Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/A18F7FFC720B11EC90C07770C4F9AE02.roa
File:                     A18F7FFC720B11EC90C07770C4F9AE02.roa (raw, json)
Hash identifier:          tyjkWPGrSnWpPAcYSXvSp3uwqIyg8hwlFvZKG2Zfb8A=
Subject key identifier:   4A:55:F4:50:58:38:0E:77:5C:DE:08:71:65:0D:CC:72:FA:36:5A:FB
Certificate issuer:       /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Certificate serial:       B7AF
Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/A18F7FFC720B11EC90C07770C4F9AE02.roa
Signing time:             Thu 08 May 2025 16:21:41 +0000
ROA not before:           Thu 08 May 2025 16:21:40 +0000
ROA not after:            Wed 01 Jul 2026 00:00:00 +0000
asID:                     149188
IP address blocks:        103.178.110.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
                          rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 19 May 2025 18:54:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 47023 (0xb7af)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918EDB2, serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
        Validity
            Not Before: May  8 16:21:40 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=681cda14-30c9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:a2:41:63:64:30:7a:13:e3:95:76:4e:67:8f:
                    11:f6:12:e3:c0:dc:4d:18:be:67:59:a3:d8:4a:92:
                    05:48:e6:7d:11:e7:36:1a:51:bb:7a:29:31:a2:c0:
                    fc:ff:8e:80:a4:93:74:85:bc:b1:8d:e7:92:0b:bd:
                    41:fc:bc:1c:fc:c5:49:b4:9f:94:6b:19:4b:ed:fc:
                    e9:e5:15:b6:2b:77:1b:5e:64:ba:49:c6:83:53:06:
                    cf:84:53:7e:91:c4:9b:4d:b8:45:08:e8:26:0c:ea:
                    3a:f6:9f:f2:b2:af:e8:a6:70:3f:bc:65:43:c7:fe:
                    26:1a:ad:33:6b:02:7b:26:bc:2a:f4:17:b4:65:af:
                    da:3e:84:ae:cf:b1:a2:02:28:29:83:61:de:5f:f8:
                    41:e0:b5:a3:21:90:17:ab:73:48:7d:83:d0:b0:fb:
                    3a:85:86:36:09:51:ee:c8:0e:6c:e2:bf:a2:1f:7c:
                    7d:19:b5:20:eb:93:46:94:ff:47:eb:ab:05:34:8a:
                    e2:69:43:1d:bb:88:69:75:f4:57:a1:98:1a:18:da:
                    f8:52:7f:e1:3c:2f:ff:f8:a8:7e:f7:cb:85:80:9d:
                    69:0d:a7:cd:6c:52:41:00:a9:0e:85:de:66:65:92:
                    e3:73:60:8b:85:3f:19:32:66:04:96:b6:0b:57:77:
                    07:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4A:55:F4:50:58:38:0E:77:5C:DE:08:71:65:0D:CC:72:FA:36:5A:FB
            X509v3 Authority Key Identifier:
                keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/A18F7FFC720B11EC90C07770C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.178.110.0/23

    Signature Algorithm: sha256WithRSAEncryption
         a9:9f:66:67:64:d0:c3:b6:f6:03:3f:9e:d6:32:5a:c6:18:9e:
         72:10:6e:e7:c4:d8:0b:6d:e2:f0:d7:2d:4c:bd:66:3c:75:ab:
         b0:f1:06:69:00:27:7d:bb:3a:0b:34:b0:98:76:6f:f6:40:cb:
         fc:66:8a:dd:2b:de:45:bf:6c:8b:6d:4b:d6:66:8a:21:13:f1:
         56:e3:cf:48:09:eb:2a:07:78:56:59:3a:cb:08:de:df:89:62:
         2c:5f:23:29:54:6a:49:4a:2b:3d:ea:71:2f:29:4a:e1:51:af:
         bb:a6:37:6f:60:da:da:68:a9:61:1c:94:7d:d5:98:ce:8d:a5:
         bc:c7:70:54:c9:ff:10:3e:a9:81:ba:ed:6b:8f:28:fd:bf:32:
         97:0b:c7:4b:a6:4e:07:94:13:e9:5f:97:53:09:47:50:6e:02:
         28:aa:fb:6f:9a:d7:d9:c1:18:ff:d1:40:1a:0b:ef:ad:76:33:
         bc:9f:d4:f8:51:a1:2a:e6:73:49:ec:1b:37:d5:98:ce:f6:a2:
         a4:c1:db:98:c5:f5:40:0c:bc:af:7a:f8:57:6d:30:cf:f0:f3:
         26:a7:ce:7b:9c:87:98:e3:69:0e:0f:a3:3c:87:73:3c:bc:4b:
         7e:b5:54:15:e1:d2:f1:32:bf:ef:bd:84:6c:20:5c:af:6f:29:
         39:8c:a6:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 13 01:08:46 2025 by rpki-client