Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/55F5D8044DAB11ECA32B1C1EC4F9AE02.roa
File:                     55F5D8044DAB11ECA32B1C1EC4F9AE02.roa (raw, json)
Hash identifier:          Y5P88IdKvyiPijsE37UoPQAfmsqX1p3lfZIPSaDqiSA=
Subject key identifier:   EB:DA:DE:7F:49:FF:36:4E:A9:47:92:40:65:37:80:71:69:1E:19:C5
Certificate issuer:       /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Certificate serial:       B46D
Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/55F5D8044DAB11ECA32B1C1EC4F9AE02.roa
Signing time:             Thu 08 May 2025 16:09:01 +0000
ROA not before:           Thu 08 May 2025 16:09:01 +0000
ROA not after:            Wed 01 Jul 2026 00:00:00 +0000
asID:                     137122
IP address blocks:        103.110.240.0/22 maxlen: 24
                          2400:a820::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
                          rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 21 May 2025 15:25:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 46189 (0xb46d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918EDB2, serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
        Validity
            Not Before: May  8 16:09:01 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=681cd71d-f389
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:09:e7:50:5b:33:b5:f8:ca:8e:08:15:7c:b4:
                    49:75:45:40:ff:0c:7a:a7:4e:12:42:7e:fc:ac:5a:
                    cf:97:23:6f:27:ff:2c:ce:aa:04:ed:b5:4a:1a:ce:
                    94:d4:1b:e6:c8:0c:6a:90:ac:cb:d1:c3:c1:15:f2:
                    b7:9e:79:cc:e5:8b:b3:95:21:06:2d:92:38:67:88:
                    cf:a9:11:70:a2:5b:a3:8d:48:69:9f:b7:bb:5f:46:
                    3d:28:1b:fa:9e:bd:0e:46:65:84:4a:38:4a:44:28:
                    09:9d:34:0d:a1:e7:89:77:52:96:96:9f:ed:b7:04:
                    e9:d3:b9:25:67:e0:71:93:93:47:f4:e5:fc:3e:9f:
                    3f:0b:61:2c:43:54:6d:2c:a7:b2:49:3f:1a:74:1f:
                    57:b8:bb:f9:11:e7:bc:3e:84:fc:31:44:67:04:60:
                    c1:d8:bf:0a:88:f3:73:70:85:c5:94:9d:2b:6a:11:
                    93:c8:b0:20:93:1b:ec:6a:73:c4:2c:60:09:3e:7d:
                    34:06:45:70:8a:e3:74:14:4f:b9:a8:18:9d:f0:8e:
                    f7:39:ae:d4:95:22:dd:6d:06:ae:ad:ee:8b:bb:bd:
                    c9:d9:79:35:18:e6:e2:84:e9:31:65:14:7a:99:9c:
                    ff:5c:d3:b1:1b:22:f3:39:54:bc:ee:96:ba:15:f5:
                    bf:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EB:DA:DE:7F:49:FF:36:4E:A9:47:92:40:65:37:80:71:69:1E:19:C5
            X509v3 Authority Key Identifier:
                keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/55F5D8044DAB11ECA32B1C1EC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.110.240.0/22
                IPv6:
                  2400:a820::/32

    Signature Algorithm: sha256WithRSAEncryption
