Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9160F2D/085A70489DF911EC83CCFA65C4F9AE02/F7EA272C043111EDB7DA7485C4F9AE02.roa
File:                     F7EA272C043111EDB7DA7485C4F9AE02.roa (raw, json)
Hash identifier:          5W3ewgTY4MZlMpsR+rLrO2l/JgTg/KEaYj7RxuRG5bs=
Subject key identifier:   2E:B6:5E:AE:CC:E3:B6:ED:89:0C:F5:62:DB:40:AE:74:75:94:D7:2E
Certificate issuer:       /CN=A9160F2D/serialNumber=EC5740C476D7FFF44BA61F857915A1F179931A4A
Certificate serial:       0386
Authority key identifier: EC:57:40:C4:76:D7:FF:F4:4B:A6:1F:85:79:15:A1:F1:79:93:1A:4A
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7FdAxHbX__RLph-FeRWh8XmTGko.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9160F2D/085A70489DF911EC83CCFA65C4F9AE02/F7EA272C043111EDB7DA7485C4F9AE02.roa
Signing time:             Sat 05 Apr 2025 01:06:15 +0000
ROA not before:           Sat 05 Apr 2025 01:06:15 +0000
ROA not after:            Tue 31 Mar 2026 00:00:00 +0000
asID:                     142403
IP address blocks:        103.146.50.0/24 maxlen: 24
                          103.146.51.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9160F2D/085A70489DF911EC83CCFA65C4F9AE02/7FdAxHbX__RLph-FeRWh8XmTGko.crl
                          rsync://rpki.apnic.net/member_repository/A9160F2D/085A70489DF911EC83CCFA65C4F9AE02/7FdAxHbX__RLph-FeRWh8XmTGko.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7FdAxHbX__RLph-FeRWh8XmTGko.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 02 May 2025 00:36:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 902 (0x386)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9160F2D, serialNumber=EC5740C476D7FFF44BA61F857915A1F179931A4A
        Validity
            Not Before: Apr  5 01:06:15 2025 GMT
            Not After : Mar 31 00:00:00 2026 GMT
        Subject: CN=67f08207-bd3c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:72:40:bb:7b:ac:43:57:aa:50:50:2e:c8:e9:
                    23:a3:29:65:84:91:a7:0f:1c:51:da:f0:aa:1f:9e:
                    4a:4f:43:b3:bb:91:1e:eb:c2:3c:6c:bf:79:a3:30:
                    95:e4:45:a1:b1:99:81:f7:0d:92:98:0b:32:c6:1f:
                    0e:24:6e:a6:fb:cc:50:59:d1:51:c0:d2:f9:3d:4c:
                    a5:9f:a0:aa:1d:cd:cb:0e:83:b7:ab:28:b9:3f:07:
                    41:0b:cb:52:9e:00:b7:22:d4:a5:90:b1:63:3e:8a:
                    a9:2f:04:1f:fa:68:2a:cc:17:c5:66:ce:d6:c8:24:
                    6b:9e:bd:62:76:d0:14:78:ae:44:b8:d2:7e:d8:c8:
                    27:5b:11:c9:25:08:ab:8b:97:5e:0b:1b:54:ea:d8:
                    f5:64:b6:25:e6:15:dc:3f:c0:cd:ac:d1:7f:42:9d:
                    b5:b3:a2:99:96:eb:52:6f:d9:eb:ff:67:f9:35:73:
                    38:8d:38:46:d4:94:7d:c2:f0:55:39:68:57:13:20:
                    84:bd:7b:8c:ef:b2:0f:96:0a:bb:0a:b6:5d:fd:4b:
                    b1:11:24:61:b6:24:b4:49:21:94:60:e7:35:25:e9:
                    a1:8c:c3:b3:26:54:7b:72:3a:a2:01:86:38:3d:ca:
                    83:0f:18:54:a8:b7:76:22:c8:50:50:17:ad:45:fb:
                    cf:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2E:B6:5E:AE:CC:E3:B6:ED:89:0C:F5:62:DB:40:AE:74:75:94:D7:2E
            X509v3 Authority Key Identifier:
                keyid:EC:57:40:C4:76:D7:FF:F4:4B:A6:1F:85:79:15:A1:F1:79:93:1A:4A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9160F2D/085A70489DF911EC83CCFA65C4F9AE02/7FdAxHbX__RLph-FeRWh8XmTGko.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7FdAxHbX__RLph-FeRWh8XmTGko.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9160F2D/085A70489DF911EC83CCFA65C4F9AE02/F7EA272C043111EDB7DA7485C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.146.50.0/23

    Signature Algorithm: sha256WithRSAEncryption
         46:a1:2e:f1:c7:83:bc:51:67:08:df:78:67:2f:cd:f6:ca:3d:
         e2:24:02:1a:dd:66:9a:9a:b5:f7:9d:38:a2:3d:10:1d:2e:2c:
         88:ce:46:26:1c:1e:cf:f5:02:66:ad:dd:cc:df:bc:79:27:a4:
         a6:45:a1:2c:48:a9:00:c7:76:ab:c3:6c:e0:de:b6:db:2c:f2:
         57:cf:7c:b9:86:21:b4:c4:47:b3:1a:cc:93:f3:a2:e7:b7:bc:
         c8:ee:6d:6d:76:b7:7b:b7:e7:fd:21:b5:b7:c7:05:53:7a:c7:
         11:61:8b:30:08:2a:ee:ea:b1:98:e5:93:a6:c3:22:95:31:cd:
         44:c7:72:6d:a1:af:2b:a0:09:66:cb:f2:13:59:65:a2:60:10:
         58:fb:29:b4:6d:ef:d5:15:70:60:c9:60:15:8a:c4:1a:67:7d:
         34:61:b9:1f:4f:6e:b2:41:3c:a2:ed:ac:12:ba:1a:9b:71:af:
         0d:8c:5d:41:3e:ac:db:ab:0b:2e:85:da:5c:d2:17:ac:dc:d9:
         3d:51:f2:e8:e3:26:b3:f7:41:71:e3:39:4c:a5:fd:b7:ed:8a:
         c3:01:7b:fa:8d:bf:46:85:38:be:1e:61:09:5e:ce:5f:a6:b6:
         b5:2c:50:e4:99:57:29:73:9b:83:8e:7d:e1:d4:7b:92:db:66:
         b5:52:bc:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 08:00:36 2025 by rpki-client