Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/55537C467CDA11EB8F396F36C4F9AE02.roa
File:                     55537C467CDA11EB8F396F36C4F9AE02.roa (raw, json)
Hash identifier:          3VsbRVZW5hsyuONfwQAvH4M1VvSoQAbtgmIBpPdL6A0=
Subject key identifier:   9A:C4:69:34:0C:24:64:79:4C:59:ED:A0:9A:16:82:82:91:98:1E:F2
Certificate issuer:       /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Certificate serial:       B688
Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/55537C467CDA11EB8F396F36C4F9AE02.roa
Signing time:             Thu 08 May 2025 16:17:16 +0000
ROA not before:           Thu 08 May 2025 16:17:16 +0000
ROA not after:            Wed 01 Jul 2026 00:00:00 +0000
asID:                     141570
IP address blocks:        103.163.66.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
                          rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 19 May 2025 18:54:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 46728 (0xb688)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918EDB2, serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
        Validity
            Not Before: May  8 16:17:16 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=681cd90b-8391
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:3d:f1:97:42:d5:a8:19:d8:58:7c:0d:f6:7c:
                    ae:9c:d9:e3:8d:c2:80:e4:d0:5f:e3:12:79:ea:4a:
                    c8:7c:0d:7d:4b:58:ae:c6:98:ad:8c:08:77:9f:2f:
                    71:56:50:98:5c:f5:40:1f:3b:a3:84:aa:b9:c0:cf:
                    02:65:44:51:b9:e5:cc:c1:a5:c6:34:f1:01:92:a0:
                    94:a0:eb:e0:db:09:bb:cb:dc:a2:5b:bf:f9:52:73:
                    73:10:98:3e:6d:94:2d:25:69:fa:ee:97:62:8e:9c:
                    38:b5:b8:74:49:e1:1c:a9:33:7a:48:82:48:79:6d:
                    23:a0:da:67:22:c5:5a:9c:0a:69:06:99:83:c5:6a:
                    06:89:bb:52:3b:fb:fe:7c:a2:3c:e9:80:97:14:6a:
                    f1:00:bb:8d:e8:f9:7c:78:c4:7a:de:f1:b2:84:21:
                    2f:b6:6f:59:eb:70:88:ea:f2:19:74:6b:d6:0c:05:
                    49:ef:8a:b3:68:bd:a4:6c:41:58:d1:17:41:61:c0:
                    ac:85:6d:34:1b:87:3a:03:1a:30:1e:c9:d7:8c:5b:
                    af:1a:98:53:3f:51:78:6c:a4:c5:14:29:29:fc:96:
                    1b:35:9e:5b:3a:3a:5d:f1:61:e4:32:9d:92:43:d4:
                    c3:3e:d9:0b:e9:46:6e:11:cd:aa:dc:29:4a:11:fa:
                    e8:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9A:C4:69:34:0C:24:64:79:4C:59:ED:A0:9A:16:82:82:91:98:1E:F2
            X509v3 Authority Key Identifier:
                keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/55537C467CDA11EB8F396F36C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.163.66.0/23

    Signature Algorithm: sha256WithRSAEncryption
         a2:a5:c8:e1:91:d9:f7:ee:e5:12:3c:8f:e0:8d:5c:e3:e6:1e:
