Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/7B397BC0BDD311EA96E94420C4F9AE02.roa
File:                     7B397BC0BDD311EA96E94420C4F9AE02.roa (raw, json)
Hash identifier:          5G/aqcpXkTd6oMmHDFFkSY7Z7YRVyLoploWFKXmTs7M=
Subject key identifier:   CE:BC:F3:EA:E7:EA:B6:DB:3F:49:E7:2D:39:2B:4E:8F:0B:29:C5:25
Certificate issuer:       /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Certificate serial:       B20A
Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/7B397BC0BDD311EA96E94420C4F9AE02.roa
Signing time:             Thu 08 May 2025 15:59:36 +0000
ROA not before:           Thu 08 May 2025 15:59:36 +0000
ROA not after:            Wed 01 Jul 2026 00:00:00 +0000
asID:                     133722
IP address blocks:        103.49.244.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
                          rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 20 May 2025 13:22:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 45578 (0xb20a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918EDB2, serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
        Validity
            Not Before: May  8 15:59:36 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=681cd4e8-c3aa
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:1d:6d:55:e4:63:33:57:64:1e:5b:c9:ea:a8:
                    e3:25:8b:ba:25:d2:e5:13:59:fc:bb:28:e2:5e:36:
                    5b:2e:9d:e1:6a:aa:0c:5b:1d:fe:44:2e:5c:00:f6:
                    93:b5:bf:f6:84:79:18:37:97:38:7b:b7:1e:37:f3:
                    d7:86:93:2a:65:55:83:51:07:b6:ca:6b:0a:3a:79:
                    aa:91:58:32:9c:17:38:79:67:35:c2:90:f3:db:cf:
                    0a:44:e3:eb:45:98:f4:63:90:39:76:d0:ec:fe:03:
                    8a:b3:ce:b3:a8:d0:d1:08:dd:77:29:69:54:65:83:
                    06:b2:89:a7:4f:b4:23:e1:6f:98:b8:f3:f4:3d:37:
                    17:6d:fa:c7:44:01:02:2c:d9:f7:cb:55:c3:9d:f5:
                    92:66:c3:cc:17:8f:ef:ab:9c:2b:26:25:71:84:42:
                    17:ca:68:cf:ec:a2:c4:bf:88:e0:d6:25:bc:ef:47:
                    54:3b:73:01:6d:32:a0:6a:4f:e7:06:74:a8:40:8e:
                    a5:3c:1c:51:49:c6:9b:8f:f4:dc:cd:34:79:e1:df:
                    e7:e5:a1:f7:08:15:ed:91:fc:e9:89:a5:bb:c1:99:
                    bb:c5:46:d3:5b:7c:8a:34:f0:c1:86:8c:c1:9c:54:
                    fe:2b:f0:9f:2e:44:6a:10:4a:26:8e:64:f9:77:ab:
                    bd:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CE:BC:F3:EA:E7:EA:B6:DB:3F:49:E7:2D:39:2B:4E:8F:0B:29:C5:25
            X509v3 Authority Key Identifier:
                keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/7B397BC0BDD311EA96E94420C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.49.244.0/23

    Signature Algorithm: sha256WithRSAEncryption
         51:ec:bb:2f:45:65:db:86:f4:ad:e8:b9:7f:e5:29:76:a1:74:
         54:11:32:9a:0a:13:48:8b:41:cb:7c:19:cb:66:ca:30:81:d7:
         e6:61:84:1d:80:ec:a6:67:37:e9:82:77:6e:96:4e:61:ce:c4:
         8b:69:ab:99:2e:83:4c:91:04:17:59:b7:db:50:31:69:38:4b:
         fb:df:c1:94:c3:72:e0:84:f0:f8:f7:35:9a:0d:d3:fc:d4:82:
         a8:22:b7:41:24:7c:81:d4:aa:bc:e2:20:f7:08:d8:a8:39:70:
         5f:78:64:62:6e:f9:f1:78:79:fc:db:57:e0:80:1f:32:c8:18:
         1b:32:0e:89:8a:59:4e:81:d4:83:04:8c:97:33:15:67:d9:c5:
         3b:3d:07:b3:c2:60:2e:fd:86:5b:3c:32:2c:7d:6e:30:d0:5f:
         e2:51:63:31:b8:a9:3b:94:67:2f:0c:91:5f:4d:23:2b:06:7d:
         a3:89:0f:58:4d:db:32:32:b9:ca:10:e1:7d:18:f5:cd:d3:2a:
         e9:aa:e4:95:3e:8d:bb:ab:40:9d:82:a7:a2:be:89:3a:70:a9:
         f0:62:69:88:af:e8:0e:98:4a:d6:bc:2a:bb:64:87:6d:12:81:
         3f:94:66:58:1a:31:b4:98:e3:2f:1f:98:03:bf:84:30:33:18:
         36:3e:e3:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 14 01:32:03 2025 by rpki-client