Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/50078490210C11EC8EB11648C4F9AE02.roa
File:                     50078490210C11EC8EB11648C4F9AE02.roa (raw, json)
Hash identifier:          ie6gIDhmadkeX4RwDudTBTOWm7it/aY32fg++wxcHZ8=
Subject key identifier:   B6:23:6F:2E:46:43:88:22:7A:49:F5:38:02:CF:40:44:67:99:AF:F6
Certificate issuer:       /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Certificate serial:       B689
Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/50078490210C11EC8EB11648C4F9AE02.roa
Signing time:             Thu 08 May 2025 16:17:17 +0000
ROA not before:           Thu 08 May 2025 16:17:17 +0000
ROA not after:            Wed 01 Jul 2026 00:00:00 +0000
asID:                     141571
IP address blocks:        103.163.104.0/24 maxlen: 24
                          103.163.105.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
                          rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 20 May 2025 13:22:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 46729 (0xb689)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918EDB2, serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
        Validity
            Not Before: May  8 16:17:17 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=681cd90d-f105
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:a4:ac:b9:2f:4a:85:25:6c:6f:ab:cd:cf:49:
                    f0:18:e6:0c:26:57:ea:14:fb:0a:89:19:d8:d8:bc:
                    96:68:cd:1c:5e:dd:c8:9e:57:d5:e1:97:f8:63:45:
                    92:db:90:86:e9:f5:42:13:c1:c5:ea:a3:08:66:36:
                    d2:91:02:0f:65:31:9d:25:db:a1:5e:5f:75:14:ff:
                    14:20:66:e3:c9:c7:98:70:a1:be:4d:a1:98:53:8d:
                    58:a9:dd:e3:43:34:99:f4:c5:5a:2c:a1:28:15:09:
                    9f:a1:81:11:d3:e7:dd:86:51:68:e4:95:b6:4b:6a:
                    6e:b2:61:8b:3d:e6:10:f7:27:66:7c:13:dd:37:1e:
                    b2:44:72:99:a8:75:ea:07:27:44:62:0b:c1:d4:92:
                    68:07:9d:98:54:89:02:55:6c:56:50:b5:2a:f9:de:
                    a2:60:45:b9:6b:9c:e0:76:d1:4e:f8:c3:b7:e0:bd:
                    c2:29:1e:5f:8a:21:35:3e:47:7a:e5:57:ff:f8:0f:
                    91:0e:14:08:e9:aa:7a:bf:8a:5b:af:c8:72:c5:be:
                    58:17:0e:21:f1:90:9d:f6:5c:5b:f9:42:7b:90:14:
                    eb:ab:3d:c6:80:72:aa:aa:a0:1d:45:9b:b5:30:0f:
                    8a:30:ce:8d:91:86:86:47:75:85:e7:82:86:c4:e7:
                    6d:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B6:23:6F:2E:46:43:88:22:7A:49:F5:38:02:CF:40:44:67:99:AF:F6
            X509v3 Authority Key Identifier:
                keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/50078490210C11EC8EB11648C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.163.104.0/23

    Signature Algorithm: sha256WithRSAEncryption
         2d:b3:3d:8f:b6:9d:28:38:c4:97:a2:1c:92:7c:b4:95:bb:d6:
