Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/F8A8459E839811EE9359CD1BC4F9AE02.roa
File:                     F8A8459E839811EE9359CD1BC4F9AE02.roa (raw, json)
Hash identifier:          crmksmwDqixb9e5hIYBBdkcm8Oee9I42ObEKxRvIsJQ=
Subject key identifier:   70:04:3F:C9:6F:7C:13:CE:37:93:D1:21:45:A5:ED:F2:E3:96:3D:98
Certificate issuer:       /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Certificate serial:       B4E2
Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/F8A8459E839811EE9359CD1BC4F9AE02.roa
Signing time:             Thu 08 May 2025 16:10:49 +0000
ROA not before:           Thu 08 May 2025 16:10:49 +0000
ROA not after:            Wed 01 Jul 2026 00:00:00 +0000
asID:                     138035
IP address blocks:        103.187.183.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
                          rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 19 May 2025 18:54:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 46306 (0xb4e2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918EDB2, serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
        Validity
            Not Before: May  8 16:10:49 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=681cd789-877e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:c3:65:51:68:7b:57:e0:85:37:a0:48:6c:c9:
                    a9:c0:34:13:fe:6e:7d:d3:80:2c:f9:7f:a9:57:06:
                    ed:0b:0d:94:94:f9:bd:2b:f6:2d:b5:4b:1d:21:dc:
                    d3:e1:d8:f5:88:d5:1e:14:8d:19:39:73:dd:3f:f7:
                    07:d2:72:a7:7e:7b:79:4d:a9:91:b6:d8:d2:4a:80:
                    f9:85:44:95:7c:57:a3:67:dd:af:1f:5a:e9:6c:d3:
                    77:5b:e1:26:e7:e5:26:0c:b4:aa:3e:68:f0:87:6e:
                    34:3f:84:dc:ac:4a:14:f3:32:a1:77:60:d8:b0:b4:
                    de:3f:50:46:30:76:a3:1a:c4:a4:5a:97:9f:93:49:
                    d4:70:98:8a:39:5a:e0:8c:43:4a:9f:44:4a:3c:46:
                    92:bd:fb:d6:05:e3:98:74:0c:b1:3b:28:5d:7d:d6:
                    ed:69:82:24:d8:04:27:26:a5:42:f1:58:2e:33:be:
                    a7:6d:f6:9b:bd:3e:ed:15:12:a5:de:e6:09:c5:4f:
                    62:54:a1:8d:ca:c3:3c:5e:ea:2d:e6:1b:24:93:b2:
                    51:f8:38:70:9e:69:14:dc:2f:d9:59:10:05:37:f3:
                    96:df:6f:f4:d1:b8:3a:50:b1:3a:93:e2:0c:c9:0d:
                    b4:4c:d2:73:93:95:26:db:5c:cd:10:8d:ad:55:4d:
                    b3:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                70:04:3F:C9:6F:7C:13:CE:37:93:D1:21:45:A5:ED:F2:E3:96:3D:98
            X509v3 Authority Key Identifier:
                keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/F8A8459E839811EE9359CD1BC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.187.183.0/24

    Signature Algorithm: sha256WithRSAEncryption
         49:bb:8d:b8:23:d1:4a:a0:f7:3e:e1:73:73:d5:dc:25:6d:b7:
         61:b2:e7:0b:fd:15:84:6a:36:ea:e9:bc:69:7b:08:27:4f:26:
         10:67:5a:54:6b:c5:e9:68:c4:17:9a:fa:45:0a:82:de:3b:6d:
         6c:40:46:eb:aa:d9:c7:0e:1b:07:51:aa:d8:71:09:80:ce:ed:
         8d:a7:81:97:7f:3e:bb:f8:de:d7:0c:8e:47:fa:c8:fd:37:ca:
         5c:b8:9e:c5:2d:13:5c:07:6a:41:ce:b0:0e:1b:bc:96:ea:9b:
         d6:c3:67:d9:b8:59:3a:60:60:63:2c:5b:5b:f0:6c:5f:a8:8f:
         48:ac:0b:3d:69:3a:ee:a3:e1:3c:11:8f:c9:32:f6:a8:88:6e:
         66:30:ef:6c:2c:8f:f9:3f:69:9a:e8:0b:6f:d4:8f:06:a9:48:
         31:f3:3e:3d:23:4e:70:60:f3:ed:83:07:f6:d4:64:bc:d8:6b:
         42:fc:52:c9:77:11:aa:57:0f:91:46:59:ac:91:d2:cf:5f:63:
         b3:2f:44:ba:f7:36:29:68:84:a0:56:a6:b8:a4:26:9d:74:69:
         42:03:fe:9f:5a:73:07:8b:79:28:b1:79:cf:4e:ab:9b:6a:b3:
         47:84:65:4b:5b:55:9c:80:f8:bf:43:bb:c6:2d:ee:db:e7:79:
         1f:0e:cb:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 13 00:54:54 2025 by rpki-client