Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9180882/DF3AB46CB72D11ED85DD3017C4F9AE02/EAD89080BA8B11EDB9005884C4F9AE02.roa
File:                     EAD89080BA8B11EDB9005884C4F9AE02.roa (raw, json)
Hash identifier:          cK40QtT2CNNImNuy8pJFpePuMkD3LPBAr2rQnfOdgKg=
Subject key identifier:   0A:33:7D:F7:0A:B8:1B:E7:25:96:64:E4:FA:FC:6B:79:9B:0A:8C:44
Certificate issuer:       /CN=A9180882/serialNumber=C2B81C9A935BB2B33BD69FB79B34EE3267399DB6
Certificate serial:       0180
Authority key identifier: C2:B8:1C:9A:93:5B:B2:B3:3B:D6:9F:B7:9B:34:EE:32:67:39:9D:B6
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wrgcmpNbsrM71p-3mzTuMmc5nbY.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9180882/DF3AB46CB72D11ED85DD3017C4F9AE02/EAD89080BA8B11EDB9005884C4F9AE02.roa
Signing time:             Sun 09 Mar 2025 02:48:50 +0000
ROA not before:           Sun 09 Mar 2025 02:48:50 +0000
ROA not after:            Thu 28 May 2026 00:00:00 +0000
asID:                     150782
IP address blocks:        103.197.50.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9180882/DF3AB46CB72D11ED85DD3017C4F9AE02/wrgcmpNbsrM71p-3mzTuMmc5nbY.crl
                          rsync://rpki.apnic.net/member_repository/A9180882/DF3AB46CB72D11ED85DD3017C4F9AE02/wrgcmpNbsrM71p-3mzTuMmc5nbY.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wrgcmpNbsrM71p-3mzTuMmc5nbY.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 16 Apr 2025 02:30:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 384 (0x180)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9180882
        Validity
            Not Before: Mar  9 02:48:50 2025 GMT
            Not After : May 28 00:00:00 2026 GMT
        Subject: CN=67cd0192-eea3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:e9:ad:d8:88:3a:78:05:55:0c:4b:dd:99:b6:
                    b1:7e:2e:cd:fe:a2:ca:69:d9:38:61:bd:eb:6c:19:
                    68:4f:0e:52:01:c1:0a:54:1a:48:30:50:a9:0f:aa:
                    6a:d1:70:20:d0:72:82:1f:6e:5a:9e:97:b5:33:ba:
                    df:92:06:8b:d7:96:0a:2a:f6:e6:67:94:02:23:f2:
                    80:3c:79:47:ac:e9:37:14:1f:8a:37:13:94:6b:0f:
                    58:8f:64:93:25:89:cb:2e:13:87:35:f8:20:28:48:
                    86:7c:45:e8:5c:e9:63:c3:e2:18:ea:b9:28:68:89:
                    91:16:09:76:03:bb:e8:a8:98:b4:16:f1:af:83:38:
                    75:ce:d8:22:57:34:c9:c2:ab:ad:9c:8a:ad:f2:1b:
                    0f:17:51:ab:93:2d:bc:8e:96:bb:ef:8b:94:e3:52:
                    d8:ce:81:c3:0e:50:d6:ab:94:c0:7e:df:cf:e4:d6:
                    04:92:95:f2:2a:d7:d3:06:c4:88:ce:3b:5a:48:75:
                    c7:85:59:88:62:5e:e0:51:e8:3b:e9:c4:5f:75:10:
                    2e:94:53:b8:b9:63:7d:6f:ed:a8:ca:68:16:dc:c2:
                    b7:fb:c5:b4:e1:50:10:39:b1:98:02:4d:de:bc:b2:
                    e6:c3:26:71:3f:9d:5d:31:e5:95:12:f3:0a:f2:aa:
                    6c:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0A:33:7D:F7:0A:B8:1B:E7:25:96:64:E4:FA:FC:6B:79:9B:0A:8C:44
            X509v3 Authority Key Identifier:
                keyid:C2:B8:1C:9A:93:5B:B2:B3:3B:D6:9F:B7:9B:34:EE:32:67:39:9D:B6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9180882/DF3AB46CB72D11ED85DD3017C4F9AE02/wrgcmpNbsrM71p-3mzTuMmc5nbY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wrgcmpNbsrM71p-3mzTuMmc5nbY.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9180882/DF3AB46CB72D11ED85DD3017C4F9AE02/EAD89080BA8B11EDB9005884C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.197.50.0/24

    Signature Algorithm: sha256WithRSAEncryption
         89:80:df:4a:84:be:c8:92:01:cc:93:91:a1:66:82:be:c3:b8:
         f1:2f:ce:d5:05:b1:80:39:03:63:ec:2f:ce:d9:a6:b8:ac:27:
         33:35:d8:2f:13:fd:72:92:b1:39:70:b8:f7:4a:de:ca:29:59:
         0a:7e:4d:5d:22:8b:2b:99:8f:11:a1:8a:19:1e:0b:6d:ce:e6:
         c3:e9:d7:a1:f7:71:ac:5f:7d:7c:96:bd:5a:0c:ba:43:bb:c0:
         ef:ec:70:ac:ad:8f:3d:ae:b4:32:c4:f5:94:d0:0f:eb:f1:5a:
         9c:24:80:6e:c1:5e:28:55:e9:14:44:79:c8:9b:27:d1:8f:f4:
         0f:ca:ee:f2:6c:16:9c:ec:30:7f:1f:a4:5f:2c:69:d7:0c:12:
         d0:9f:b3:13:63:07:3d:fb:2b:ef:8b:e3:78:1b:dd:73:c6:ae:
         39:54:69:fe:e2:3f:6e:40:7c:5e:25:93:35:d0:76:76:be:24:
         b2:7e:ba:b6:87:55:da:73:9f:6c:44:84:67:33:f2:bd:01:ea:
         09:9b:5d:ca:79:cf:11:a5:1d:af:b2:7c:bf:41:93:5b:98:39:
         5c:d0:c4:09:b0:82:6a:e9:5f:cd:22:da:9d:72:7e:99:22:97:
         81:08:26:30:99:38:05:d8:63:6e:dd:e1:b9:a3:7e:a6:92:bf:
         b6:64:f2:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 15:49:05 2025 by rpki-client