         6e:4e:50:7c:e2:c2:0a:36:6e:7d:3c:52:76:82:7e:ec:89:e4:
         b4:3a:bf:3f:8c:fd:f2:0a:85:13:ea:be:02:86:11:10:a4:15:
         f0:b2:0c:2a:ee:11:22:24:05:3c:e5:6e:53:6e:66:94:34:ce:
         8d:85:6d:57:d4:5e:7f:8f:73:97:68:18:54:60:b2:a8:2e:f5:
         bd:b1:82:27:0f:96:f4:0c:da:93:4f:85:52:13:cf:6f:0d:ad:
         01:55:a0:45:9e:a0:8a:10:dc:1b:ce:64:50:1f:3c:3b:65:b4:
         fd:b1:3b:44:7d:db:12:96:65:24:8b:3f:75:56:94:98:a9:5a:
         42:eb:04:22:ec:9d:90:4d:57:3a:f1:20:9a:50:7e:e8:4f:69:
         70:6a:1d:12:46:1c:88:dd:20:9c:9f:39:89:18:41:65:3d:2a:
         80:a2:d2:61:8e:8e:42:40:fc:f4:aa:71:60:33:f9:11:01:45:
         a6:31:26:4c:60:30:8d:ce:5c:76:22:a9:c2:6c:72:45:a6:66:
         1f:d6:40:c7:61:23:2f:c9:d2:21:f9:96:c1:f6:73:c3:7c:72:
         7a:ff:af:75:92:c4:4b:ab:45:24:11:46:9f:79:fa:5c:9c:0c:
         f7:2d:01:ad
-----BEGIN CERTIFICATE-----
MIIFcjCCBFqgAwIBAgIDALaJMA0GCSqGSIb3DQEBCwUAMEYxETAPBgNVBAMTCEE5
MThFREIyMTEwLwYDVQQFEygyOTZFREI2NEYzQUY2RTlEOTgwOTMyRTgxNkY5NTk4
M0UzQUJDODIzMB4XDTI1MDUwODE2MTcxN1oXDTI2MDcwMTAwMDAwMFowGDEWMBQG
A1UEAxMNNjgxY2Q5MGQtZjEwNTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBANakrLkvSoUlbG+rzc9J8BjmDCZX6hT7CokZ2Ni8lmjNHF7dyJ5X1eGX+GNF
ktuQhun1QhPBxeqjCGY20pECD2UxnSXboV5fdRT/FCBm48nHmHChvk2hmFONWKnd
40M0mfTFWiyhKBUJn6GBEdPn3YZRaOSVtktqbrJhiz3mEPcnZnwT3TceskRymah1
6gcnRGILwdSSaAedmFSJAlVsVlC1KvneomBFuWuc4HbRTvjDt+C9wikeX4ohNT5H
euVX//gPkQ4UCOmqer+KW6/IcsW+WBcOIfGQnfZcW/lCe5AU66s9xoByqqqgHUWb
tTAPijDOjZGGhkd1heeChsTnbYUCAwEAAaOCApUwggKRMB0GA1UdDgQWBBS2I28u
RkOIInpJ9TgCz0BEZ5mv9jAfBgNVHSMEGDAWgBQpbttk869unZgJMugW+VmD46vI
IzAOBgNVHQ8BAf8EBAMCB4AwgYMGA1UdHwR8MHoweKB2oHSGcnJzeW5jOi8vcnBr
aS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkxOEVEQjIvMkE0M0UzMEM3
MEU5MTFFMkIzNkQ0QjZCMjk3OUJCMjAvS1c3YlpQT3ZicDJZQ1RMb0Z2bFpnLU9y
eUNNLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBr
aS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3
MkZEMUZGMi9LVzdiWlBPdmJwMllDVExvRnZsWmctT3J5Q00uY2VyMEoGA1UdIAEB
/wRAMD4wPAYIKwYBBQUHDgIwMDAuBggrBgEFBQcCARYiaHR0cHM6Ly93d3cuYXBu
aWMubmV0L1JQS0kvQ1BTLnBkZjCBywYIKwYBBQUHAQsEgb4wgbswgYMGCCsGAQUF
BzALhndyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5
MThFREIyLzJBNDNFMzBDNzBFOTExRTJCMzZENEI2QjI5NzlCQjIwLzUwMDc4NDkw
MjEwQzExRUM4RUIxMTY0OEM0RjlBRTAyLnJvYTAzBggrBgEFBQcwDYYnaHR0cHM6
Ly9ycmRwLmFwbmljLm5ldC9ub3RpZmljYXRpb24ueG1sMB8GCCsGAQUFBwEHAQH/
BBAwDjAMBAIAATAGAwQBZ6NoMA0GCSqGSIb3DQEBCwUAA4IBAQAtsz2Ptp0oOMSX
ohySfLSVu9ZuTlB84sIKNm59PFJ2gn7sieS0Or8/jP3yCoUT6r4ChhEQpBXwsgwq
7hEiJAU85W5TbmaUNM6NhW1X1F5/j3OXaBhUYLKoLvW9sYInD5b0DNqTT4VSE89v
Da0BVaBFnqCKENwbzmRQHzw7ZbT9sTtEfdsSlmUkiz91VpSYqVpC6wQi7J2QTVc6
8SCaUH7oT2lwah0SRhyI3SCcnzmJGEFlPSqAotJhjo5CQPz0qnFgM/kRAUWmMSZM
YDCNzlx2IqnCbHJFpmYf1kDHYSMvydIh+ZbB9nPDfHJ6/691ksRLq0UkEUafefpc
nAz3LQGt
-----END CERTIFICATE-----
Generated at Tue May 13 19:31:31 2025 by rpki-client