Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A911FFAB/AA7FA400169211EBB45D891DC4F9AE02/B5DC8802169411EBBEBD9A23C4F9AE02.roa
File:                     B5DC8802169411EBBEBD9A23C4F9AE02.roa (raw, json)
Hash identifier:          4ZdvboJ8mrbqq75dMjpcRNVXA0/Wmpp30CU0dXWt/yQ=
Subject key identifier:   15:2A:C5:06:57:80:BE:49:1D:0F:B8:E0:CD:0D:1B:25:FE:05:DD:5F
Certificate issuer:       /CN=A911FFAB/serialNumber=F08B6A1632C9CAC2E8688DEA4887D9302E956010
Certificate serial:       0762
Authority key identifier: F0:8B:6A:16:32:C9:CA:C2:E8:68:8D:EA:48:87:D9:30:2E:95:60:10
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8ItqFjLJysLoaI3qSIfZMC6VYBA.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A911FFAB/AA7FA400169211EBB45D891DC4F9AE02/B5DC8802169411EBBEBD9A23C4F9AE02.roa
Signing time:             Wed 02 Apr 2025 21:53:26 +0000
ROA not before:           Wed 02 Apr 2025 21:53:26 +0000
ROA not after:            Thu 28 May 2026 00:00:00 +0000
asID:                     9268
IP address blocks:        103.18.148.0/23 maxlen: 23
                          103.18.151.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A911FFAB/AA7FA400169211EBB45D891DC4F9AE02/8ItqFjLJysLoaI3qSIfZMC6VYBA.crl
                          rsync://rpki.apnic.net/member_repository/A911FFAB/AA7FA400169211EBB45D891DC4F9AE02/8ItqFjLJysLoaI3qSIfZMC6VYBA.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8ItqFjLJysLoaI3qSIfZMC6VYBA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 01 May 2025 21:21:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1890 (0x762)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A911FFAB, serialNumber=F08B6A1632C9CAC2E8688DEA4887D9302E956010
        Validity
            Not Before: Apr  2 21:53:26 2025 GMT
            Not After : May 28 00:00:00 2026 GMT
        Subject: CN=67edb1d6-fd17
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:fa:97:49:23:79:b2:21:87:a5:fc:1f:ae:18:a6:
                    03:5e:a9:f0:ce:87:d5:79:3f:d2:a3:51:64:74:86:
                    7a:25:c6:b9:20:ef:39:30:d0:d2:31:41:16:0d:75:
                    cc:d7:2b:67:6b:f2:6c:23:ec:ac:53:77:ee:37:d3:
                    4a:9e:b6:8b:af:5a:dc:b9:10:d7:d3:b0:36:a1:46:
                    4f:3d:63:b9:cb:a9:41:91:30:9b:26:65:bd:3b:56:
                    25:36:d2:d1:09:67:a5:fb:14:01:69:13:7c:0d:cb:
                    96:e4:d3:4f:ca:4e:a7:47:a6:e0:93:e6:8b:4d:ae:
                    79:39:51:2f:6c:bc:04:a1:44:b2:42:21:70:3f:82:
                    ac:77:74:f7:93:6b:27:5d:38:02:7f:d0:9f:30:f0:
                    9e:49:48:86:cb:29:a8:17:62:84:09:2e:24:28:ef:
                    24:60:f4:d4:32:9d:ca:a7:31:5a:df:72:9d:02:4b:
                    db:eb:da:d0:b4:a2:db:28:70:c8:fb:9f:c4:b8:14:
                    4b:9f:3e:da:fb:2d:2a:e1:4c:6c:d2:33:ab:9d:53:
                    be:e2:bd:46:2f:1c:0e:95:5e:63:cb:7c:ed:e4:08:
                    8b:54:5f:bf:84:1f:cc:53:b5:28:c6:14:a9:54:81:
                    ad:81:b9:00:5b:fa:d5:2d:ce:4c:19:2f:50:e5:25:
                    57:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                15:2A:C5:06:57:80:BE:49:1D:0F:B8:E0:CD:0D:1B:25:FE:05:DD:5F
            X509v3 Authority Key Identifier:
                keyid:F0:8B:6A:16:32:C9:CA:C2:E8:68:8D:EA:48:87:D9:30:2E:95:60:10

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A911FFAB/AA7FA400169211EBB45D891DC4F9AE02/8ItqFjLJysLoaI3qSIfZMC6VYBA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8ItqFjLJysLoaI3qSIfZMC6VYBA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911FFAB/AA7FA400169211EBB45D891DC4F9AE02/B5DC8802169411EBBEBD9A23C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.18.148.0/23
                  103.18.151.0/24

    Signature Algorithm: sha256WithRSAEncryption
         09:7e:58:91:2f:32:87:c2:13:c1:24:70:a9:76:e3:74:c6:1e:
         00:69:31:5a:20:c5:70:e2:d7:c1:59:75:22:29:47:8b:a8:96:
         22:c3:d6:e1:35:98:a4:0a:9c:d8:ef:50:3a:e9:34:f0:09:85:
         c1:a3:8e:d3:72:f3:9d:56:c7:35:4d:a1:58:4c:db:49:53:a1:
         5c:00:db:e7:c6:a9:2e:e4:b2:36:6a:51:db:00:50:f9:45:63:
         ef:7c:1e:dd:69:9e:a7:e0:42:c4:72:d2:76:50:14:c7:ea:4e:
         19:2b:0a:d1:b8:ef:8c:49:8f:1c:9c:d8:c4:15:ec:78:4b:ef:
         a2:c9:10:cf:9b:6e:52:e4:61:5b:25:9e:e2:ea:bd:90:2c:87:
         f4:1c:27:ea:f1:29:14:bf:97:43:f4:e7:8c:ee:fb:ed:e1:34:
         8c:4e:d6:1d:ec:36:a5:06:c7:dd:fb:8a:9d:60:67:1f:35:55:
         fa:f9:d7:5c:9e:68:bc:bc:08:c2:9b:88:a4:b7:16:32:24:10:
         3b:9c:25:b9:9f:6d:cf:51:95:5a:03:61:79:ec:72:f3:6f:6e:
         12:e9:1b:eb:88:6d:51:cc:70:2f:84:40:0e:dc:dc:d4:be:c1:
         4b:e7:80:1f:28:c7:63:af:a2:2f:88:b4:36:2d:ef:22:cb:f2:
         a4:18:ea:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 07:42:56 2025 by rpki-client