Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/E47A51F00B5911EEB4D80578C4F9AE02.roa
File:                     E47A51F00B5911EEB4D80578C4F9AE02.roa (raw, json)
Hash identifier:          8s+wIGDJEVnNtP2tZ/cijDX7KuXRrfyxzy6Af8F25/U=
Subject key identifier:   A9:66:6A:1D:70:C6:BE:B9:B1:72:98:A6:8B:40:FE:31:70:DB:36:99
Certificate issuer:       /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Certificate serial:       B8F6
Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/E47A51F00B5911EEB4D80578C4F9AE02.roa
Signing time:             Thu 08 May 2025 16:26:38 +0000
ROA not before:           Thu 08 May 2025 16:26:38 +0000
ROA not after:            Wed 01 Jul 2026 00:00:00 +0000
asID:                     151118
IP address blocks:        103.214.226.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
                          rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 19 May 2025 18:54:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 47350 (0xb8f6)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918EDB2, serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
        Validity
            Not Before: May  8 16:26:38 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=681cdb3d-f529
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:62:cf:83:d7:bb:c4:c5:75:96:a2:2c:6f:f4:
                    e8:c1:1b:cf:f8:b0:4b:35:80:a9:28:66:72:6f:d5:
                    d3:a5:b8:46:f7:66:1e:2f:3b:05:19:e1:1b:b7:fe:
                    14:de:08:09:a5:b7:7a:29:87:f1:e1:6d:63:6d:c0:
                    20:81:1c:7c:30:4e:40:76:ce:4d:e6:a7:30:5c:23:
                    fb:30:91:33:a8:9a:49:f3:a8:00:e4:b7:87:7e:1f:
                    09:74:d2:61:53:d0:4c:59:81:48:b1:26:cd:70:e5:
                    c0:d8:90:84:76:1e:b9:db:64:3a:0b:ad:cf:bf:85:
                    03:93:69:e6:b7:9d:97:9a:1b:b0:44:e3:00:23:c7:
                    1f:1c:fb:9c:96:c1:78:7e:bf:b6:09:8e:49:69:57:
                    c9:6c:49:51:c5:ac:35:07:4c:3d:89:a2:3b:ab:3f:
                    4d:6c:4f:ae:1f:63:18:16:92:c4:70:3e:2b:e7:86:
                    35:77:0a:26:69:2f:05:58:f3:2f:74:e1:e9:6b:3d:
                    94:3b:a4:02:23:ab:7c:a0:c8:12:0f:6a:1e:ce:01:
                    d2:3b:17:50:0c:66:89:9c:2c:85:70:ad:23:fd:02:
                    b4:1c:1b:5c:99:9a:cb:96:f8:23:7b:46:ce:37:ef:
                    0b:91:3f:4b:1d:04:03:4f:a0:ff:75:00:6c:17:2d:
                    fc:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A9:66:6A:1D:70:C6:BE:B9:B1:72:98:A6:8B:40:FE:31:70:DB:36:99
            X509v3 Authority Key Identifier:
                keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/E47A51F00B5911EEB4D80578C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.214.226.0/23

    Signature Algorithm: sha256WithRSAEncryption
         49:20:5a:67:70:c2:23:1d:5c:c7:08:70:64:ae:9a:aa:6b:20:
         6d:90:99:72:b3:2f:d1:f2:79:cb:8a:ca:a6:ca:a8:d8:75:9d:
         81:07:cb:67:77:2f:1c:d9:93:8c:21:be:89:dd:b8:26:25:a1:
         fe:4c:f9:da:08:e2:4a:a1:65:c2:24:92:b6:03:e3:1d:3c:8a:
         f0:ee:56:d3:95:9e:e1:be:f9:02:b2:16:e7:90:96:2a:94:70:
         ef:b4:02:4e:85:0f:be:9e:de:c2:d8:07:2b:c6:58:d4:12:90:
         b3:46:98:27:50:3a:ec:e4:df:0f:ab:51:75:2f:48:46:a4:65:
         c0:ba:34:bf:c5:0d:88:47:c2:fc:9c:43:47:12:7b:3a:22:70:
         d8:b8:92:50:20:5e:d5:93:00:41:19:f7:92:31:14:a8:7a:0c:
         2f:9c:e8:17:a7:da:af:b6:64:e2:91:24:56:c8:a9:d6:19:2b:
         04:fb:33:91:9d:c7:e2:a0:49:d7:58:f5:42:02:ed:47:4a:30:
         78:2f:97:04:b0:24:7b:9d:31:c4:a7:cb:b4:cf:a6:9f:c0:01:
         c6:32:fd:b1:df:0c:d1:75:22:43:71:2e:23:39:52:75:50:b2:
         b0:76:70:87:e7:c8:ac:13:1d:19:42:08:71:77:f1:b6:0d:68:
         2f:03:a6:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 13 02:37:17 2025 by rpki-client