Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A919D766/66207B0A16A311EDA8FE7585C4F9AE02/8F0A568216A611ED86A3EF0CC4F9AE02.roa
File:                     8F0A568216A611ED86A3EF0CC4F9AE02.roa (raw, json)
Hash identifier:          GW9OdW2Jh43/tpJ1TBy+v7ZuNATKq3J5kebniiL87VE=
Subject key identifier:   98:B9:C3:3F:A3:BC:D5:E0:95:EA:B0:DA:73:C6:1B:C4:FE:8B:0F:DC
Certificate issuer:       /CN=A919D766/serialNumber=0D78FBF3B21DBDB0CF0C4D882F2B459B447CB8E8
Certificate serial:       025D
Authority key identifier: 0D:78:FB:F3:B2:1D:BD:B0:CF:0C:4D:88:2F:2B:45:9B:44:7C:B8:E8
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DXj787IdvbDPDE2ILytFm0R8uOg.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A919D766/66207B0A16A311EDA8FE7585C4F9AE02/8F0A568216A611ED86A3EF0CC4F9AE02.roa
Signing time:             Tue 13 May 2025 02:20:01 +0000
ROA not before:           Tue 13 May 2025 02:20:01 +0000
ROA not after:            Thu 30 Jul 2026 00:00:00 +0000
asID:                     56294
IP address blocks:        103.166.16.0/24 maxlen: 24
                          103.166.17.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A919D766/66207B0A16A311EDA8FE7585C4F9AE02/DXj787IdvbDPDE2ILytFm0R8uOg.crl
                          rsync://rpki.apnic.net/member_repository/A919D766/66207B0A16A311EDA8FE7585C4F9AE02/DXj787IdvbDPDE2ILytFm0R8uOg.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DXj787IdvbDPDE2ILytFm0R8uOg.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 20 May 2025 02:20:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 605 (0x25d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A919D766, serialNumber=0D78FBF3B21DBDB0CF0C4D882F2B459B447CB8E8
        Validity
            Not Before: May 13 02:20:01 2025 GMT
            Not After : Jul 30 00:00:00 2026 GMT
        Subject: CN=6822ac50-bf4f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:f2:76:19:db:d9:45:bb:bb:a4:ff:ff:54:d2:
                    f5:f9:14:9f:f2:ad:b9:d7:5f:d1:c6:9a:db:10:04:
                    f7:30:86:0b:3e:8b:f7:42:a4:1c:7d:2a:c9:ed:90:
                    2e:c7:06:e3:46:3e:84:af:f4:b8:c1:b1:d4:fe:9d:
                    b0:f3:ff:50:d7:23:dd:c6:4d:7b:de:f6:da:e5:4f:
                    0c:56:23:a2:67:97:f4:36:87:92:c3:c4:be:97:3f:
                    47:af:d8:d9:04:ca:2a:44:8a:95:ec:e1:21:7e:4d:
                    cc:ba:6e:4a:d4:b3:0f:2f:32:7f:ef:55:a8:08:c0:
                    1d:dc:55:3b:64:34:a3:e3:eb:b5:b2:b6:70:87:57:
                    19:c1:8e:1a:20:36:e9:8f:c0:6e:ae:44:18:be:61:
                    ae:f4:50:9d:1d:68:25:14:63:27:cd:1c:45:4d:09:
                    fc:1d:29:09:31:d1:ca:fc:1f:06:99:19:a7:01:2e:
                    57:93:62:32:3b:41:ef:58:e6:c5:f6:6a:43:53:6b:
                    93:92:34:bf:10:37:15:47:5e:82:77:c1:52:f3:1b:
                    65:e8:6b:6a:b9:12:88:ec:4a:07:9d:94:db:aa:f8:
                    a2:b7:a4:14:a1:57:13:92:0f:6a:ec:ba:15:4f:d5:
                    f0:8a:07:7e:9d:36:cd:05:9f:e3:84:db:cc:a4:60:
                    57:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                98:B9:C3:3F:A3:BC:D5:E0:95:EA:B0:DA:73:C6:1B:C4:FE:8B:0F:DC
            X509v3 Authority Key Identifier:
                keyid:0D:78:FB:F3:B2:1D:BD:B0:CF:0C:4D:88:2F:2B:45:9B:44:7C:B8:E8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A919D766/66207B0A16A311EDA8FE7585C4F9AE02/DXj787IdvbDPDE2ILytFm0R8uOg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DXj787IdvbDPDE2ILytFm0R8uOg.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919D766/66207B0A16A311EDA8FE7585C4F9AE02/8F0A568216A611ED86A3EF0CC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.166.16.0/23

    Signature Algorithm: sha256WithRSAEncryption
         9c:34:ac:a6:43:01:87:e7:51:b6:71:99:a6:c5:04:06:51:42:
         52:f3:4c:74:36:76:a0:6f:82:09:2d:e9:2b:b4:a7:4b:0a:90:
         d9:ab:f1:09:cc:d8:f1:d4:c5:89:d7:c2:9f:ca:72:9f:89:d9:
         28:a9:bf:85:b6:0c:86:87:c4:cb:96:06:17:ea:de:32:31:36:
         2b:4b:3d:de:61:18:9a:70:c0:16:c8:31:e1:90:57:49:6d:c2:
         6f:b2:22:97:48:79:dd:99:2f:58:60:11:3a:e9:34:bc:15:e3:
         fc:ee:b1:0f:4f:93:65:04:26:f8:ff:3c:5e:aa:ef:75:df:a5:
         06:00:92:69:9d:d2:bb:b4:a2:67:57:09:1b:e7:d8:5e:b1:b6:
         52:c6:3b:86:fb:f0:ab:4a:82:2c:ea:29:53:88:9e:5e:7b:bd:
         4e:79:e0:2b:45:d1:1e:b1:1c:56:7e:0d:9a:99:7f:76:8c:e4:
         1f:ab:fb:7b:50:c1:62:80:9d:ae:45:ef:d1:5e:0c:3e:b1:40:
         25:d9:7a:1d:d2:0b:27:95:38:97:93:f6:be:d7:24:dc:36:8a:
         bc:ca:0f:7b:f1:9a:24:60:7c:1e:a2:f9:00:0f:4b:27:c2:08:
         d9:30:72:7a:af:40:90:c4:41:48:18:6f:12:25:ad:2b:2d:c3:
         48:06:51:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 14 11:12:18 2025 by rpki-client