Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A918A05D/C1EFB0804E2511EEAAAE6D49C4F9AE02/E506BE2CF03811EFAD4C2257C4F9AE02.roa
File:                     E506BE2CF03811EFAD4C2257C4F9AE02.roa (raw, json)
Hash identifier:          iRxA1ggG5Gg6gMWZuZ8L1lPJN3fft+M4sC43triwT/s=
Subject key identifier:   5B:16:DF:C2:FB:18:71:6A:44:9E:99:46:98:0E:3C:7B:BE:CF:C3:B4
Certificate issuer:       /CN=A918A05D/serialNumber=0F545E6273D7C97E9995411F76D5C4F006BB5186
Certificate serial:       0194
Authority key identifier: 0F:54:5E:62:73:D7:C9:7E:99:95:41:1F:76:D5:C4:F0:06:BB:51:86
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/D1ReYnPXyX6ZlUEfdtXE8Aa7UYY.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918A05D/C1EFB0804E2511EEAAAE6D49C4F9AE02/E506BE2CF03811EFAD4C2257C4F9AE02.roa
Signing time:             Thu 17 Jul 2025 04:40:49 +0000
ROA not before:           Thu 17 Jul 2025 04:40:49 +0000
ROA not after:            Mon 31 Aug 2026 00:00:00 +0000
asID:                     26383
IP address blocks:        103.115.17.0/24 maxlen: 24
                          103.115.18.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918A05D/C1EFB0804E2511EEAAAE6D49C4F9AE02/D1ReYnPXyX6ZlUEfdtXE8Aa7UYY.crl
                          rsync://rpki.apnic.net/member_repository/A918A05D/C1EFB0804E2511EEAAAE6D49C4F9AE02/D1ReYnPXyX6ZlUEfdtXE8Aa7UYY.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/D1ReYnPXyX6ZlUEfdtXE8Aa7UYY.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 26 Jul 2025 04:12:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 404 (0x194)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918A05D, serialNumber=0F545E6273D7C97E9995411F76D5C4F006BB5186
        Validity
            Not Before: Jul 17 04:40:49 2025 GMT
            Not After : Aug 31 00:00:00 2026 GMT
        Subject: CN=68787ed1-3470
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:3b:1e:51:01:49:d8:44:6c:cc:86:6d:40:aa:
                    0a:ab:8a:a2:85:8f:d5:f3:03:d3:aa:36:29:25:63:
                    4f:d9:aa:d0:5e:1e:f1:80:21:e0:54:c2:71:44:43:
                    df:a1:81:ab:f9:5c:9e:b7:55:25:30:8a:46:54:96:
                    e0:15:b9:90:28:39:01:bc:90:4c:7a:ca:41:72:4e:
                    a8:d3:e6:c6:4b:49:73:33:4a:cd:17:00:7e:a9:c7:
                    3d:bd:f1:c7:08:1e:4b:c9:be:4f:91:40:bd:a7:5e:
                    7f:0d:e4:c7:6a:85:3d:22:90:54:21:c0:0d:f3:30:
                    5e:f4:fd:9a:53:93:59:52:8a:72:e1:42:65:15:9a:
                    a8:c9:2e:b5:e9:e0:98:69:ea:b8:07:ec:01:7e:a2:
                    5d:9b:ef:fc:5b:9d:5e:6c:d8:79:99:d9:60:70:9a:
                    d1:e1:7b:1d:4d:99:f7:90:9b:a4:4c:ea:00:3b:c1:
                    37:0b:04:04:f0:3a:ac:53:29:b1:d8:73:b6:6b:35:
                    32:b4:95:88:46:7e:99:c2:d1:6c:26:1d:8d:eb:87:
                    0e:8a:c0:ec:a4:0d:2c:87:70:69:a8:96:45:7c:50:
                    6a:c0:15:e7:77:63:5a:86:3d:7d:b7:52:34:a1:87:
                    c3:1d:5b:c4:6b:e9:e1:07:e3:f4:c9:42:5d:33:aa:
                    6b:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5B:16:DF:C2:FB:18:71:6A:44:9E:99:46:98:0E:3C:7B:BE:CF:C3:B4
            X509v3 Authority Key Identifier:
                keyid:0F:54:5E:62:73:D7:C9:7E:99:95:41:1F:76:D5:C4:F0:06:BB:51:86

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918A05D/C1EFB0804E2511EEAAAE6D49C4F9AE02/D1ReYnPXyX6ZlUEfdtXE8Aa7UYY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/D1ReYnPXyX6ZlUEfdtXE8Aa7UYY.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918A05D/C1EFB0804E2511EEAAAE6D49C4F9AE02/E506BE2CF03811EFAD4C2257C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.115.17.0-103.115.18.255

    Signature Algorithm: sha256WithRSAEncryption
         09:dd:49:19:47:0c:d5:d4:7d:01:28:44:36:6e:e0:52:1d:a8:
         1d:63:22:e6:de:9b:16:60:c5:8e:11:84:49:ac:ca:b8:2f:c1:
         cf:f7:0a:ed:dc:91:5f:27:30:3f:38:d2:30:41:75:98:e1:65:
         22:63:19:48:7e:21:72:de:fb:f8:27:d1:96:cd:93:63:96:1b:
         33:63:26:58:1c:8c:a9:c4:6a:bf:94:7a:65:58:f8:18:3c:5b:
         69:18:1e:0d:ff:0f:86:57:06:35:0f:c1:b7:c7:90:68:51:9c:
         d3:c7:2b:d2:44:a8:db:74:28:ef:cc:2d:cb:45:71:10:60:66:
         f0:ab:c5:86:03:a5:d7:e9:b7:d9:54:bb:36:c4:7f:24:4d:22:
         75:d0:53:73:a4:c3:51:b6:73:60:3e:83:f2:5f:06:ac:4d:0b:
         b1:1c:fe:d8:83:fe:23:2e:5f:6c:31:13:2e:44:58:ed:12:c6:
         4f:cc:07:40:17:8b:fd:a5:c1:f2:e7:dc:8b:af:35:9b:d2:29:
         d4:30:c0:c4:66:d3:01:3b:ab:67:ce:ff:36:15:64:ab:23:58:
         d9:63:9f:72:a3:b1:c0:e5:0f:c6:b1:6b:ca:fb:86:42:c5:15:
         ce:78:c1:53:6b:04:fa:50:81:1f:7c:30:65:30:4a:fa:84:f2:
         03:b4:55:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 20 19:00:17 2025 by rpki-client