa:83:6c:db:96:f0:01:59:43:a4:
                    f3:6f:0c:52:92:39:3c:9e:a4:29:e5:7b:ae:84:34:
                    13:43:3a:ca:6f:4e:10:9f:cb:24:c9:fa:4b:de:00:
                    d4:89:50:86:89:7b:96:d2:9f:ec:36:85:5d:de:0a:
                    0e:3d:5e:ca:aa:bb:77:6c:a1:db:55:ac:a3:da:e1:
                    49:8a:20:c5:51:0b:3a:61:3d:ba:4a:c7:49:07:2c:
                    1c:37:31:43:5c:0a:5f:de:a8:c9:cd:e7:c2:4f:14:
                    a8:5b:c5:24:c6:20:a2:75:94:58:63:a7:fe:e7:4a:
                    dd:4f:a3:04:21:15:b2:a8:d5:2b:2e:10:a8:02:8e:
                    50:67:97:fe:b0:26:a4:b4:29:6c:2a:5a:46:4b:3c:
                    79:c2:9c:37:5d:a6:6d:56:73:9d:17:60:5d:ca:bb:
                    eb:cc:c6:9f:d5:d7:bd:9c:17:7a:72:c0:a4:02:83:
                    35:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                48:64:06:7B:33:E8:F8:B1:9F:FF:75:DF:8A:12:CE:3E:1D:0A:C1:1F
            X509v3 Authority Key Identifier:
                keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/3260679CF10811EB9858DF70C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.90.4.0-103.90.6.255

    Signature Algorithm: sha256WithRSAEncryption
         3d:38:4c:c1:1b:c5:38:00:0e:80:1c:9e:24:b0:fa:43:e2:70:
         23:3b:f7:c6:c8:ae:9b:f4:e1:c5:d3:cf:01:70:d4:54:56:fd:
         2b:70:09:3d:40:88:fb:ab:ab:f3:65:2b:9b:27:ae:e1:3b:7f:
         41:55:07:21:46:8b:ae:72:52:9a:14:49:b7:4d:f8:b8:76:c2:
         06:af:4f:81:0a:75:85:5a:44:34:02:9e:ff:96:76:32:0e:47:
         11:9b:4f:34:0c:3d:75:53:d8:1c:9c:b1:9f:0b:d1:2b:29:59:
         34:da:ad:8f:05:1f:d6:e9:8c:bb:0f:64:53:7e:49:24:f7:86:
         a6:a7:62:77:de:6b:98:3d:7e:2c:56:79:d1:8d:cc:0b:a1:24:
         3e:15:b3:2e:0d:b8:4f:d9:a7:7f:7b:81:d7:8e:4c:83:e3:bb:
         e3:cc:44:92:61:9a:79:46:41:b9:4b:a9:48:2e:3d:ce:2b:80:
         2a:08:8c:d2:d9:81:a6:47:c7:15:50:87:fd:12:8d:d7:e8:77:
         af:0b:48:bf:44:28:2e:16:00:46:7e:a5:a8:49:0a:44:de:39:
         ce:f8:13:4e:49:eb:55:f2:ee:24:86:05:5d:33:a1:7d:27:f0:
         95:e6:04:e3:1d:dd:d2:a0:31:e9:0f:61:00:ca:ea:ab:d6:52:
         a8:48:52:17
-----BEGIN CERTIFICATE-----
MIIFejCCBGKgAwIBAgIDALGSMA0GCSqGSIb3DQEBCwUAMEYxETAPBgNVBAMTCEE5
MThFREIyMTEwLwYDVQQFEygyOTZFREI2NEYzQUY2RTlEOTgwOTMyRTgxNkY5NTk4
M0UzQUJDODIzMB4XDTI1MDUwODE1NTc0MloXDTI2MDcwMTAwMDAwMFowGDEWMBQG
A1UEAxMNNjgxY2Q0NzYtZTFmNjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBANUqIsOyUxuoMzuoDHAI6iE4slTVUcrRg37yto9TeWgpMm6WiaO31ci8Ry3Q
WdswatgSUD72bFUDLFqyRRg8njvKNGON0xZhtSRhsT2dxqiqg2zblvABWUOk828M
UpI5PJ6kKeV7roQ0E0M6ym9OEJ/LJMn6S94A1IlQhol7ltKf7DaFXd4KDj1eyqq7
d2yh21Wso9rhSYogxVELOmE9ukrHSQcsHDcxQ1wKX96oyc3nwk8UqFvFJMYgonWU
WGOn/udK3U+jBCEVsqjVKy4QqAKOUGeX/rAmpLQpbCpaRks8ecKcN12mbVZznRdg
Xcq768zGn9XXvZwXenLApAKDNcMCAwEAAaOCAp0wggKZMB0GA1UdDgQWBBRIZAZ7
M+j4sZ//dd+KEs4+HQrBHzAfBgNVHSMEGDAWgBQpbttk869unZgJMugW+VmD46vI
IzAOBgNVHQ8BAf8EBAMCB4AwgYMGA1UdHwR8MHoweKB2oHSGcnJzeW5jOi8vcnBr
aS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkxOEVEQjIvMkE0M0UzMEM3
MEU5MTFFMkIzNkQ0QjZCMjk3OUJCMjAvS1c3YlpQT3ZicDJZQ1RMb0Z2bFpnLU9y
eUNNLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBr
aS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3
MkZEMUZGMi9LVzdiWlBPdmJwMllDVExvRnZsWmctT3J5Q00uY2VyMEoGA1UdIAEB
/wRAMD4wPAYIKwYBBQUHDgIwMDAuBggrBgEFBQcCARYiaHR0cHM6Ly93d3cuYXBu
aWMubmV0L1JQS0kvQ1BTLnBkZjCBywYIKwYBBQUHAQsEgb4wgbswgYMGCCsGAQUF
BzALhndyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5
MThFREIyLzJBNDNFMzBDNzBFOTExRTJCMzZENEI2QjI5NzlCQjIwLzMyNjA2NzlD
RjEwODExRUI5ODU4REY3MEM0RjlBRTAyLnJvYTAzBggrBgEFBQcwDYYnaHR0cHM6
Ly9ycmRwLmFwbmljLm5ldC9ub3RpZmljYXRpb24ueG1sMCcGCCsGAQUFBwEHAQH/
BBgwFjAUBAIAATAOMAwDBAJnWgQDBABnWgYwDQYJKoZIhvcNAQELBQADggEBAD04
TMEbxTgADoAcniSw+kPicCM798bIrpv04cXTzwFw1FRW/StwCT1AiPurq/NlK5sn
ruE7f0FVByFGi65yUpoUSbdN+Lh2wgavT4EKdYVaRDQCnv+WdjIORxGbTzQMPXVT
2BycsZ8L0SspWTTarY8FH9bpjLsPZFN+SST3hqanYnfea5g9fixWedGNzAuhJD4V
sy4NuE/Zp397gdeOTIPju+PMRJJhmnlGQblLqUguPc4rgCoIjNLZgaZHxxVQh/0S
jdfod68LSL9EKC4WAEZ+pahJCkTeOc74E05J61Xy7iSGBV0zoX0n8JXmBOMd3dKg
MekPYQDK6qvWUqhIUhc=
-----END CERTIFICATE-----
Generated at Tue May 13 02:27:20 2025 by rpki-client