Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/5B7030CE8AE611EF8F3B4523C4F9AE02.roa
File:                     5B7030CE8AE611EF8F3B4523C4F9AE02.roa (raw, json)
Hash identifier:          b+Y/N0JIZnLRlPhdxSeU80w9FnMzLSE1xYikBhvw/p8=
Subject key identifier:   3C:83:D1:E7:60:AE:34:31:CC:43:C8:9E:F1:DB:2D:0E:6D:5A:10:FB
Certificate issuer:       /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Certificate serial:       B426
Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/5B7030CE8AE611EF8F3B4523C4F9AE02.roa
Signing time:             Thu 08 May 2025 16:07:56 +0000
ROA not before:           Thu 08 May 2025 16:07:56 +0000
ROA not after:            Wed 01 Jul 2026 00:00:00 +0000
asID:                     136680
IP address blocks:        103.91.48.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
                          rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 20 May 2025 13:22:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 46118 (0xb426)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918EDB2, serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
        Validity
            Not Before: May  8 16:07:56 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=681cd6dc-a11d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:15:2f:cb:72:96:ca:14:57:28:09:30:9f:48:
                    ef:81:8d:c5:1b:3e:4e:4c:ca:9a:86:df:cd:35:83:
                    bc:fe:c2:67:6d:30:00:66:88:24:23:c6:ff:74:a5:
                    a3:d0:46:19:ab:b0:35:d4:a2:5a:89:d4:b5:c9:18:
                    c5:e0:26:19:fc:65:3c:a3:dc:db:e1:69:00:cb:71:
                    5c:7c:80:ed:82:20:1e:b3:07:cc:65:a4:11:c6:a5:
                    b6:37:b9:b7:52:d7:90:ca:7a:40:e6:d6:80:03:33:
                    c0:45:3f:6d:31:be:89:10:10:c1:01:72:6d:ba:5f:
                    ac:b7:4e:de:85:f6:d5:f1:cc:29:f7:3f:af:fd:79:
                    90:ab:54:9c:47:8e:b7:d5:40:21:7e:27:42:17:00:
                    58:96:52:f7:9e:e9:23:20:4f:2b:b1:3f:7d:01:9f:
                    89:95:e9:1e:b9:5a:6c:aa:16:64:12:85:0e:29:71:
                    45:27:d1:1d:50:37:fa:89:a4:db:93:8e:26:f1:4a:
                    15:f1:9e:11:26:e9:95:bd:81:1a:90:d0:f0:8b:5a:
                    1c:3d:46:e9:89:d6:b6:b6:57:53:44:2a:64:37:d6:
                    5e:83:0c:58:67:07:6b:68:a6:04:b1:c3:f2:f6:b6:
                    d1:17:3a:b3:6e:99:2b:11:62:44:9c:db:af:3f:7d:
                    5b:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3C:83:D1:E7:60:AE:34:31:CC:43:C8:9E:F1:DB:2D:0E:6D:5A:10:FB
            X509v3 Authority Key Identifier:
                keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/5B7030CE8AE611EF8F3B4523C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.91.48.0/22

    Signature Algorithm: sha256WithRSAEncryption
         97:0b:fc:36:54:d7:ea:23:9d:f9:88:c4:95:39:92:6d:0c:7c:
         a2:1a:5c:6c:57:b7:cf:0c:e7:5c:0f:dc:70:e2:81:cd:9e:cf:
         73:8e:1f:2e:a2:4e:11:2c:59:aa:39:70:b4:8b:b6:93:81:cf:
         35:ff:5d:38:61:22:3e:fc:f8:d1:84:f9:e4:28:49:40:6b:5e:
         e6:ca:80:a2:8b:b2:57:8c:e0:10:ac:87:07:b8:f8:e6:58:9d:
         75:98:3d:af:f1:3e:ed:f1:38:05:e2:c4:c1:94:2d:a9:9f:65:
         9d:87:91:ca:24:19:c4:19:4e:77:59:a4:c4:2f:b2:61:4f:17:
         3f:cb:7e:aa:e7:11:0e:20:9e:bb:6a:71:e2:e3:d0:f3:b5:27:
         26:d0:f1:09:c2:d7:ab:a9:d6:ad:75:ce:4f:1f:dd:3d:eb:cb:
         a0:eb:38:78:54:a7:db:c6:d3:72:ab:3e:08:d5:71:b8:e1:54:
         cb:97:ca:e1:89:b0:d3:c8:8d:3d:e4:b3:23:92:66:b5:41:aa:
         c8:1c:01:f1:69:10:18:d7:e8:f6:2a:da:32:ff:64:86:9a:6b:
         01:ad:5b:77:5b:49:1c:54:bd:1e:b2:83:12:66:86:fa:55:bc:
         3b:38:da:6e:85:10:33:9b:14:98:22:c9:46:14:75:9f:fc:ef:
         1a:54:91:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 13 19:41:29 2025 by rpki-client