         ac:b5:d1:03:d3:77:d6:f0:6c:52:3f:9f:e4:69:6c:a1:01:28:
         da:2a:b3:ce:85:74:fb:7e:53:4d:80:b2:8b:49:36:27:5b:4a:
         99:52:71:92:65:29:70:c7:3a:dd:be:b3:cb:c1:34:95:49:f3:
         51:a6:eb:65:4f:df:b7:f4:08:71:60:61:d0:b6:93:40:ff:bd:
         bf:d9:fb:70:80:0c:dd:31:62:02:c4:c1:5a:de:38:5f:3e:9d:
         d9:82:b1:51:e4:03:60:62:9a:6f:90:d8:40:b1:f8:38:43:c9:
         e1:82:c3:8c:72:16:ea:53:77:65:f3:6a:3f:24:af:53:cb:5d:
         9e:b1:37:fd:1c:c2:24:43:39:97:ed:a8:fa:c9:49:46:dd:2f:
         2d:e2:c3:a1:ca:f9:52:84:35:47:c8:61:19:54:37:8d:fb:98:
         8c:ea:48:f2:be:a7:b8:9f:7a:e4:47:6c:83:57:1e:b1:03:04:
         ba:bb:e3:18:d1:4d:c4:d3:f9:06:8b:03:ba:15:71:7c:02:65:
         78:b7:48:52:d4:b7:4f:cf:96:c2:78:b5:f7:59:72:2e:38:77:
         b2:39:5f:62:66:b0:cc:b1:b6:85:8a:18:63:e1:ce:2d:1f:24:
         de:de:5c:0b
-----BEGIN CERTIFICATE-----
MIIFcjCCBFqgAwIBAgIDALaIMA0GCSqGSIb3DQEBCwUAMEYxETAPBgNVBAMTCEE5
MThFREIyMTEwLwYDVQQFEygyOTZFREI2NEYzQUY2RTlEOTgwOTMyRTgxNkY5NTk4
M0UzQUJDODIzMB4XDTI1MDUwODE2MTcxNloXDTI2MDcwMTAwMDAwMFowGDEWMBQG
A1UEAxMNNjgxY2Q5MGItODM5MTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBAME98ZdC1agZ2Fh8DfZ8rpzZ443CgOTQX+MSeepKyHwNfUtYrsaYrYwId58v
cVZQmFz1QB87o4SqucDPAmVEUbnlzMGlxjTxAZKglKDr4NsJu8vcolu/+VJzcxCY
Pm2ULSVp+u6XYo6cOLW4dEnhHKkzekiCSHltI6DaZyLFWpwKaQaZg8VqBom7Ujv7
/nyiPOmAlxRq8QC7jej5fHjEet7xsoQhL7ZvWetwiOryGXRr1gwFSe+Ks2i9pGxB
WNEXQWHArIVtNBuHOgMaMB7J14xbrxqYUz9ReGykxRQpKfyWGzWeWzo6XfFh5DKd
kkPUwz7ZC+lGbhHNqtwpShH66JkCAwEAAaOCApUwggKRMB0GA1UdDgQWBBSaxGk0
DCRkeUxZ7aCaFoKCkZge8jAfBgNVHSMEGDAWgBQpbttk869unZgJMugW+VmD46vI
IzAOBgNVHQ8BAf8EBAMCB4AwgYMGA1UdHwR8MHoweKB2oHSGcnJzeW5jOi8vcnBr
aS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkxOEVEQjIvMkE0M0UzMEM3
MEU5MTFFMkIzNkQ0QjZCMjk3OUJCMjAvS1c3YlpQT3ZicDJZQ1RMb0Z2bFpnLU9y
eUNNLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBr
aS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3
MkZEMUZGMi9LVzdiWlBPdmJwMllDVExvRnZsWmctT3J5Q00uY2VyMEoGA1UdIAEB
/wRAMD4wPAYIKwYBBQUHDgIwMDAuBggrBgEFBQcCARYiaHR0cHM6Ly93d3cuYXBu
aWMubmV0L1JQS0kvQ1BTLnBkZjCBywYIKwYBBQUHAQsEgb4wgbswgYMGCCsGAQUF
BzALhndyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5
MThFREIyLzJBNDNFMzBDNzBFOTExRTJCMzZENEI2QjI5NzlCQjIwLzU1NTM3QzQ2
N0NEQTExRUI4RjM5NkYzNkM0RjlBRTAyLnJvYTAzBggrBgEFBQcwDYYnaHR0cHM6
Ly9ycmRwLmFwbmljLm5ldC9ub3RpZmljYXRpb24ueG1sMB8GCCsGAQUFBwEHAQH/
BBAwDjAMBAIAATAGAwQBZ6NCMA0GCSqGSIb3DQEBCwUAA4IBAQCipcjhkdn37uUS
PI/gjVzj5h6stdED03fW8GxSP5/kaWyhASjaKrPOhXT7flNNgLKLSTYnW0qZUnGS
ZSlwxzrdvrPLwTSVSfNRputlT9+39AhxYGHQtpNA/72/2ftwgAzdMWICxMFa3jhf
Pp3ZgrFR5ANgYppvkNhAsfg4Q8nhgsOMchbqU3dl82o/JK9Ty12esTf9HMIkQzmX
7aj6yUlG3S8t4sOhyvlShDVHyGEZVDeN+5iM6kjyvqe4n3rkR2yDVx6xAwS6u+MY
0U3E0/kGiwO6FXF8AmV4t0hS1LdPz5bCeLX3WXIuOHeyOV9iZrDMsbaFihhj4c4t
HyTe3lwL
-----END CERTIFICATE-----
Generated at Tue May 13 00:57:47 2025 by rpki-client