Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/71389AA6BDCF11EA8755D90DC4F9AE02.roa
File:                     71389AA6BDCF11EA8755D90DC4F9AE02.roa (raw, json)
Hash identifier:          uZPWXafREfhpHZiTk08TZrMeoRJ5/KZH/8N5/lnRng0=
Subject key identifier:   C9:88:47:02:E1:C5:47:7E:8F:BB:62:5F:1D:A0:C9:4B:EC:05:39:26
Certificate issuer:       /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Certificate serial:       BA6F
Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/71389AA6BDCF11EA8755D90DC4F9AE02.roa
Signing time:             Thu 08 May 2025 16:32:21 +0000
ROA not before:           Thu 08 May 2025 16:32:21 +0000
ROA not after:            Wed 01 Jul 2026 00:00:00 +0000
asID:                     59195
IP address blocks:        103.142.166.0/24 maxlen: 24
                          2001:df5:1180::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
                          rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 19 May 2025 18:54:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 47727 (0xba6f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918EDB2, serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
        Validity
            Not Before: May  8 16:32:21 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=681cdc94-b754
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:86:bb:9b:dc:d8:c6:92:2e:11:f0:9f:06:85:
                    26:74:59:d4:17:57:96:1c:59:5b:39:f9:67:1d:37:
                    ce:a2:16:50:d6:dd:e1:46:e2:f5:0b:80:58:3c:bd:
                    49:33:a1:47:63:84:59:f7:cf:86:89:31:b1:33:3b:
                    a6:f8:94:29:b5:15:15:b4:f9:ff:93:35:45:bc:87:
                    93:b9:e7:21:7b:61:53:ba:fc:1e:4c:b5:af:7f:cf:
                    2e:b3:e2:5a:a3:de:3e:af:8f:57:eb:ef:ae:4d:ac:
                    4c:fc:85:6d:ff:b9:ba:0a:83:3a:2a:fb:45:a1:4f:
                    ad:80:53:d5:e1:0a:29:a6:3f:c8:bf:a7:48:2d:6c:
                    74:92:fe:04:29:cc:90:5c:1a:f6:60:91:27:81:71:
                    2c:37:c5:84:7d:f7:0e:a5:db:a6:43:30:63:33:20:
                    b5:98:e5:10:d5:e2:69:95:ac:97:15:d9:ce:d6:da:
                    d4:a9:44:f2:23:28:c9:2f:19:37:dd:5f:88:f8:98:
                    d7:58:79:81:9e:f1:21:54:1d:ef:dc:c5:12:64:fc:
                    5f:c7:d7:28:6f:72:4b:cf:53:34:ca:61:5f:5b:c3:
                    d3:f1:e4:ac:70:b3:26:ff:84:9a:e2:a7:fb:1b:b2:
                    80:22:b2:6d:2d:11:f9:64:be:5d:fa:78:c9:82:a2:
                    31:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C9:88:47:02:E1:C5:47:7E:8F:BB:62:5F:1D:A0:C9:4B:EC:05:39:26
            X509v3 Authority Key Identifier:
                keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/71389AA6BDCF11EA8755D90DC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.142.166.0/24
                IPv6:
                  2001:df5:1180::/48

    Signature Algorithm: sha256WithRSAEncryption
