Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A918E319/868DD6568C2611E7BC06C44EC4F9AE02/4DFB5FE4B79211EFA70E7C4CC4F9AE02.roa
File:                     4DFB5FE4B79211EFA70E7C4CC4F9AE02.roa (raw, json)
Hash identifier:          cUYGFQ2Hcd52IbE1nA+za3lTbld4pjwZ9q9QJBaLZ6k=
Subject key identifier:   BC:57:FC:BE:24:EA:9E:98:B7:AC:07:80:A0:96:9F:48:A5:F5:AD:EF
Certificate issuer:       /CN=A918E319/serialNumber=6CFD56A77EAD9E159BCB18EB6DE862735091B54A
Certificate serial:       1980
Authority key identifier: 6C:FD:56:A7:7E:AD:9E:15:9B:CB:18:EB:6D:E8:62:73:50:91:B5:4A
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bP1Wp36tnhWbyxjrbehic1CRtUo.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918E319/868DD6568C2611E7BC06C44EC4F9AE02/4DFB5FE4B79211EFA70E7C4CC4F9AE02.roa
Signing time:             Wed 16 Jul 2025 16:54:50 +0000
ROA not before:           Wed 16 Jul 2025 16:54:50 +0000
ROA not after:            Mon 01 Dec 2025 00:00:00 +0000
asID:                     135523
IP address blocks:        103.70.251.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918E319/868DD6568C2611E7BC06C44EC4F9AE02/bP1Wp36tnhWbyxjrbehic1CRtUo.crl
                          rsync://rpki.apnic.net/member_repository/A918E319/868DD6568C2611E7BC06C44EC4F9AE02/bP1Wp36tnhWbyxjrbehic1CRtUo.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bP1Wp36tnhWbyxjrbehic1CRtUo.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 25 Jul 2025 16:34:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 6528 (0x1980)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918E319, serialNumber=6CFD56A77EAD9E159BCB18EB6DE862735091B54A
        Validity
            Not Before: Jul 16 16:54:50 2025 GMT
            Not After : Dec  1 00:00:00 2025 GMT
        Subject: CN=6877d95a-edd0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:fc:07:d4:60:53:7c:60:d1:bb:69:01:28:09:
                    a2:f6:21:14:90:52:7e:4e:d8:55:2a:4f:5f:34:f0:
                    46:de:36:7d:18:3a:7b:03:10:65:d6:10:e6:da:b7:
                    7d:f8:f4:20:de:83:11:24:3a:6f:75:7c:3a:b7:51:
                    16:3e:df:da:c6:32:a4:93:a3:e1:63:6f:6f:62:25:
                    97:ae:c6:0e:9a:bc:8c:0c:b9:2f:14:17:a3:b3:bf:
                    76:c6:29:ca:38:22:11:19:d5:1d:33:5f:0f:c2:52:
                    b1:55:34:aa:fc:3f:c7:03:ca:aa:62:8f:72:80:8e:
                    2f:a2:bd:d0:68:05:22:a3:83:01:88:76:72:e2:99:
                    72:8c:5e:23:cd:4d:89:7e:11:4a:db:c3:0f:1b:ba:
                    6b:b8:34:6f:53:ca:38:14:2e:4b:95:cc:a5:f9:05:
                    15:72:fa:1f:11:6b:24:ce:f9:56:70:c2:5d:00:9f:
                    48:54:16:af:88:c4:43:e4:33:f5:dd:39:2b:65:0f:
                    32:28:a3:30:36:f7:d1:64:0f:50:0a:15:5e:23:3d:
                    17:27:71:9c:b2:8c:0b:83:7c:38:54:29:9f:d6:62:
                    23:46:aa:32:41:6b:0b:5b:0f:7e:68:23:ae:71:01:
                    4f:0a:fe:38:cf:f3:9b:d0:ae:25:ca:a8:1a:51:0f:
                    42:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BC:57:FC:BE:24:EA:9E:98:B7:AC:07:80:A0:96:9F:48:A5:F5:AD:EF
            X509v3 Authority Key Identifier:
