Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/50045AB2E51911EE829A120AC4F9AE02.roa
File:                     50045AB2E51911EE829A120AC4F9AE02.roa (raw, json)
Hash identifier:          fxWMYO+VnNlf5FYRbGZIXQGP4OLqblSBo4X3Z2CtNOU=
Subject key identifier:   A5:50:33:5D:5A:F9:6E:B3:96:25:ED:A1:12:68:A6:17:B9:24:00:B7
Certificate issuer:       /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Certificate serial:       B439
Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/50045AB2E51911EE829A120AC4F9AE02.roa
Signing time:             Thu 08 May 2025 16:08:15 +0000
ROA not before:           Thu 08 May 2025 16:08:15 +0000
ROA not after:            Wed 01 Jul 2026 00:00:00 +0000
asID:                     136703
IP address blocks:        103.160.172.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
                          rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 20 May 2025 13:22:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 46137 (0xb439)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918EDB2, serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
        Validity
            Not Before: May  8 16:08:15 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=681cd6ee-9011
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:df:91:fa:68:a5:3b:84:91:da:a1:42:b9:01:
                    46:1f:48:2f:c6:da:6e:a7:e1:64:8a:d6:8c:9a:3d:
                    0d:a3:22:17:57:f1:f5:ac:c6:6f:26:99:65:f3:47:
                    10:a8:de:c4:0c:45:67:67:aa:7e:f4:d2:87:a5:d7:
                    be:40:2c:89:53:71:37:fa:fe:f8:7e:d2:af:a2:51:
                    64:90:56:7a:11:e4:93:9c:d5:5f:75:cb:82:89:3c:
                    fe:03:88:db:8d:cf:85:6c:4f:b2:a0:af:fc:5a:35:
                    e4:3f:a8:9c:19:d9:88:88:cf:4f:f5:90:b5:ed:8f:
                    1a:af:31:33:30:fb:77:e0:df:d8:79:1b:cb:a4:97:
                    6a:73:72:da:2a:0a:e7:61:6b:53:24:8f:9c:f9:dc:
                    87:5d:a6:68:89:d0:82:10:39:47:43:b1:35:5b:f1:
                    83:0b:e5:ab:64:6f:8b:fa:a3:d8:85:7a:7f:ab:af:
                    8e:48:d2:c1:9a:08:ec:2a:0a:0e:ad:31:85:42:d9:
                    fc:67:22:01:bc:6b:a7:4b:ee:2b:8e:1a:ee:f2:ae:
                    e7:54:84:b4:10:58:78:d1:b3:b6:a8:9e:fd:16:5e:
                    01:be:5f:01:a2:09:32:45:f8:b7:22:b7:ca:62:3b:
                    93:78:e7:db:b7:0d:b5:2d:18:7a:ae:8b:f4:75:47:
                    fc:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A5:50:33:5D:5A:F9:6E:B3:96:25:ED:A1:12:68:A6:17:B9:24:00:B7
            X509v3 Authority Key Identifier:
                keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/50045AB2E51911EE829A120AC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.160.172.0/23

    Signature Algorithm: sha256WithRSAEncryption
         a0:92:e7:3d:b2:20:b1:3b:4e:f0:29:7b:da:56:20:20:45:2a:
         48:26:b2:6c:fc:62:ac:d7:b5:a3:12:87:6e:53:d6:16:68:d4:
         7b:cc:e9:76:21:29:e9:ee:41:f7:8f:3f:61:14:f7:4e:fb:34:
         dd:ca:28:0e:96:f8:f3:0e:76:bf:b8:a1:9c:47:1c:22:ee:b0:
         96:2e:06:b9:46:15:52:08:66:36:09:ce:06:3f:a9:51:f2:20:
         9d:8a:20:09:99:95:93:5e:ea:7c:b5:1f:bf:69:fd:16:2e:49:
         2b:f1:13:63:9b:aa:86:d6:59:70:d2:90:4c:b6:e7:a2:9f:89:
         c7:9d:4e:bb:e6:df:87:21:36:99:83:95:4e:4b:6f:23:c1:a0:
         28:ee:d2:09:0a:1c:eb:8b:48:58:e6:78:20:9b:cb:85:b9:c1:
         e8:fc:f4:5e:cc:47:d9:dd:44:2c:d2:10:e3:29:1d:aa:19:97:
         b1:b3:16:70:1f:02:07:9b:cf:e4:26:eb:91:27:d2:67:f5:46:
         46:4b:b4:68:b5:ae:1a:3f:1d:2e:b2:8a:ca:eb:cd:4c:1c:83:
         42:e1:fb:88:7c:4a:52:25:28:b8:61:6e:fe:fa:79:8a:80:41:
         1d:e9:c2:fc:ae:7c:45:5a:0f:1d:5b:a2:92:24:e4:0c:fa:a5:
         c6:97:f9:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 14 04:29:20 2025 by rpki-client