Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/EBA93CA0289111EBB10A1313C4F9AE02.roa
File:                     EBA93CA0289111EBB10A1313C4F9AE02.roa (raw, json)
Hash identifier:          ZswycaiEJ6U/cFkynoMr7HjD6pxvwlo4ucLztKQJg2I=
Subject key identifier:   1E:A7:0E:4B:7F:F5:26:79:1D:E2:58:2F:52:77:D9:E8:07:29:58:ED
Certificate issuer:       /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Certificate serial:       B498
Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/EBA93CA0289111EBB10A1313C4F9AE02.roa
Signing time:             Thu 08 May 2025 16:09:42 +0000
ROA not before:           Thu 08 May 2025 16:09:42 +0000
ROA not after:            Wed 01 Jul 2026 00:00:00 +0000
asID:                     137178
IP address blocks:        103.110.167.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
                          rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 21 May 2025 13:32:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 46232 (0xb498)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918EDB2, serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
        Validity
            Not Before: May  8 16:09:42 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=681cd746-a036
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:29:e4:d5:ec:3a:bd:18:f0:1c:f7:2a:c3:8e:
                    01:90:b8:ac:d7:5d:3c:ff:04:82:60:a2:5f:bc:16:
                    0f:f2:43:26:2b:82:6b:2d:0a:39:e0:3e:3a:d6:9f:
                    f5:09:b6:37:e5:ac:52:57:77:d1:4d:e1:ae:41:1c:
                    ac:8a:ff:39:f7:41:5f:5e:63:77:0d:23:97:a0:b1:
                    27:8b:3d:af:47:28:c1:ff:0c:3c:dd:41:86:9e:d7:
                    94:c2:c1:b8:16:b3:a1:34:fd:3c:f6:65:2c:34:b7:
                    5f:26:64:1b:eb:06:1a:7a:fb:cf:0a:75:33:99:57:
                    69:d0:8b:34:62:90:90:6d:c6:4b:44:ee:b6:dc:f3:
                    bc:ad:78:d8:dc:aa:fd:c8:0e:4d:8c:fa:56:ff:b4:
                    a4:71:09:e4:e1:03:85:4d:41:53:c8:85:19:95:93:
                    71:e1:0e:30:75:50:46:66:a5:11:3b:0c:f9:ca:84:
                    85:c0:2c:77:0a:f9:ff:f9:7e:95:04:55:97:4b:43:
                    02:68:1f:23:1f:00:6e:72:49:11:f1:87:18:85:2d:
                    2a:79:f2:84:d2:5f:38:a3:70:f7:cc:4b:7c:a1:61:
                    02:b5:65:67:f3:6a:8d:36:aa:21:62:e3:07:21:53:
                    f1:51:0a:90:a7:f7:cf:78:2b:7b:c6:0e:ce:8b:79:
                    66:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1E:A7:0E:4B:7F:F5:26:79:1D:E2:58:2F:52:77:D9:E8:07:29:58:ED
            X509v3 Authority Key Identifier:
                keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/EBA93CA0289111EBB10A1313C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.110.167.0/24

    Signature Algorithm: sha256WithRSAEncryption
         60:ce:3a:33:d0:41:59:0e:ef:94:27:9a:be:3a:c5:4d:9c:e5:
