Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/9F0E591CEEBA11EBB3C21D22C4F9AE02.roa
File:                     9F0E591CEEBA11EBB3C21D22C4F9AE02.roa (raw, json)
Hash identifier:          c33HQJN5HWqclaEQ1bpYn9jgsG/szU1RtxcqXauXmoc=
Subject key identifier:   ED:4F:05:8F:6D:46:83:0E:6C:ED:8C:0E:F4:EB:C9:0E:01:B6:AE:AF
Certificate issuer:       /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Certificate serial:       B66D
Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/9F0E591CEEBA11EBB3C21D22C4F9AE02.roa
Signing time:             Thu 08 May 2025 16:16:50 +0000
ROA not before:           Thu 08 May 2025 16:16:50 +0000
ROA not after:            Wed 01 Jul 2026 00:00:00 +0000
asID:                     141533
IP address blocks:        103.162.160.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
                          rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 19 May 2025 18:54:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 46701 (0xb66d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918EDB2, serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
        Validity
            Not Before: May  8 16:16:50 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=681cd8f1-2b87
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:d7:b0:25:ab:be:74:35:d3:b5:d5:91:24:e7:
                    39:74:ea:8c:7c:7c:af:ea:0f:aa:d1:54:99:41:2c:
                    85:96:c5:89:96:14:4f:8c:5d:aa:c2:3a:b2:5e:77:
                    1f:5a:ba:35:0d:87:78:05:d3:22:d0:39:5d:b8:6d:
                    81:4e:92:46:12:bf:f5:fc:fd:69:9c:28:83:ab:1a:
                    97:1e:a5:69:f2:7a:4d:5d:b2:ad:a7:36:5b:a8:e4:
                    b3:41:01:25:c0:a0:03:5b:ba:d6:41:34:fc:ec:4c:
                    3e:5c:3a:26:29:9c:d4:5b:a6:55:9d:8c:5c:93:64:
                    32:8f:5d:04:f1:63:38:5a:5a:ff:be:f2:ea:b9:56:
                    0c:91:17:47:6d:b1:50:b1:eb:4f:9e:e4:13:56:39:
                    14:12:6f:2f:38:72:96:ea:c5:8b:60:6b:25:1f:f4:
                    61:e6:89:7c:d5:f4:eb:cd:c1:e7:9f:f6:54:a6:ae:
                    0d:c8:58:1f:0c:dd:29:4d:72:e9:31:8e:5f:a8:35:
                    6b:30:05:c8:bc:08:1f:4e:03:1e:73:d8:f7:86:26:
                    c0:b8:6d:75:9e:f4:13:0f:3a:e0:9e:b7:12:d9:d8:
                    78:a3:f7:8d:6a:95:22:7c:62:05:4f:ed:f1:18:d3:
                    6e:d1:ff:d5:dc:9e:99:c8:7e:2c:8b:2e:a9:08:26:
                    8b:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                ED:4F:05:8F:6D:46:83:0E:6C:ED:8C:0E:F4:EB:C9:0E:01:B6:AE:AF
            X509v3 Authority Key Identifier:
                keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/9F0E591CEEBA11EBB3C21D22C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.162.160.0/23

    Signature Algorithm: sha256WithRSAEncryption
         45:18:fe:b1:5e:3b:1f:65:ff:52:c2:98:a5:1c:9c:f2:bb:59:
         6d:71:eb:fc:0a:dd:05:75:0f:56:80:65:3b:b7:37:31:8d:f6:
         61:2d:ef:a4:2c:3b:ce:3a:b4:3b:8b:52:70:bd:41:bb:7c:0c:
         1c:18:e4:eb:e2:88:d0:c8:7e:65:05:41:cd:f6:79:39:c5:2d:
         1f:01:32:d5:a1:75:1e:a4:6d:04:d9:91:42:2e:e3:5a:1d:4e:
         9a:6f:2a:db:ce:e8:cd:64:fb:45:80:b4:15:9a:e1:77:80:28:
         fc:ef:1c:3a:48:3e:f1:9d:50:b5:73:0e:27:ca:16:c9:4f:9a:
         5e:bc:ea:e3:9f:b6:5a:df:95:91:20:ee:ad:85:d2:cf:ff:9c:
         e6:52:db:b9:1b:80:a0:36:cd:ed:8d:20:78:48:b2:0c:7f:8d:
         5b:03:47:b8:9a:b2:21:fa:88:3a:f9:38:22:56:67:d2:68:1e:
         47:36:48:8f:43:ab:6e:d4:2d:2d:1f:1e:96:4d:5a:27:48:cf:
         4a:78:3b:e2:75:10:68:34:c8:4e:c0:a9:f2:d3:03:17:3f:21:
         0a:ef:d3:cb:c0:d3:a3:40:df:36:8a:39:e9:de:33:e0:09:0a:
         f5:f6:e9:f1:9e:8a:67:a8:08:a2:e5:1c:9c:ee:ce:1a:7f:0c:
         cd:ce:fa:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 13 01:44:29 2025 by rpki-client