Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/B7F9CC44800611EC85523762C4F9AE02.roa
File:                     B7F9CC44800611EC85523762C4F9AE02.roa (raw, json)
Hash identifier:          B9bYfoDDnihQaTHzq7KU/I1CFvsjwgRTf+lvvUliyuk=
Subject key identifier:   ED:E1:87:40:80:79:23:FB:F6:FD:DE:AF:89:D7:64:84:40:8C:07:CF
Certificate issuer:       /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Certificate serial:       B7DD
Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/B7F9CC44800611EC85523762C4F9AE02.roa
Signing time:             Thu 08 May 2025 16:22:21 +0000
ROA not before:           Thu 08 May 2025 16:22:21 +0000
ROA not after:            Wed 01 Jul 2026 00:00:00 +0000
asID:                     149260
IP address blocks:        103.180.67.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
                          rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 19 May 2025 18:54:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 47069 (0xb7dd)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918EDB2, serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
        Validity
            Not Before: May  8 16:22:21 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=681cda3d-d856
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ed:67:d7:4b:cd:67:fe:a2:32:90:b9:c3:0d:f7:
                    0c:ce:5d:c1:44:b3:7d:c7:4f:81:69:0b:f6:fd:27:
                    55:53:a9:f8:7f:d9:85:c2:d4:ab:71:a0:a2:59:b4:
                    ff:e6:de:25:eb:10:23:de:6e:2c:9c:39:aa:0e:41:
                    3d:f0:68:15:53:9e:2f:d2:8a:e3:22:13:ee:5b:e3:
                    79:20:e4:1d:89:59:4e:4a:12:ce:3e:b9:5e:71:e2:
                    20:56:cf:a8:c8:f3:e2:78:0c:37:b5:fb:d1:dc:d9:
                    e5:98:de:24:d4:69:de:59:84:67:7b:c5:1f:50:bc:
                    ae:4c:33:28:96:76:1d:f1:67:4e:4e:e9:66:f7:c4:
                    b1:76:15:1d:8c:af:d1:8e:4c:60:c4:80:18:e0:19:
                    ea:6a:47:55:f4:82:34:ea:b5:94:57:c8:dc:b6:7d:
                    6b:21:73:29:6b:bc:be:dd:44:c9:cd:24:e4:8f:36:
                    12:fd:9e:6a:7d:b2:fb:1b:95:f2:53:cd:57:6d:57:
                    06:9d:af:8c:37:29:ed:46:4d:e4:de:9a:78:57:03:
                    fd:f1:26:62:a8:96:94:f3:5a:a3:e8:30:74:66:f2:
                    4e:d0:73:34:52:af:8a:fe:67:b3:88:4c:fc:1c:f0:
                    67:98:12:0f:f1:2e:9d:a4:53:2c:aa:b2:ad:49:5d:
                    d5:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                ED:E1:87:40:80:79:23:FB:F6:FD:DE:AF:89:D7:64:84:40:8C:07:CF
            X509v3 Authority Key Identifier:
                keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/B7F9CC44800611EC85523762C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.180.67.0/24

    Signature Algorithm: sha256WithRSAEncryption
         2b:a8:25:d4:d2:a6:dc:9f:35:18:ad:ac:cf:8e:a7:df:b1:f3:
         8d:8a:85:97:3b:af:48:42:bf:46:1c:b0:15:12:f3:c2:53:82:
         ca:96:cc:3a:5f:2f:23:7d:30:bf:8a:88:cf:f7:25:e8:b7:b2:
         8e:70:f3:6c:f9:52:03:3a:ba:08:b8:84:20:13:ea:94:cd:b8:
         6f:23:53:24:85:8d:a3:40:b3:f8:61:68:1a:05:c2:6c:93:a5:
         ea:e6:c4:66:8e:8a:24:00:1d:6d:c0:e6:70:e9:98:fa:fd:75:
         cc:a8:8c:7b:17:ea:7a:aa:ff:12:3a:d2:c4:4a:9e:37:f8:25:
         89:28:4d:c9:06:81:4d:93:ff:53:4b:d8:e7:27:59:69:61:77:
         87:a6:15:49:d8:92:76:4b:b9:61:ba:9c:11:54:cf:f9:2f:30:
         80:b3:88:e3:a2:3f:ea:b6:0a:28:76:2a:6f:f3:e0:e1:f4:35:
         d0:28:34:72:dc:c3:a7:94:93:1d:b5:45:4f:35:9d:6b:1b:ad:
         18:f8:51:ed:ff:38:21:48:2f:79:23:a6:e7:a8:2f:76:b8:3f:
         9a:c5:a0:40:d2:0d:d4:5d:12:de:50:7e:19:e7:f4:d4:d3:72:
         9b:34:92:ef:57:08:e6:84:12:21:35:2e:1d:81:1c:b8:e0:e5:
         f0:b6:e1:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 13 02:28:29 2025 by rpki-client