Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A914E6AA/8EDB107EADA811EBA7C9F567C4F9AE02/078192DE0E0111F08A256F7AC4F9AE02.roa
File:                     078192DE0E0111F08A256F7AC4F9AE02.roa (raw, json)
Hash identifier:          LXGEYHuadccOutKJ+/tshTQpVwD3yYdPEV04BO81LG0=
Subject key identifier:   ED:A5:FB:DF:FF:5B:89:31:87:53:F7:7A:92:64:3C:1B:03:AE:30:86
Certificate issuer:       /CN=A914E6AA/serialNumber=A76E05B83454ED1A209025E83D75E405791892C1
Certificate serial:       08
Authority key identifier: A7:6E:05:B8:34:54:ED:1A:20:90:25:E8:3D:75:E4:05:79:18:92:C1
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/p24FuDRU7RogkCXoPXXkBXkYksE.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A914E6AA/8EDB107EADA811EBA7C9F567C4F9AE02/078192DE0E0111F08A256F7AC4F9AE02.roa
Signing time:             Fri 04 Apr 2025 23:33:39 +0000
ROA not before:           Fri 04 Apr 2025 23:33:39 +0000
ROA not after:            Tue 31 Mar 2026 00:00:00 +0000
asID:                     141459
IP address blocks:        103.160.22.0/23 maxlen: 23
                          103.160.22.0/24 maxlen: 24
                          103.160.23.0/24 maxlen: 24
                          2406:e1c0::/32 maxlen: 32
                          2406:e1c0:5::/48 maxlen: 48
                          2406:e1c0:200::/48 maxlen: 48
                          2406:e1c0:300::/48 maxlen: 48
                          2406:e1c0:400::/48 maxlen: 48
                          2406:e1c0:500::/48 maxlen: 48
                          2406:e1c0:600::/48 maxlen: 48
                          2406:e1c0:fce::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A914E6AA/8EDB107EADA811EBA7C9F567C4F9AE02/p24FuDRU7RogkCXoPXXkBXkYksE.crl
                          rsync://rpki.apnic.net/member_repository/A914E6AA/8EDB107EADA811EBA7C9F567C4F9AE02/p24FuDRU7RogkCXoPXXkBXkYksE.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/p24FuDRU7RogkCXoPXXkBXkYksE.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 23 Apr 2025 22:39:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 8 (0x8)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A914E6AA, serialNumber=A76E05B83454ED1A209025E83D75E405791892C1
        Validity
            Not Before: Apr  4 23:33:39 2025 GMT
            Not After : Mar 31 00:00:00 2026 GMT
        Subject: CN=67f06c52-a1d7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:e7:2b:d1:84:54:fa:0a:21:aa:26:5a:83:f8:
                    f0:fb:71:7a:55:1f:04:e2:a2:ba:50:1a:f1:2e:10:
                    42:44:47:1f:84:fd:8b:ee:11:fe:9c:31:5d:e1:a0:
                    ed:d6:9b:53:9c:a0:de:9b:49:67:10:1f:76:6d:e2:
                    89:cc:82:b5:3a:d2:b7:37:d2:b6:c5:3f:8c:c4:77:
                    61:cf:df:f9:df:eb:9d:10:99:80:8f:26:91:94:09:
                    43:33:6c:8d:00:54:01:9b:8c:a2:ee:43:02:2b:59:
                    fb:75:c1:da:4d:de:c2:fa:b0:b0:8b:2d:b0:57:a7:
                    e7:77:2b:2e:3d:b2:78:8c:1c:d5:28:31:d3:83:77:
                    2c:a6:5a:db:b7:d7:b2:0d:8b:03:57:8d:36:95:37:
                    d6:18:28:e8:94:03:bb:0b:5a:f6:22:12:cc:f4:8f:
                    18:bd:c3:e8:d7:f8:60:46:a6:5b:56:bc:0c:e0:4d:
                    3f:8f:0f:4b:5d:d9:d5:56:43:47:e8:79:6f:48:55:
                    20:30:4d:29:f5:30:99:04:8c:2d:1c:9b:2d:39:31:
                    7d:ef:fe:bb:4a:41:24:56:8f:4a:ae:c9:18:3e:37:
                    d9:10:68:d9:13:34:ef:0f:13:6a:80:4e:dc:27:1d:
                    44:2f:34:ab:00:27:8c:d8:93:47:f0:47:56:d2:36:
                    d5:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                ED:A5:FB:DF:FF:5B:89:31:87:53:F7:7A:92:64:3C:1B:03:AE:30:86
            X509v3 Authority Key Identifier:
                keyid:A7:6E:05:B8:34:54:ED:1A:20:90:25:E8:3D:75:E4:05:79:18:92:C1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A914E6AA/8EDB107EADA811EBA7C9F567C4F9AE02/p24FuDRU7RogkCXoPXXkBXkYksE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/p24FuDRU7RogkCXoPXXkBXkYksE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914E6AA/8EDB107EADA811EBA7C9F567C4F9AE02/078192DE0E0111F08A256F7AC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.160.22.0/23
                IPv6:
                  2406:e1c0::/32

    Signature Algorithm: sha256WithRSAEncryption
         61:8d:5a:e2:74:b0:0a:01:ac:54:e6:15:1b:8f:f2:6d:8f:e0:
         85:c7:e2:32:0c:fb:f4:5c:e0:f9:30:44:76:b5:7e:ab:a4:9c:
         40:6f:fc:85:cf:1a:4d:a6:2b:a6:6d:9b:33:77:58:7a:ee:0d:
         96:02:d7:70:7b:4e:64:79:67:e1:73:f8:77:bb:04:50:f7:08:
         e7:7c:52:e7:a4:ee:2b:d6:d5:f1:f3:6d:42:27:2b:eb:7c:51:
         b6:32:ee:4c:f1:20:34:7b:44:92:6c:2c:9d:f5:ef:55:fd:c1:
         53:d7:f5:79:1f:92:42:17:fe:a7:68:bb:09:c3:c3:9b:7b:be:
         2d:bd:a7:d1:82:47:15:6f:91:37:fa:2d:3c:70:65:d9:9d:84:
         5d:9c:80:aa:29:0a:f7:57:71:66:86:36:92:e1:2b:a4:fa:c6:
         f2:cb:e5:f2:fb:38:14:bc:be:ae:08:55:3d:02:3f:16:9c:b1:
         3d:58:a5:6a:5e:33:a1:eb:fe:19:60:aa:ef:fc:3b:6d:a8:73:
         a0:bd:44:fb:00:cb:e1:c3:74:64:df:2c:71:bc:de:2a:31:24:
         12:33:55:cc:fd:03:e9:76:bd:82:25:e5:ad:98:0e:74:86:b6:
         3a:5b:c8:d5:7f:4d:82:28:d5:53:cd:e6:57:72:95:14:91:d5:
         3d:89:2c:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 18 17:38:13 2025 by rpki-client