Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A918A05D/C1EFB0804E2511EEAAAE6D49C4F9AE02/B67EFE26A2DB11EEABACB981C4F9AE02.roa
File:                     B67EFE26A2DB11EEABACB981C4F9AE02.roa (raw, json)
Hash identifier:          bYvF1gDJX1ZeUVWwtl4pq/MaUKBYzhyJEZ9Gr/fKvjk=
Subject key identifier:   C0:4B:47:47:FC:B6:B9:D8:A9:FA:30:00:C0:BA:61:5A:2C:12:3D:32
Certificate issuer:       /CN=A918A05D/serialNumber=0F545E6273D7C97E9995411F76D5C4F006BB5186
Certificate serial:       0193
Authority key identifier: 0F:54:5E:62:73:D7:C9:7E:99:95:41:1F:76:D5:C4:F0:06:BB:51:86
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/D1ReYnPXyX6ZlUEfdtXE8Aa7UYY.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918A05D/C1EFB0804E2511EEAAAE6D49C4F9AE02/B67EFE26A2DB11EEABACB981C4F9AE02.roa
Signing time:             Thu 17 Jul 2025 04:40:48 +0000
ROA not before:           Thu 17 Jul 2025 04:40:48 +0000
ROA not after:            Mon 31 Aug 2026 00:00:00 +0000
asID:                     146943
IP address blocks:        103.115.19.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918A05D/C1EFB0804E2511EEAAAE6D49C4F9AE02/D1ReYnPXyX6ZlUEfdtXE8Aa7UYY.crl
                          rsync://rpki.apnic.net/member_repository/A918A05D/C1EFB0804E2511EEAAAE6D49C4F9AE02/D1ReYnPXyX6ZlUEfdtXE8Aa7UYY.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/D1ReYnPXyX6ZlUEfdtXE8Aa7UYY.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 26 Jul 2025 04:12:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 403 (0x193)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918A05D, serialNumber=0F545E6273D7C97E9995411F76D5C4F006BB5186
        Validity
            Not Before: Jul 17 04:40:48 2025 GMT
            Not After : Aug 31 00:00:00 2026 GMT
        Subject: CN=68787ed0-bc00
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:5b:28:ba:ec:8d:c5:dc:2c:33:c1:f2:14:27:
                    b9:11:52:c8:8a:1d:b3:0f:9d:ee:31:c1:a5:21:86:
                    73:cc:55:4b:19:90:9b:7f:51:9a:e8:0d:ba:c6:bd:
                    e7:8f:73:9a:1b:39:12:43:97:5e:bc:21:c8:61:2f:
                    17:8a:45:89:da:10:c5:a2:ff:dd:18:eb:a0:ca:6b:
                    6e:04:a1:bc:78:af:7d:76:dc:cb:83:48:73:26:97:
                    51:60:23:27:59:88:04:36:0a:f6:29:88:c7:75:da:
                    52:bc:32:cf:b3:52:e0:66:95:38:c2:ed:7a:a6:0b:
                    ee:99:19:59:ac:4a:2d:25:8f:75:b9:f3:6a:55:00:
                    93:27:0b:d8:ce:ba:0c:13:f3:58:e4:6d:de:d4:ee:
                    27:56:bc:8a:27:de:d7:09:f9:c9:b3:cb:93:20:eb:
                    b4:e8:ab:71:7e:bd:a6:ea:96:0d:93:3c:b6:50:1b:
                    63:80:c6:33:a1:46:86:55:1b:89:d1:d0:5b:67:d1:
                    0b:3c:bd:71:10:04:14:bf:96:05:ba:7e:97:b0:7e:
                    40:7d:ed:89:6b:e8:40:a4:75:4b:65:4d:6c:50:6b:
                    7f:35:7b:de:24:3c:d7:e6:bf:55:7c:f4:79:67:0d:
                    7e:40:b5:53:ca:3d:6c:1d:57:6b:b4:ad:5b:3a:2d:
                    a5:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C0:4B:47:47:FC:B6:B9:D8:A9:FA:30:00:C0:BA:61:5A:2C:12:3D:32
            X509v3 Authority Key Identifier:
                keyid:0F:54:5E:62:73:D7:C9:7E:99:95:41:1F:76:D5:C4:F0:06:BB:51:86

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918A05D/C1EFB0804E2511EEAAAE6D49C4F9AE02/D1ReYnPXyX6ZlUEfdtXE8Aa7UYY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/D1ReYnPXyX6ZlUEfdtXE8Aa7UYY.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918A05D/C1EFB0804E2511EEAAAE6D49C4F9AE02/B67EFE26A2DB11EEABACB981C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.115.19.0/24

    Signature Algorithm: sha256WithRSAEncryption
         65:9c:28:67:98:97:0f:2f:cd:b9:16:78:38:eb:cb:5d:13:15:
         9d:51:ad:0e:b1:1d:69:7c:18:4a:dd:78:c0:39:a4:f3:f1:a3:
         9b:10:51:9e:94:9b:f8:09:cb:42:52:a6:89:f4:5e:7c:21:73:
         11:6b:c2:c6:57:a5:a2:da:1b:0c:db:9d:d5:20:38:a5:e9:c7:
         4d:dd:70:b6:3f:80:24:5b:36:f2:ea:af:a5:46:a4:b0:50:e9:
         e4:67:ce:f3:97:3e:e5:77:ac:3f:c3:9d:b0:dd:ec:33:46:d8:
         87:e8:a3:96:35:a3:21:21:12:56:d7:b1:01:0d:cd:b3:c5:ab:
         38:e8:d1:76:82:1b:ec:89:4d:9b:cf:ba:61:e8:eb:44:1f:bf:
         d8:71:a3:ea:f2:d4:48:12:7a:f0:c0:79:91:33:82:92:57:46:
         14:a7:a7:47:f5:87:04:c9:b0:5a:ee:02:a8:06:ce:a6:fc:83:
         c8:a6:6b:e4:06:5c:e2:58:7f:60:bf:9f:31:d8:6a:dc:76:64:
         3a:20:fa:e7:d7:88:41:b6:1f:e2:ce:92:23:7c:ae:05:2f:cf:
         5d:be:c9:0c:b7:3e:df:41:47:34:c8:59:57:59:93:3f:50:a2:
         91:f1:4e:3e:cb:7c:06:d9:52:fb:71:49:60:a2:80:03:d8:e5:
         60:7a:ea:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 20 14:21:06 2025 by rpki-client