Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A918F550/8B9BD2021D8511E2B41230DC08B02CD2/92BBD4741F2F11F082D2AB82C4F9AE02.roa
File:                     92BBD4741F2F11F082D2AB82C4F9AE02.roa (raw, json)
Hash identifier:          YV/B6jqKt8I2g2TebPLm9+0AgyH5G6psFP7Pfncdwmw=
Subject key identifier:   CB:BB:75:01:7E:12:28:96:1C:72:E9:54:2F:90:82:D7:83:9C:EB:D6
Certificate issuer:       /CN=A918F550/serialNumber=A24B6A62044B70065F0506388460E4AF2F17F3FF
Certificate serial:       352B
Authority key identifier: A2:4B:6A:62:04:4B:70:06:5F:05:06:38:84:60:E4:AF:2F:17:F3:FF
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oktqYgRLcAZfBQY4hGDkry8X8_8.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918F550/8B9BD2021D8511E2B41230DC08B02CD2/92BBD4741F2F11F082D2AB82C4F9AE02.roa
Signing time:             Tue 22 Apr 2025 04:09:23 +0000
ROA not before:           Tue 22 Apr 2025 04:09:23 +0000
ROA not after:            Tue 30 Sep 2025 00:00:00 +0000
asID:                     45845
IP address blocks:        103.235.196.0/22 maxlen: 24
                          103.250.135.0/24 maxlen: 24
                          202.51.66.0/24 maxlen: 24
                          202.51.70.0/24 maxlen: 24
                          2405:6600::/32 maxlen: 32
                          2405:6600:201::/48 maxlen: 48
                          2405:6600:600::/48 maxlen: 48
                          2405:6600:701::/48 maxlen: 48
                          2405:6600:702::/48 maxlen: 48
                          2405:6600:703::/48 maxlen: 48
                          2405:6600:709::/48 maxlen: 48
                          2405:6600:c00::/48 maxlen: 48
                          2405:6600:c43::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918F550/8B9BD2021D8511E2B41230DC08B02CD2/oktqYgRLcAZfBQY4hGDkry8X8_8.crl
                          rsync://rpki.apnic.net/member_repository/A918F550/8B9BD2021D8511E2B41230DC08B02CD2/oktqYgRLcAZfBQY4hGDkry8X8_8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oktqYgRLcAZfBQY4hGDkry8X8_8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 03 May 2025 14:25:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 13611 (0x352b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918F550, serialNumber=A24B6A62044B70065F0506388460E4AF2F17F3FF
        Validity
            Not Before: Apr 22 04:09:23 2025 GMT
            Not After : Sep 30 00:00:00 2025 GMT
        Subject: CN=68071673-a0e8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:66:09:cd:44:d1:bf:3c:53:28:b8:53:8d:93:
                    11:af:58:23:1d:ce:be:3e:83:75:4e:25:9a:a1:d1:
                    8f:b5:34:3b:7a:a2:4a:84:d2:a5:58:61:ee:11:bd:
                    df:00:c7:fd:f1:9d:74:c6:29:01:09:aa:68:a5:58:
                    30:41:10:8a:64:56:cd:f5:44:91:c7:2f:99:58:f4:
                    f4:f8:b7:da:a8:ba:0b:3b:fd:ec:ac:5a:17:1f:f6:
                    5d:7a:11:2d:f0:e6:2f:09:5a:86:18:e0:47:c7:6e:
                    35:65:60:c2:9a:27:09:4e:78:15:45:58:ff:58:bc:
                    fd:c8:50:00:7c:e0:6a:22:18:ac:94:d2:c3:8c:83:
                    44:4c:c0:d1:d0:11:e0:3f:22:15:b7:43:0e:0a:f0:
                    f0:67:a4:b7:18:fb:f4:9c:f7:47:12:a6:f5:3b:91:
                    7b:35:45:a4:33:59:d7:73:e6:b3:93:6a:42:40:4e:
                    6d:01:93:78:11:15:8c:c5:91:4c:25:5b:29:ee:c8:
                    de:36:68:22:f6:04:5c:a4:64:f0:78:4e:89:1d:4a:
                    31:98:d8:7b:2b:65:f9:8d:de:9f:5b:1e:09:6b:3d:
                    a7:f9:92:8f:f1:af:f7:67:27:71:fb:06:29:26:c8:
                    0c:20:2e:6e:67:41:c0:ab:39:48:10:3e:fc:2f:87:
                    06:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CB:BB:75:01:7E:12:28:96:1C:72:E9:54:2F:90:82:D7:83:9C:EB:D6
            X509v3 Authority Key Identifier:
                keyid:A2:4B:6A:62:04:4B:70:06:5F:05:06:38:84:60:E4:AF:2F:17:F3:FF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918F550/8B9BD2021D8511E2B41230DC08B02CD2/oktqYgRLcAZfBQY4hGDkry8X8_8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oktqYgRLcAZfBQY4hGDkry8X8_8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918F550/8B9BD2021D8511E2B41230DC08B02CD2/92BBD4741F2F11F082D2AB82C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.235.196.0/22
                  103.250.135.0/24
                  202.51.66.0/24
                  202.51.70.0/24
                IPv6:
                  2405:6600::/32

    Signature Algorithm: sha256WithRSAEncryption
         52:7b:f0:30:f5:43:35:24:4a:dd:cc:32:f4:68:c2:cb:0b:fc:
         f9:84:20:73:d3:89:cb:cb:3e:51:2c:66:2e:00:09:da:58:aa:
         d9:78:8f:76:94:ff:d9:be:39:39:f0:24:e2:5f:fd:a7:ba:b9:
         fb:8e:81:8d:25:f0:6d:e2:8e:39:d7:21:24:d0:e0:68:3b:5e:
         78:86:3c:a7:d7:bd:00:31:b7:15:cd:fd:95:c6:ae:54:00:95:
         58:1a:c4:18:f4:d0:fb:66:17:17:7a:e7:d7:bf:f6:53:45:d6:
         68:b1:7f:9d:ef:64:50:08:14:94:07:46:7a:9e:9b:51:97:ae:
         05:78:40:fb:56:a6:e2:f4:b4:45:3b:ac:d4:4e:b9:7a:da:32:
         fe:7d:6e:6b:9c:89:e6:25:a7:ac:94:86:b7:b9:32:95:43:a5:
         9f:82:5f:2a:ee:51:f6:5a:03:a7:c0:ab:e7:ec:fb:7f:e1:eb:
         1f:47:4e:d7:70:ab:6c:f6:ac:73:7c:1d:ae:d8:90:bf:8b:ea:
         7e:3e:8b:51:17:2f:dc:b2:f2:48:ec:97:73:4c:80:81:86:f0:
         02:75:b1:c2:61:79:0b:87:e6:ca:d8:3f:ce:a7:5b:58:37:ed:
         38:7e:5d:41:37:19:f5:f3:ab:51:38:ff:9b:40:dd:fb:32:e6:
         d9:ca:84:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 16:32:50 2025 by rpki-client