Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A912C6FA/A17B33C2D5AF11E88FF05228C4F9AE02/AD8B14E6687B11F086577F60C4F9AE02.roa
File:                     AD8B14E6687B11F086577F60C4F9AE02.roa (raw, json)
Hash identifier:          /GDzXHMnIAyKmrgPusTCV6N30kxupyh4wJ8T8KHf8+I=
Subject key identifier:   7D:D6:40:73:AE:1C:97:59:0C:F0:F7:89:D3:07:CC:A3:44:9A:FE:5D
Certificate issuer:       /CN=A912C6FA/serialNumber=10C6A96ABFE5689BC7BDE5ABE8A66D952453FB18
Certificate serial:       1292
Authority key identifier: 10:C6:A9:6A:BF:E5:68:9B:C7:BD:E5:AB:E8:A6:6D:95:24:53:FB:18
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EMapar_laJvHveWr6KZtlSRT-xg.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A912C6FA/A17B33C2D5AF11E88FF05228C4F9AE02/AD8B14E6687B11F086577F60C4F9AE02.roa
Signing time:             Thu 24 Jul 2025 10:48:05 +0000
ROA not before:           Thu 24 Jul 2025 10:48:05 +0000
ROA not after:            Tue 30 Dec 2025 00:00:00 +0000
asID:                     153385
IP address blocks:        103.18.83.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A912C6FA/A17B33C2D5AF11E88FF05228C4F9AE02/EMapar_laJvHveWr6KZtlSRT-xg.crl
                          rsync://rpki.apnic.net/member_repository/A912C6FA/A17B33C2D5AF11E88FF05228C4F9AE02/EMapar_laJvHveWr6KZtlSRT-xg.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EMapar_laJvHveWr6KZtlSRT-xg.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 14 Aug 2025 05:57:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4754 (0x1292)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A912C6FA, serialNumber=10C6A96ABFE5689BC7BDE5ABE8A66D952453FB18
        Validity
            Not Before: Jul 24 10:48:05 2025 GMT
            Not After : Dec 30 00:00:00 2025 GMT
        Subject: CN=68820f65-d638
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:64:05:e0:17:f4:a9:db:dc:a2:0c:07:35:c0:
                    4f:e3:69:20:93:26:df:43:f6:79:42:c5:94:4d:e1:
                    7b:fb:e2:1a:85:41:89:5b:bd:c7:e7:3d:b3:bb:a2:
                    c4:f2:1b:f4:5b:96:c2:52:aa:71:9d:b9:c6:57:6a:
                    f3:22:ab:e5:8e:e4:cf:d0:aa:64:a4:d8:8a:19:04:
                    06:d5:cb:27:62:30:0a:ab:72:c3:83:dc:68:02:0a:
                    75:ca:ad:ff:7a:c6:b2:80:9e:a1:c2:76:7c:75:e8:
                    99:e3:4a:0b:12:b6:cc:07:a4:fc:09:e6:24:79:c6:
                    6e:09:4f:1f:ec:92:40:9d:44:0a:b5:6d:7d:98:f3:
                    e3:c6:7f:0b:a3:7b:25:1d:ee:51:1a:07:62:75:b3:
                    17:e8:6b:03:d9:de:79:a9:68:e2:31:1d:25:fb:b4:
                    1a:28:d4:fe:28:c0:12:76:86:7b:83:15:e7:44:5b:
                    e1:ac:7d:ea:38:38:0c:da:7e:de:78:18:1e:cb:79:
                    03:14:2b:46:95:5d:b0:86:df:c2:89:c4:1a:c1:56:
                    31:73:26:15:b0:b3:b4:53:1d:21:9e:76:89:6e:cb:
                    46:f8:70:d3:c2:6f:e8:67:11:9a:31:02:c1:b9:28:
                    19:82:9a:e3:30:56:91:67:96:7a:cf:11:e9:12:bc:
                    89:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7D:D6:40:73:AE:1C:97:59:0C:F0:F7:89:D3:07:CC:A3:44:9A:FE:5D
            X509v3 Authority Key Identifier:
                keyid:10:C6:A9:6A:BF:E5:68:9B:C7:BD:E5:AB:E8:A6:6D:95:24:53:FB:18

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A912C6FA/A17B33C2D5AF11E88FF05228C4F9AE02/EMapar_laJvHveWr6KZtlSRT-xg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EMapar_laJvHveWr6KZtlSRT-xg.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912C6FA/A17B33C2D5AF11E88FF05228C4F9AE02/AD8B14E6687B11F086577F60C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.18.83.0/24

    Signature Algorithm: sha256WithRSAEncryption
         45:cf:a5:69:b1:89:e5:a3:2b:f5:03:79:d4:a0:ca:71:ed:5b:
         71:bf:3b:ed:8b:25:95:00:26:f4:a1:9d:ad:ab:cc:82:a2:5b:
         44:34:7e:66:f5:c2:22:d6:ee:cf:9f:8c:e9:35:8f:8f:ee:03:
         5a:93:72:2e:07:05:94:c1:fb:0e:63:bd:5a:d2:47:8c:51:a6:
         27:96:ac:5a:c1:56:88:b5:af:3d:22:ba:bf:25:65:0d:41:ed:
         43:8d:48:62:fa:ab:be:09:fb:bb:2d:73:d8:31:7c:d9:6c:eb:
         85:8f:0f:a4:44:5a:25:de:d6:45:10:c8:b3:3e:e7:ca:4d:ae:
         ca:9e:29:7b:4e:b6:3f:17:4c:b9:e9:54:48:be:05:da:fd:9b:
         43:a8:fe:21:d0:c6:0e:83:1b:f7:21:69:30:c6:86:2d:e1:12:
         6b:f0:b6:f5:a1:69:e6:10:59:fa:2d:2f:1c:7b:b5:c4:a1:cc:
         54:bd:df:47:07:38:e0:50:0f:0a:45:50:7a:6b:62:05:9f:c3:
         00:00:f6:bf:4e:77:60:1c:0e:14:40:dc:66:4c:79:49:32:90:
         e1:87:96:27:d6:af:05:43:a9:47:6d:31:df:ff:30:89:75:18:
         10:8d:a6:12:15:8d:13:50:ed:1c:3a:5a:2b:30:f0:f5:c8:6c:
         9d:dd:22:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 11 04:12:43 2025 by rpki-client