Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/45440202145811F0A9CD1C52C4F9AE02.roa
File:                     45440202145811F0A9CD1C52C4F9AE02.roa (raw, json)
Hash identifier:          dLa8+Y0W79xiC7AipmHkw4l9c+E3pll0HUPcUA11NtE=
Subject key identifier:   F9:0C:03:0B:7E:AF:45:C3:C5:89:12:21:02:96:84:C3:9C:65:83:8C
Certificate issuer:       /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Certificate serial:       B83F
Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/45440202145811F0A9CD1C52C4F9AE02.roa
Signing time:             Thu 08 May 2025 16:23:48 +0000
ROA not before:           Thu 08 May 2025 16:23:47 +0000
ROA not after:            Wed 01 Jul 2026 00:00:00 +0000
asID:                     149781
IP address blocks:        103.98.192.0/24 maxlen: 24
                          103.179.41.0/24 maxlen: 24
                          103.184.106.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
                          rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 22 May 2025 11:04:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 47167 (0xb83f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918EDB2, serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
        Validity
            Not Before: May  8 16:23:47 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=681cda93-7b34
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:64:56:35:c4:e4:ba:fd:a8:5b:92:43:0d:89:
                    09:c7:58:40:73:f8:27:bf:10:04:67:e4:20:f7:83:
                    40:51:02:91:9e:5b:c3:85:cc:b0:38:4d:0a:16:a0:
                    c8:a5:fd:e9:dd:4b:dd:1f:0b:7d:50:73:e1:65:87:
                    0d:3d:1a:f2:a6:dd:c4:9f:6d:66:5b:ac:b2:db:7e:
                    22:a5:79:4e:d0:2a:e1:8a:d6:79:79:2c:d7:9f:82:
                    3f:8a:81:f3:4c:dc:c4:ad:19:e6:6d:a0:0d:18:d7:
                    c6:cf:64:3d:9e:2b:8b:d0:45:60:0f:f8:44:e6:ae:
                    c6:61:16:c0:ba:23:29:c5:e6:c3:ba:21:f9:44:a2:
                    80:8b:b9:e6:73:43:66:c6:dc:bf:c0:83:be:65:8d:
                    b5:70:ec:49:2e:ea:d5:28:b0:8d:2f:df:48:1b:ee:
                    97:ce:0a:7d:06:a3:38:8b:be:4e:66:3c:1e:b5:8d:
                    ab:cb:39:16:1c:54:e4:73:11:ff:f4:00:3c:2e:b2:
                    5c:d8:56:08:6b:71:83:9e:2a:87:9d:c5:ad:74:62:
                    e3:fa:c5:ab:fb:74:f8:63:b9:b0:b4:81:db:af:f1:
                    44:72:ed:1b:64:3f:89:bb:5e:d0:01:bf:d0:7c:2f:
                    3f:d1:c4:3a:6f:57:ac:23:92:e7:19:c6:8f:62:50:
                    96:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F9:0C:03:0B:7E:AF:45:C3:C5:89:12:21:02:96:84:C3:9C:65:83:8C
            X509v3 Authority Key Identifier:
                keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/45440202145811F0A9CD1C52C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.98.192.0/24
                  103.179.41.0/24
                  103.184.106.0/23

    Signature Algorithm: sha256WithRSAEncryption
         6b:89:67:62:d9:3a:e9:11:6f:fa:ba:fd:eb:f9:e5:b5:10:16:
         9c:6e:37:b7:c1:0f:bd:91:a0:75:89:81:96:c6:19:d2:85:41:
         9e:d9:b8:b2:06:a0:0a:91:e9:25:82:28:f8:2a:44:f5:dd:df:
         51:a7:e2:82:b4:5c:8d:ea:e2:b1:10:1b:af:96:f2:8c:47:c1:
         e7:7a:a8:95:1c:05:df:78:1d:5f:7f:ba:eb:59:ba:a9:ae:2c:
         29:66:d4:3a:b8:9e:99:5e:0a:1b:7f:c4:0e:d8:35:cf:70:8f:
         f7:ac:74:26:d3:68:b8:b1:f4:97:ad:e4:55:09:3b:cf:b8:ea:
         47:49:58:65:9a:ee:e9:a6:20:09:38:8f:5b:46:e3:a2:0b:0a:
         63:c8:a4:b4:3f:f1:db:16:2b:1d:87:f3:02:40:9f:1f:00:03:
         57:d1:b7:29:37:ae:02:3b:50:d3:80:20:b0:55:de:ed:f0:ce:
         d1:47:e5:95:7c:5b:00:94:3e:41:11:08:ec:be:c4:bf:9b:96:
         e5:c6:e2:c9:b6:ea:48:ff:ff:80:23:ca:8b:f8:c1:8b:0d:48:
         d3:8e:3b:1a:d6:4f:dc:61:8b:63:3f:2d:13:26:78:ed:23:46:
         85:b4:ec:c5:4a:9a:62:91:76:84:83:7c:cd:08:99:db:f3:9b:
         15:89:e8:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 16 02:32:29 2025 by rpki-client