                keyid:6C:FD:56:A7:7E:AD:9E:15:9B:CB:18:EB:6D:E8:62:73:50:91:B5:4A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918E319/868DD6568C2611E7BC06C44EC4F9AE02/bP1Wp36tnhWbyxjrbehic1CRtUo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bP1Wp36tnhWbyxjrbehic1CRtUo.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918E319/868DD6568C2611E7BC06C44EC4F9AE02/4DFB5FE4B79211EFA70E7C4CC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.70.251.0/24

    Signature Algorithm: sha256WithRSAEncryption
         04:3f:13:4c:82:93:19:08:72:17:f0:9c:8b:52:a0:a8:58:83:
         7d:a1:f2:1e:6b:9e:f6:bc:5f:19:3c:4e:3b:00:53:7f:cf:c9:
         09:81:10:51:65:15:55:65:8d:86:66:f0:a4:17:fe:1a:a8:e9:
         cb:8d:47:82:00:22:05:04:41:e3:5b:be:54:5f:b4:10:9b:0d:
         1f:16:fd:88:a9:75:9a:c5:a5:e6:75:77:ea:08:8a:d0:32:54:
         29:e9:eb:ac:f6:73:7b:5f:39:4f:10:6a:ce:e0:12:0b:64:21:
         95:97:bd:f8:31:ed:a8:6d:e8:25:ef:29:90:06:bb:22:96:da:
         89:01:85:a1:77:5e:d8:72:b6:6c:88:69:e3:67:9b:04:44:5a:
         af:14:2f:89:76:55:b6:86:a7:16:6c:bd:9c:af:9e:8d:a3:d4:
         79:b4:9e:c0:9f:b7:2f:a0:05:d2:16:ab:38:eb:75:90:a7:5d:
         ae:34:ef:2a:c2:64:5a:14:52:92:ea:6b:c3:5b:ef:70:bf:b7:
         6b:a6:76:f1:42:51:39:86:c9:f3:ef:44:5e:66:0e:63:b8:b4:
         f4:35:80:9d:62:33:8f:c0:61:44:81:f4:10:8c:64:1f:ad:47:
         1c:53:8d:8d:54:d3:14:d4:cc:e8:5b:c7:6b:43:4d:0b:d8:a8:
         c9:18:d5:cf
-----BEGIN CERTIFICATE-----
MIIFcTCCBFmgAwIBAgICGYAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
OEUzMTkxMTAvBgNVBAUTKDZDRkQ1NkE3N0VBRDlFMTU5QkNCMThFQjZERTg2Mjcz
NTA5MUI1NEEwHhcNMjUwNzE2MTY1NDUwWhcNMjUxMjAxMDAwMDAwWjAYMRYwFAYD
VQQDEw02ODc3ZDk1YS1lZGQwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAzfwH1GBTfGDRu2kBKAmi9iEUkFJ+TthVKk9fNPBG3jZ9GDp7AxBl1hDm2rd9
+PQg3oMRJDpvdXw6t1EWPt/axjKkk6PhY29vYiWXrsYOmryMDLkvFBejs792xinK
OCIRGdUdM18PwlKxVTSq/D/HA8qqYo9ygI4vor3QaAUio4MBiHZy4plyjF4jzU2J
fhFK28MPG7pruDRvU8o4FC5Llcyl+QUVcvofEWskzvlWcMJdAJ9IVBaviMRD5DP1
3TkrZQ8yKKMwNvfRZA9QChVeIz0XJ3GcsowLg3w4VCmf1mIjRqoyQWsLWw9+aCOu
cQFPCv44z/Ob0K4lyqgaUQ9CKwIDAQABo4IClTCCApEwHQYDVR0OBBYEFLxX/L4k
6p6Yt6wHgKCWn0il9a3vMB8GA1UdIwQYMBaAFGz9Vqd+rZ4Vm8sY623oYnNQkbVK
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4RTMxOS84NjhERDY1NjhD
MjYxMUU3QkMwNkM0NEVDNEY5QUUwMi9iUDFXcDM2dG5oV2J5eGpyYmVoaWMxQ1J0
VW8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2JQMVdwMzZ0bmhXYnl4anJiZWhpYzFDUnRVby5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
OEUzMTkvODY4REQ2NTY4QzI2MTFFN0JDMDZDNDRFQzRGOUFFMDIvNERGQjVGRTRC
NzkyMTFFRkE3MEU3QzRDQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E
EDAOMAwEAgABMAYDBABnRvswDQYJKoZIhvcNAQELBQADggEBAAQ/E0yCkxkIchfw
nItSoKhYg32h8h5rnva8Xxk8TjsAU3/PyQmBEFFlFVVljYZm8KQX/hqo6cuNR4IA
IgUEQeNbvlRftBCbDR8W/YipdZrFpeZ1d+oIitAyVCnp66z2c3tfOU8Qas7gEgtk
IZWXvfgx7aht6CXvKZAGuyKW2okBhaF3XthytmyIaeNnmwREWq8UL4l2VbaGpxZs
vZyvno2j1Hm0nsCfty+gBdIWqzjrdZCnXa407yrCZFoUUpLqa8Nb73C/t2umdvFC
UTmGyfPvRF5mDmO4tPQ1gJ1iM4/AYUSB9BCMZB+tRxxTjY1U0xTUzOhbx2tDTQvY
qMkY1c8=
-----END CERTIFICATE-----
Generated at Sun Jul 20 11:27:45 2025 by rpki-client