Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/FFBFE084CD0111EC95344785C4F9AE02.roa
File:                     FFBFE084CD0111EC95344785C4F9AE02.roa (raw, json)
Hash identifier:          ThlaTDg7Yoasl7WJyTokvQwQJt4/ggz8WdppN+ATsCw=
Subject key identifier:   F8:EF:2C:EE:EB:B0:73:1D:37:BF:B3:ED:C4:5A:99:C5:C1:64:1E:67
Certificate issuer:       /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Certificate serial:       B58C
Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/FFBFE084CD0111EC95344785C4F9AE02.roa
Signing time:             Thu 08 May 2025 16:13:26 +0000
ROA not before:           Thu 08 May 2025 16:13:26 +0000
ROA not after:            Wed 01 Jul 2026 00:00:00 +0000
asID:                     139525
IP address blocks:        103.115.126.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
                          rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 19 May 2025 18:54:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 46476 (0xb58c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918EDB2, serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
        Validity
            Not Before: May  8 16:13:26 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=681cd826-3095
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:5e:f8:c5:df:54:92:22:a2:8e:53:3b:e7:0a:
                    b0:57:0f:f9:23:28:59:9b:64:0c:66:8b:4a:04:1f:
                    c7:f8:9b:94:fb:81:5f:51:8d:c7:36:61:ee:85:89:
                    67:77:f0:03:6d:9d:df:38:84:61:f2:45:a4:8a:c3:
                    df:e5:94:3f:2e:e7:fb:7f:b1:d2:50:0f:ad:c2:ed:
                    08:14:c2:d4:6a:00:1f:ab:12:22:b8:ec:0c:ed:50:
                    30:37:5f:9a:26:2e:07:39:13:78:37:b3:59:25:81:
                    6b:82:f3:ca:c4:da:e1:19:d7:c1:13:68:2d:0e:b1:
                    4c:08:00:c2:ee:41:81:72:42:41:d2:4f:2e:09:4e:
                    d6:b4:b6:cd:ed:2c:c8:72:9e:32:d0:76:8e:4a:a7:
                    2d:5e:6b:b8:45:9e:d5:c5:96:f6:53:d3:c9:11:8b:
                    83:36:66:01:d2:be:c6:e6:cd:9e:af:ba:80:d3:d8:
                    ba:51:50:b3:b5:2b:86:cf:00:b9:03:80:f3:b4:20:
                    ed:2c:b8:48:ee:82:2d:21:51:c4:e5:f4:9c:8e:36:
                    2b:bf:d6:08:37:66:99:cd:9d:9a:3d:2f:90:81:9d:
                    45:62:03:20:dd:5e:b8:f5:d9:15:ab:71:a3:8d:f7:
                    70:34:d6:01:a9:7b:ac:be:3f:87:db:b3:30:98:ab:
                    d2:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F8:EF:2C:EE:EB:B0:73:1D:37:BF:B3:ED:C4:5A:99:C5:C1:64:1E:67
            X509v3 Authority Key Identifier:
                keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/FFBFE084CD0111EC95344785C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.115.126.0/24

    Signature Algorithm: sha256WithRSAEncryption
         59:bd:3f:eb:43:33:1f:64:d7:7b:a2:f6:39:3c:d2:dd:14:d6:
         46:c3:98:26:ef:b0:ec:cf:ca:4f:8e:92:a6:cf:c0:34:3f:bf:
         fb:89:e0:c2:5d:df:a8:be:b0:e5:2b:69:d5:70:d7:dd:bb:77:
         bc:63:e4:2d:c0:d2:66:c3:ed:e4:92:20:ec:fb:0f:b9:f6:3b:
         f7:67:94:07:61:60:1e:ed:30:53:fa:de:14:1c:49:f4:56:d0:
         44:5b:ff:de:34:0a:9e:a2:4b:a9:c2:b5:71:7e:24:af:e0:17:
         ce:42:15:e3:1b:54:69:75:ef:70:ce:a9:82:c1:88:5d:bd:9e:
         76:46:85:7e:35:c3:6f:b2:7f:11:f2:aa:85:29:cb:6c:0a:9d:
         df:6a:97:9e:bc:ca:99:3d:88:b8:93:9c:af:c6:21:7a:89:34:
         a5:75:e9:bf:5c:ef:23:06:0c:a8:9a:13:ce:d5:f3:ed:b3:fd:
         9c:5d:da:2f:1d:cd:09:f1:31:98:03:53:72:a2:8e:b5:d1:69:
         db:fc:2d:01:76:fb:a7:39:cd:7c:46:ed:83:21:e4:5c:05:08:
         b7:6d:0d:03:c4:55:34:23:86:8b:70:87:a7:11:4e:55:e6:2f:
         9e:36:e4:43:22:33:e6:7d:ce:36:e0:80:ae:1e:36:30:f6:3e:
         dd:4f:5e:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 13 00:57:38 2025 by rpki-client