         17:9f:48:99:83:cd:c6:29:0b:12:8d:7c:8f:95:46:89:f4:2b:
         d5:40:6b:69:d9:30:c4:fd:86:42:59:36:99:2e:c1:6f:60:9f:
         a9:54:27:80:37:da:e2:1f:85:82:55:b5:bd:e6:13:dc:22:80:
         26:b4:ac:60:32:6a:aa:80:60:6f:91:ef:d6:b8:85:78:ef:14:
         9f:28:b3:fd:ae:2f:19:1e:dc:1f:58:03:7c:f3:59:29:96:3d:
         76:da:0a:1a:ab:23:31:3f:75:0d:0c:4d:03:98:c1:bf:cc:b0:
         7f:3b:c7:cb:67:71:d6:b3:93:79:c3:65:0f:3b:83:d2:3e:37:
         e0:71:ca:88:a3:b0:ba:a9:f8:94:25:1f:af:88:01:7b:af:c4:
         7d:6d:c2:eb:18:85:10:36:c7:17:21:b4:92:9a:25:21:e7:f9:
         43:f3:08:0f:81:50:49:b3:23:7a:99:df:4a:48:88:12:6b:13:
         61:d0:6a:bf:2b:9e:dd:8a:d4:14:4e:c2:89:12:40:05:e5:0d:
         42:0e:d8:fe:4d:7a:63:f5:ee:46:fb:c6:8b:2a:9e:61:8e:37:
         dc:0f:6b:fc:c7:bf:d7:78:b9:b5:7c:2c:e5:cf:81:3b:3d:9a:
         f8:6f:cc:ed:d3:f5:1b:9c:ce:57:d0:5c:f4:12:eb:10:0b:b8:
         45:72:07:5e
-----BEGIN CERTIFICATE-----
MIIFgzCCBGugAwIBAgIDALpvMA0GCSqGSIb3DQEBCwUAMEYxETAPBgNVBAMTCEE5
MThFREIyMTEwLwYDVQQFEygyOTZFREI2NEYzQUY2RTlEOTgwOTMyRTgxNkY5NTk4
M0UzQUJDODIzMB4XDTI1MDUwODE2MzIyMVoXDTI2MDcwMTAwMDAwMFowGDEWMBQG
A1UEAxMNNjgxY2RjOTQtYjc1NDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBAMGGu5vc2MaSLhHwnwaFJnRZ1BdXlhxZWzn5Zx03zqIWUNbd4Ubi9QuAWDy9
STOhR2OEWffPhokxsTM7pviUKbUVFbT5/5M1RbyHk7nnIXthU7r8Hky1r3/PLrPi
WqPePq+PV+vvrk2sTPyFbf+5ugqDOir7RaFPrYBT1eEKKaY/yL+nSC1sdJL+BCnM
kFwa9mCRJ4FxLDfFhH33DqXbpkMwYzMgtZjlENXiaZWslxXZztba1KlE8iMoyS8Z
N91fiPiY11h5gZ7xIVQd79zFEmT8X8fXKG9yS89TNMphX1vD0/HkrHCzJv+EmuKn
+xuygCKybS0R+WS+Xfp4yYKiMbMCAwEAAaOCAqYwggKiMB0GA1UdDgQWBBTJiEcC
4cVHfo+7Yl8doMlL7AU5JjAfBgNVHSMEGDAWgBQpbttk869unZgJMugW+VmD46vI
IzAOBgNVHQ8BAf8EBAMCB4AwgYMGA1UdHwR8MHoweKB2oHSGcnJzeW5jOi8vcnBr
aS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkxOEVEQjIvMkE0M0UzMEM3
MEU5MTFFMkIzNkQ0QjZCMjk3OUJCMjAvS1c3YlpQT3ZicDJZQ1RMb0Z2bFpnLU9y
eUNNLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBr
aS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3
MkZEMUZGMi9LVzdiWlBPdmJwMllDVExvRnZsWmctT3J5Q00uY2VyMEoGA1UdIAEB
/wRAMD4wPAYIKwYBBQUHDgIwMDAuBggrBgEFBQcCARYiaHR0cHM6Ly93d3cuYXBu
aWMubmV0L1JQS0kvQ1BTLnBkZjCBywYIKwYBBQUHAQsEgb4wgbswgYMGCCsGAQUF
BzALhndyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5
MThFREIyLzJBNDNFMzBDNzBFOTExRTJCMzZENEI2QjI5NzlCQjIwLzcxMzg5QUE2
QkRDRjExRUE4NzU1RDkwREM0RjlBRTAyLnJvYTAzBggrBgEFBQcwDYYnaHR0cHM6
Ly9ycmRwLmFwbmljLm5ldC9ub3RpZmljYXRpb24ueG1sMDAGCCsGAQUFBwEHAQH/
BCEwHzAMBAIAATAGAwQAZ46mMA8EAgACMAkDBwAgAQ31EYAwDQYJKoZIhvcNAQEL
BQADggEBABefSJmDzcYpCxKNfI+VRon0K9VAa2nZMMT9hkJZNpkuwW9gn6lUJ4A3
2uIfhYJVtb3mE9wigCa0rGAyaqqAYG+R79a4hXjvFJ8os/2uLxke3B9YA3zzWSmW
PXbaChqrIzE/dQ0MTQOYwb/MsH87x8tncdazk3nDZQ87g9I+N+BxyoijsLqp+JQl
H6+IAXuvxH1twusYhRA2xxchtJKaJSHn+UPzCA+BUEmzI3qZ30pIiBJrE2HQar8r
nt2K1BROwokSQAXlDUIO2P5NemP17kb7xosqnmGON9wPa/zHv9d4ubV8LOXPgTs9
mvhvzO3T9RuczlfQXPQS6xALuEVyB14=
-----END CERTIFICATE-----
Generated at Tue May 13 00:12:53 2025 by rpki-client