Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/F3B19468F14B11EC8B517410C4F9AE02.roa
File:                     F3B19468F14B11EC8B517410C4F9AE02.roa (raw, json)
Hash identifier:          bRXYJLx9uga33c+F8ncD5QoINeS19K7kgPVBikB7CCw=
Subject key identifier:   FF:01:26:5E:A3:2A:27:C5:8E:E9:5A:19:C5:CB:A8:75:AF:18:7B:EC
Certificate issuer:       /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Certificate serial:       B6B8
Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/F3B19468F14B11EC8B517410C4F9AE02.roa
Signing time:             Thu 08 May 2025 16:17:58 +0000
ROA not before:           Thu 08 May 2025 16:17:58 +0000
ROA not after:            Wed 01 Jul 2026 00:00:00 +0000
asID:                     141844
IP address blocks:        103.167.242.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
                          rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 20 May 2025 13:22:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 46776 (0xb6b8)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918EDB2, serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
        Validity
            Not Before: May  8 16:17:58 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=681cd935-bffd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:8d:eb:be:0a:0d:dc:34:40:a1:c5:d5:73:ab:
                    f9:c7:90:2e:40:e1:3e:a9:31:c6:19:f2:46:a4:9c:
                    b3:77:52:24:76:99:57:22:09:e9:84:ef:7a:8b:73:
                    67:e6:ae:a0:91:fd:f6:5d:9d:46:e0:4b:d2:8b:10:
                    f4:04:43:bf:c5:9a:c8:08:14:9e:65:d9:0e:c4:91:
                    f2:26:67:94:a5:e2:a1:82:f6:8e:75:0c:46:6d:35:
                    a0:4c:61:32:1a:80:7c:c2:6d:e8:67:88:31:97:55:
                    c4:0c:25:af:ac:15:8b:54:01:70:37:ef:e1:cf:90:
                    67:37:8b:25:f2:3f:eb:0d:dd:00:80:36:95:19:58:
                    a2:00:b6:ec:9e:a9:10:d5:2e:ac:57:cb:8e:d2:05:
                    1d:14:87:a9:22:a1:56:c0:12:5f:50:13:17:a9:75:
                    e3:29:0c:48:94:d8:27:d8:e4:50:96:65:2a:27:83:
                    63:1a:12:86:c8:5c:06:7a:b2:cf:54:a3:8d:c6:40:
                    79:b0:9f:12:f2:8e:7d:4b:72:15:b6:90:e9:dd:c5:
                    7e:34:c5:7d:34:ad:bc:0a:74:9f:23:28:86:cf:94:
                    13:cd:99:39:fe:ee:9d:77:d8:c7:2d:1e:60:70:31:
                    ff:5a:d5:a9:71:6e:ec:4b:4e:5f:f7:b7:92:8c:c1:
                    a1:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FF:01:26:5E:A3:2A:27:C5:8E:E9:5A:19:C5:CB:A8:75:AF:18:7B:EC
            X509v3 Authority Key Identifier:
                keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/F3B19468F14B11EC8B517410C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.167.242.0/23

    Signature Algorithm: sha256WithRSAEncryption
         67:1a:00:14:2f:3a:a0:a6:76:51:c8:62:65:0f:35:cf:d5:3e:
         3d:04:f7:75:20:a5:07:7b:97:37:1e:58:99:d7:ab:82:68:59:
         c0:06:b4:0e:56:b0:71:36:91:9e:42:7b:af:ec:28:aa:10:3d:
         67:71:61:0b:16:29:93:0a:a7:48:c1:57:13:84:82:e9:ec:6d:
         66:06:ee:a5:d7:e6:f8:fd:3d:78:ef:f2:e7:e3:cb:8f:43:4a:
         b2:f9:bd:17:ae:50:7c:ad:6c:49:9b:d3:e1:de:4d:4c:47:4c:
         40:13:4e:b1:cb:bf:8b:fb:ae:7d:80:99:36:5e:d2:ea:b1:db:
         61:f9:98:f5:53:fe:37:9e:df:d2:3a:28:15:24:b1:1b:bc:21:
         3e:29:05:2e:dd:f4:8a:59:d7:7f:4c:51:b5:9e:bf:f0:2c:79:
         1c:54:99:e4:2f:76:f0:7b:86:5a:b7:5e:b6:89:81:a1:70:ae:
         ab:57:18:45:f6:65:de:bd:03:15:74:6a:f9:d7:f1:8a:72:10:
         f3:61:b8:fa:96:d7:57:ad:31:8a:ee:04:4f:2b:60:3d:14:24:
         8a:5d:a5:af:22:61:e3:52:a0:1c:39:a4:81:f7:8f:c0:0b:91:
         31:15:c2:83:43:6d:ed:67:3e:c3:d5:8b:63:10:ab:43:1f:31:
         e0:2d:77:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 13 18:53:20 2025 by rpki-client