         50:7f:05:a5:76:66:cf:f9:f7:12:c6:39:66:6d:7e:86:10:16:
         89:ee:8f:d3:1d:a9:b2:7e:9d:e0:d5:1c:1d:18:53:21:1a:18:
         cf:b9:a4:06:75:39:ec:c8:4e:71:3b:20:70:15:39:cf:c2:b2:
         ca:24:2e:3e:ad:4d:8a:ac:0b:08:df:9b:22:f1:03:98:04:f8:
         1e:92:1b:a0:1e:91:d9:fc:5b:7e:2c:8b:41:b1:e9:22:fd:6d:
         ab:08:4f:4f:b1:9b:0c:5b:dd:84:b0:cf:46:4b:a9:51:c9:09:
         79:96:38:d0:d1:e3:7f:e4:ca:ec:d6:f5:1b:fb:de:49:80:c0:
         ad:12:1b:c4:74:a2:22:96:e8:db:51:78:f8:77:30:46:1d:bb:
         78:ab:56:db:54:45:71:44:cc:7f:a8:8f:c0:f5:6b:73:0a:c5:
         47:9f:fb:b2:c8:a1:0e:12:92:79:9b:b1:7b:a8:1c:d8:3d:a3:
         0d:58:ec:c9:31:4d:7c:bb:d7:ca:74:af:10:cc:5f:05:17:dd:
         1a:87:92:75:dc:ac:ff:bd:f1:69:16:8a:40:56:b1:4b:bf:c2:
         27:9f:9c:4b:07:9d:f7:26:1c:e4:d7:cd:9d:c5:64:92:04:c3:
         69:ef:97:8b:a2:63:ae:b4:15:4c:e8:62:bd:2f:b7:77:ba:cd:
         ec:e4:fb:85
-----BEGIN CERTIFICATE-----
MIIFgTCCBGmgAwIBAgIDALRtMA0GCSqGSIb3DQEBCwUAMEYxETAPBgNVBAMTCEE5
MThFREIyMTEwLwYDVQQFEygyOTZFREI2NEYzQUY2RTlEOTgwOTMyRTgxNkY5NTk4
M0UzQUJDODIzMB4XDTI1MDUwODE2MDkwMVoXDTI2MDcwMTAwMDAwMFowGDEWMBQG
A1UEAxMNNjgxY2Q3MWQtZjM4OTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBALwJ51BbM7X4yo4IFXy0SXVFQP8MeqdOEkJ+/Kxaz5cjbyf/LM6qBO21ShrO
lNQb5sgMapCsy9HDwRXyt555zOWLs5UhBi2SOGeIz6kRcKJbo41IaZ+3u19GPSgb
+p69DkZlhEo4SkQoCZ00DaHniXdSlpaf7bcE6dO5JWfgcZOTR/Tl/D6fPwthLENU
bSynskk/GnQfV7i7+RHnvD6E/DFEZwRgwdi/Cojzc3CFxZSdK2oRk8iwIJMb7Gpz
xCxgCT59NAZFcIrjdBRPuagYnfCO9zmu1JUi3W0Grq3ui7u9ydl5NRjm4oTpMWUU
epmc/1zTsRsi8zlUvO6WuhX1vwcCAwEAAaOCAqQwggKgMB0GA1UdDgQWBBTr2t5/
Sf82TqlHkkBlN4BxaR4ZxTAfBgNVHSMEGDAWgBQpbttk869unZgJMugW+VmD46vI
IzAOBgNVHQ8BAf8EBAMCB4AwgYMGA1UdHwR8MHoweKB2oHSGcnJzeW5jOi8vcnBr
aS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkxOEVEQjIvMkE0M0UzMEM3
MEU5MTFFMkIzNkQ0QjZCMjk3OUJCMjAvS1c3YlpQT3ZicDJZQ1RMb0Z2bFpnLU9y
eUNNLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBr
aS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3
MkZEMUZGMi9LVzdiWlBPdmJwMllDVExvRnZsWmctT3J5Q00uY2VyMEoGA1UdIAEB
/wRAMD4wPAYIKwYBBQUHDgIwMDAuBggrBgEFBQcCARYiaHR0cHM6Ly93d3cuYXBu
aWMubmV0L1JQS0kvQ1BTLnBkZjCBywYIKwYBBQUHAQsEgb4wgbswgYMGCCsGAQUF
BzALhndyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5
MThFREIyLzJBNDNFMzBDNzBFOTExRTJCMzZENEI2QjI5NzlCQjIwLzU1RjVEODA0
NERBQjExRUNBMzJCMUMxRUM0RjlBRTAyLnJvYTAzBggrBgEFBQcwDYYnaHR0cHM6
Ly9ycmRwLmFwbmljLm5ldC9ub3RpZmljYXRpb24ueG1sMC4GCCsGAQUFBwEHAQH/
BB8wHTAMBAIAATAGAwQCZ27wMA0EAgACMAcDBQAkAKggMA0GCSqGSIb3DQEBCwUA
A4IBAQBQfwWldmbP+fcSxjlmbX6GEBaJ7o/THamyfp3g1RwdGFMhGhjPuaQGdTns
yE5xOyBwFTnPwrLKJC4+rU2KrAsI35si8QOYBPgekhugHpHZ/Ft+LItBseki/W2r
CE9PsZsMW92EsM9GS6lRyQl5ljjQ0eN/5Mrs1vUb+95JgMCtEhvEdKIilujbUXj4
dzBGHbt4q1bbVEVxRMx/qI/A9WtzCsVHn/uyyKEOEpJ5m7F7qBzYPaMNWOzJMU18
u9fKdK8QzF8FF90ah5J13Kz/vfFpFopAVrFLv8Inn5xLB533Jhzk182dxWSSBMNp
75eLomOutBVM6GK9L7d3us3s5PuF
-----END CERTIFICATE-----
Generated at Wed May 14 21:08:36 2025 by rpki-client