Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/5EFCCB1851A411EC86990F0EC4F9AE02.roa
File:                     5EFCCB1851A411EC86990F0EC4F9AE02.roa (raw, json)
Hash identifier:          Ep+60QFeZ46G26g074CpXu4+NPMO70M5V9FrsKLGi98=
Subject key identifier:   DA:C4:34:17:E6:ED:50:23:3D:26:85:E6:1A:E3:C5:5D:1E:13:F8:9B
Certificate issuer:       /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Certificate serial:       B76F
Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/5EFCCB1851A411EC86990F0EC4F9AE02.roa
Signing time:             Thu 08 May 2025 16:20:44 +0000
ROA not before:           Thu 08 May 2025 16:20:44 +0000
ROA not after:            Wed 01 Jul 2026 00:00:00 +0000
asID:                     147220
IP address blocks:        103.176.6.0/23 maxlen: 24
                          2401:7da0::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
                          rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 19 May 2025 18:54:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 46959 (0xb76f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918EDB2, serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
        Validity
            Not Before: May  8 16:20:44 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=681cd9dc-3a05
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:51:28:a7:72:40:64:f8:cd:45:ce:10:d4:7c:
                    fc:59:b3:f5:a3:b2:c4:30:0b:9e:2a:1b:0d:e7:ef:
                    b2:25:7d:d0:13:21:e2:a7:b5:51:64:1d:14:1c:8a:
                    80:90:c6:84:b2:dd:76:ac:19:7e:63:db:ca:29:0c:
                    3f:37:77:9f:30:92:9b:ea:58:d2:ac:8d:d1:f3:68:
                    44:7d:0e:14:56:b2:83:60:4d:82:05:fc:91:b3:9a:
                    fa:2b:93:40:0b:c2:3e:e8:1a:59:ea:83:d9:79:e6:
                    12:42:5a:81:b9:bf:4d:f7:4a:5a:4f:2d:e1:bb:48:
                    53:5d:8f:52:83:61:f3:78:0a:7b:ff:81:eb:48:6d:
                    38:94:89:a1:27:4c:17:f0:ae:1e:cb:00:6a:27:a2:
                    b4:2f:7d:d4:f9:1e:ff:d9:4d:3e:65:ce:4e:ba:62:
                    a4:3a:5a:7d:27:6a:38:c0:d4:2d:6a:eb:20:0f:00:
                    0d:95:65:15:c3:69:44:f7:3b:1f:02:a1:44:84:95:
                    2f:03:4a:97:c4:14:98:b6:8c:a4:04:17:7c:b2:ab:
                    d8:b6:63:03:ad:6c:29:2f:f2:e4:fc:16:c4:98:60:
                    d7:5f:86:67:c9:61:2e:7e:8b:1f:c3:06:90:55:1d:
                    06:10:7f:dd:d1:10:18:07:3b:62:72:70:66:2d:a7:
                    35:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DA:C4:34:17:E6:ED:50:23:3D:26:85:E6:1A:E3:C5:5D:1E:13:F8:9B
            X509v3 Authority Key Identifier:
                keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/5EFCCB1851A411EC86990F0EC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.176.6.0/23
                IPv6:
                  2401:7da0::/32

    Signature Algorithm: sha256WithRSAEncryption
         b4:13:82:42:5e:54:f4:70:72:fe:b0:5e:d2:77:1b:f4:d3:28:
         c4:ab:80:82:05:01:68:67:61:b8:80:6c:88:62:16:1d:96:04:
         b5:dc:b7:fd:61:82:2b:c0:83:db:30:46:ac:97:96:74:38:40:
         76:d5:b7:ff:51:dc:dc:fe:92:41:52:aa:f1:81:87:00:ff:36:
         09:e3:df:01:d0:02:91:48:44:ed:08:e4:10:e7:64:02:b6:25:
         90:42:73:37:c2:48:6a:7a:82:a8:fd:79:60:61:40:3f:ff:82:
         bc:15:b4:fb:0b:31:23:ed:82:90:8b:5d:ab:fd:13:e3:04:32:
         8c:b5:77:7a:9e:27:25:b6:bb:92:43:48:e3:d1:27:a9:09:34:
         de:0b:b4:fc:e5:2b:e7:df:86:dd:92:ac:2e:73:e6:10:d8:b2:
         88:67:8f:5a:70:62:d1:fe:c5:d2:ca:84:c9:a9:82:23:e7:6b:
         fd:a2:4f:de:4b:5d:51:fa:eb:42:4d:1e:9a:2d:d2:31:8c:16:
         ac:8b:cf:14:25:b7:c4:98:c9:e9:56:fd:d3:4c:65:26:4c:69:
         bf:05:30:06:57:59:97:c0:5a:b3:b2:09:58:a8:b0:fb:9d:19:
         f3:ec:b5:21:70:f1:22:e0:67:d2:82:fa:8a:a0:c5:d7:1c:3e:
         5b:8a:a9:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 13 02:02:50 2025 by rpki-client