Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A915D4F2/D299F8ECB9AB11EC91E3D165C4F9AE02/319786BEB63B11EF8D06900EC4F9AE02.roa
File:                     319786BEB63B11EF8D06900EC4F9AE02.roa (raw, json)
Hash identifier:          jSZIZjYKkStn9QppODMFCLkxqd3q8dcDZLkti6SpjkQ=
Subject key identifier:   1B:52:C4:1F:AE:3D:9D:F0:10:53:B3:4B:46:AC:11:24:10:A1:EB:A6
Certificate issuer:       /CN=A915D4F2/serialNumber=7D18D877502105FA1872ADEE4CF2623C414F16B5
Certificate serial:       0362
Authority key identifier: 7D:18:D8:77:50:21:05:FA:18:72:AD:EE:4C:F2:62:3C:41:4F:16:B5
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fRjYd1AhBfoYcq3uTPJiPEFPFrU.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A915D4F2/D299F8ECB9AB11EC91E3D165C4F9AE02/319786BEB63B11EF8D06900EC4F9AE02.roa
Signing time:             Fri 25 Apr 2025 00:56:29 +0000
ROA not before:           Fri 25 Apr 2025 00:56:29 +0000
ROA not after:            Wed 01 Jul 2026 00:00:00 +0000
asID:                     149770
IP address blocks:        103.185.250.0/24 maxlen: 24
                          2001:df4:bfc0::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A915D4F2/D299F8ECB9AB11EC91E3D165C4F9AE02/fRjYd1AhBfoYcq3uTPJiPEFPFrU.crl
                          rsync://rpki.apnic.net/member_repository/A915D4F2/D299F8ECB9AB11EC91E3D165C4F9AE02/fRjYd1AhBfoYcq3uTPJiPEFPFrU.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fRjYd1AhBfoYcq3uTPJiPEFPFrU.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 02 May 2025 00:56:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 866 (0x362)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A915D4F2, serialNumber=7D18D877502105FA1872ADEE4CF2623C414F16B5
        Validity
            Not Before: Apr 25 00:56:29 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=680addbd-5a55
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:4f:77:ea:89:41:d6:b9:6b:bc:fa:3f:ec:7a:
                    d4:04:b8:35:21:66:e5:ff:e9:4d:46:db:ff:b8:c1:
                    13:f2:3a:ce:12:36:bf:6a:49:16:da:71:10:f7:b0:
                    72:4b:01:e3:11:60:01:07:dc:a3:aa:96:3f:f6:3d:
                    03:ff:a3:17:ee:15:d2:2a:41:a8:28:1b:9c:43:1a:
                    bc:fb:0a:73:31:46:ee:14:f0:53:80:4e:78:41:98:
                    64:8d:e3:15:57:27:60:d9:72:86:29:aa:ce:6d:f8:
                    05:f9:f7:44:0a:d4:00:ae:ea:c1:96:20:bc:94:04:
                    86:6f:8d:01:b1:8b:6f:f1:a2:13:1a:85:e6:3e:94:
                    99:4d:7f:53:93:a4:78:21:b9:0f:9e:3b:00:46:ee:
                    23:16:d6:f2:99:33:c3:af:2b:08:ac:84:ac:69:0e:
                    8a:73:c4:7e:e6:8e:48:ee:fc:94:7f:d3:8a:1f:88:
                    d6:b1:6b:02:95:35:45:99:36:c0:f7:35:a4:67:4c:
                    3f:b9:67:f6:1b:21:3e:f9:6b:85:ad:ef:af:c5:57:
                    26:85:93:42:44:cc:9a:82:8b:c7:d2:35:ab:c3:18:
                    a6:1d:92:75:d2:a1:24:88:0a:36:af:c0:75:72:96:
                    75:4b:c9:00:a4:12:d6:32:18:42:02:ad:c2:c1:8c:
                    a0:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1B:52:C4:1F:AE:3D:9D:F0:10:53:B3:4B:46:AC:11:24:10:A1:EB:A6
            X509v3 Authority Key Identifier:
                keyid:7D:18:D8:77:50:21:05:FA:18:72:AD:EE:4C:F2:62:3C:41:4F:16:B5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A915D4F2/D299F8ECB9AB11EC91E3D165C4F9AE02/fRjYd1AhBfoYcq3uTPJiPEFPFrU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fRjYd1AhBfoYcq3uTPJiPEFPFrU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915D4F2/D299F8ECB9AB11EC91E3D165C4F9AE02/319786BEB63B11EF8D06900EC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.185.250.0/24
                IPv6:
                  2001:df4:bfc0::/48

    Signature Algorithm: sha256WithRSAEncryption
         c9:c4:6f:1c:4a:bf:16:cf:6a:79:7d:3f:f2:b6:b6:40:d5:2d:
         b7:8d:50:63:6c:b0:fb:31:9b:43:e3:6e:b4:39:0a:d0:2d:1c:
         ab:4f:a4:de:83:96:a6:d5:22:7e:e1:6d:31:65:15:25:69:d5:
         32:17:88:82:d3:51:7d:03:4b:c3:c3:d9:90:b3:d0:bc:a3:ff:
         3f:ab:56:6b:c7:2d:93:03:03:65:57:6c:f3:ca:4e:06:47:a8:
         de:09:8d:7f:7e:20:26:af:a6:69:e9:44:9d:ee:4c:c7:2d:c6:
         7b:2c:a9:e2:52:47:2d:62:8c:f1:bb:50:a3:03:6e:72:fa:27:
         9b:a4:e3:f7:67:39:15:cf:c8:60:86:e9:57:e2:a6:a4:23:f6:
         5d:99:3b:d7:e1:e8:a5:ff:81:23:95:83:65:c7:70:ca:14:d8:
         39:6f:d9:bf:b1:c5:c8:40:3b:42:4f:7d:47:d0:c4:81:86:f2:
         a8:e2:88:f1:2a:42:6f:9b:00:4c:05:d5:a8:7d:7f:84:6d:c2:
         ac:c4:18:21:64:0b:51:e1:e3:b9:e3:de:3e:43:76:a3:ab:11:
         8d:bc:e7:6e:83:bb:a2:b8:b8:e5:05:e8:06:62:cc:fe:15:d2:
         ee:f5:5d:dd:2c:a1:31:ee:29:e9:0b:5b:00:67:fc:78:f8:e2:
         6f:d1:07:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 12:25:28 2025 by rpki-client