         e9:53:3e:af:0f:7f:6e:01:ae:06:a0:1a:51:0a:ca:95:f2:96:
         8f:24:88:7a:5b:3c:12:07:db:82:b3:53:74:3c:82:db:82:11:
         45:b9:4e:2a:98:e8:f0:75:0e:aa:80:96:58:70:e8:1f:24:0f:
         2e:bc:de:34:30:4f:88:92:d2:4f:74:47:ad:b9:2b:d1:01:d1:
         a3:0e:e5:95:86:de:3f:06:ea:ee:07:74:69:86:9a:3b:e4:37:
         bd:18:83:ec:7d:eb:c4:51:ef:e6:ac:9b:46:96:10:e7:31:e9:
         ec:d3:e6:09:f5:ba:8e:16:ef:f5:59:79:48:21:48:2e:f6:14:
         c3:34:d4:2b:a5:38:73:54:44:d2:f3:25:35:f9:ce:d0:02:09:
         9c:2e:9b:0e:5b:50:83:e6:71:ec:02:50:76:7a:10:32:3f:e4:
         fe:f1:f1:dd:3a:1b:00:90:ef:54:62:d3:25:81:83:26:59:b1:
         16:4c:67:e4:24:81:0b:0d:bb:0b:b0:ac:e9:97:d9:5b:12:ed:
         96:6c:7e:cd:45:d7:16:f6:22:78:25:7f:15:97:a1:bf:51:51:
         38:95:48:fe:0d:ad:8b:7e:d4:1e:36:5e:07:01:07:ca:e1:6a:
         ce:26:92:d6
-----BEGIN CERTIFICATE-----
MIIFcjCCBFqgAwIBAgIDALSYMA0GCSqGSIb3DQEBCwUAMEYxETAPBgNVBAMTCEE5
MThFREIyMTEwLwYDVQQFEygyOTZFREI2NEYzQUY2RTlEOTgwOTMyRTgxNkY5NTk4
M0UzQUJDODIzMB4XDTI1MDUwODE2MDk0MloXDTI2MDcwMTAwMDAwMFowGDEWMBQG
A1UEAxMNNjgxY2Q3NDYtYTAzNjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBAL8p5NXsOr0Y8Bz3KsOOAZC4rNddPP8EgmCiX7wWD/JDJiuCay0KOeA+Otaf
9Qm2N+WsUld30U3hrkEcrIr/OfdBX15jdw0jl6CxJ4s9r0cowf8MPN1Bhp7XlMLB
uBazoTT9PPZlLDS3XyZkG+sGGnr7zwp1M5lXadCLNGKQkG3GS0TuttzzvK142Nyq
/cgOTYz6Vv+0pHEJ5OEDhU1BU8iFGZWTceEOMHVQRmalETsM+cqEhcAsdwr5//l+
lQRVl0tDAmgfIx8AbnJJEfGHGIUtKnnyhNJfOKNw98xLfKFhArVlZ/NqjTaqIWLj
ByFT8VEKkKf3z3gre8YOzot5ZgUCAwEAAaOCApUwggKRMB0GA1UdDgQWBBQepw5L
f/UmeR3iWC9Sd9noBylY7TAfBgNVHSMEGDAWgBQpbttk869unZgJMugW+VmD46vI
IzAOBgNVHQ8BAf8EBAMCB4AwgYMGA1UdHwR8MHoweKB2oHSGcnJzeW5jOi8vcnBr
aS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkxOEVEQjIvMkE0M0UzMEM3
MEU5MTFFMkIzNkQ0QjZCMjk3OUJCMjAvS1c3YlpQT3ZicDJZQ1RMb0Z2bFpnLU9y
eUNNLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBr
aS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3
MkZEMUZGMi9LVzdiWlBPdmJwMllDVExvRnZsWmctT3J5Q00uY2VyMEoGA1UdIAEB
/wRAMD4wPAYIKwYBBQUHDgIwMDAuBggrBgEFBQcCARYiaHR0cHM6Ly93d3cuYXBu
aWMubmV0L1JQS0kvQ1BTLnBkZjCBywYIKwYBBQUHAQsEgb4wgbswgYMGCCsGAQUF
BzALhndyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5
MThFREIyLzJBNDNFMzBDNzBFOTExRTJCMzZENEI2QjI5NzlCQjIwL0VCQTkzQ0Ew
Mjg5MTExRUJCMTBBMTMxM0M0RjlBRTAyLnJvYTAzBggrBgEFBQcwDYYnaHR0cHM6
Ly9ycmRwLmFwbmljLm5ldC9ub3RpZmljYXRpb24ueG1sMB8GCCsGAQUFBwEHAQH/
BBAwDjAMBAIAATAGAwQAZ26nMA0GCSqGSIb3DQEBCwUAA4IBAQBgzjoz0EFZDu+U
J5q+OsVNnOXpUz6vD39uAa4GoBpRCsqV8paPJIh6WzwSB9uCs1N0PILbghFFuU4q
mOjwdQ6qgJZYcOgfJA8uvN40ME+IktJPdEetuSvRAdGjDuWVht4/BuruB3Rphpo7
5De9GIPsfevEUe/mrJtGlhDnMens0+YJ9bqOFu/1WXlIIUgu9hTDNNQrpThzVETS
8yU1+c7QAgmcLpsOW1CD5nHsAlB2ehAyP+T+8fHdOhsAkO9UYtMlgYMmWbEWTGfk
JIELDbsLsKzpl9lbEu2WbH7NRdcW9iJ4JX8Vl6G/UVE4lUj+Da2LftQeNl4HAQfK
4WrOJpLW
-----END CERTIFICATE-----
Generated at Wed May 14 16:26:30 2025 by rpki-client