Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A918E319/868DD6568C2611E7BC06C44EC4F9AE02/7AF2C29C50C811F09EF54B31C4F9AE02.roa
File:                     7AF2C29C50C811F09EF54B31C4F9AE02.roa (raw, json)
Hash identifier:          U/sRlh4x5nMgUff2/Uwi/I5a93hQENL6vbMgv7/7lB8=
Subject key identifier:   08:C8:94:B9:3F:A2:16:2C:02:AE:C2:24:71:90:A3:6A:4D:E1:7D:72
Certificate issuer:       /CN=A918E319/serialNumber=6CFD56A77EAD9E159BCB18EB6DE862735091B54A
Certificate serial:       1981
Authority key identifier: 6C:FD:56:A7:7E:AD:9E:15:9B:CB:18:EB:6D:E8:62:73:50:91:B5:4A
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bP1Wp36tnhWbyxjrbehic1CRtUo.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918E319/868DD6568C2611E7BC06C44EC4F9AE02/7AF2C29C50C811F09EF54B31C4F9AE02.roa
Signing time:             Wed 16 Jul 2025 16:54:52 +0000
ROA not before:           Wed 16 Jul 2025 16:54:52 +0000
ROA not after:            Mon 01 Dec 2025 00:00:00 +0000
asID:                     135567
IP address blocks:        103.70.250.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918E319/868DD6568C2611E7BC06C44EC4F9AE02/bP1Wp36tnhWbyxjrbehic1CRtUo.crl
                          rsync://rpki.apnic.net/member_repository/A918E319/868DD6568C2611E7BC06C44EC4F9AE02/bP1Wp36tnhWbyxjrbehic1CRtUo.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bP1Wp36tnhWbyxjrbehic1CRtUo.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 25 Jul 2025 16:34:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 6529 (0x1981)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918E319, serialNumber=6CFD56A77EAD9E159BCB18EB6DE862735091B54A
        Validity
            Not Before: Jul 16 16:54:52 2025 GMT
            Not After : Dec  1 00:00:00 2025 GMT
        Subject: CN=6877d95b-fae3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:b4:08:45:a9:40:c9:cc:5c:20:b5:68:44:32:
                    49:35:e2:3f:b6:7e:da:bc:13:ca:bc:e8:ad:b8:43:
                    c9:6a:af:c5:59:ed:e9:da:0d:1c:ff:85:70:89:85:
                    17:e1:69:d9:d7:a4:4c:ba:38:d7:d6:21:fe:7b:e2:
                    01:92:9e:12:0a:b4:f5:21:c5:6d:97:1a:45:37:53:
                    bf:57:7e:32:0d:b3:32:a9:07:60:40:9d:1b:21:16:
                    af:91:cc:91:89:10:0b:71:c2:6c:77:25:71:55:3f:
                    d7:2f:17:b3:e4:0c:fd:51:48:bd:b8:64:91:05:ca:
                    fc:d5:11:01:75:c9:f9:84:2a:c0:65:30:06:ac:32:
                    10:ed:5d:86:a8:d7:98:42:d7:8e:a9:1b:01:7c:b2:
                    89:85:66:2a:65:0a:2a:a8:3b:00:d9:5a:85:d7:da:
                    4b:62:70:69:00:c0:e9:a4:08:48:b1:90:5c:8f:94:
                    fa:73:12:74:d3:f6:98:ce:b9:55:22:8a:17:d5:fe:
                    81:73:7a:94:cf:a7:46:0c:2e:fb:79:d6:49:51:c2:
                    34:6c:38:d2:d3:21:a2:3b:37:08:6a:52:45:51:97:
                    e4:19:5c:a9:eb:f1:e9:fd:88:fe:50:c2:46:f1:9f:
                    14:2a:d8:55:39:b3:36:b9:aa:bb:81:02:f8:b7:e9:
                    60:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                08:C8:94:B9:3F:A2:16:2C:02:AE:C2:24:71:90:A3:6A:4D:E1:7D:72
            X509v3 Authority Key Identifier:
                keyid:6C:FD:56:A7:7E:AD:9E:15:9B:CB:18:EB:6D:E8:62:73:50:91:B5:4A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918E319/868DD6568C2611E7BC06C44EC4F9AE02/bP1Wp36tnhWbyxjrbehic1CRtUo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bP1Wp36tnhWbyxjrbehic1CRtUo.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918E319/868DD6568C2611E7BC06C44EC4F9AE02/7AF2C29C50C811F09EF54B31C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.70.250.0/24

    Signature Algorithm: sha256WithRSAEncryption
         09:36:90:14:5c:71:3c:9a:1c:7c:f4:62:39:7b:92:9c:a8:0f:
         6d:86:8a:86:82:91:c1:1d:37:1c:25:aa:43:43:ec:52:a4:65:
         f5:f1:82:e4:b0:ad:96:4b:c5:ee:b7:6c:30:4b:9b:43:3b:70:
         72:58:d4:de:fd:90:d5:5d:17:11:c2:fc:e9:ab:68:91:ba:a6:
         df:25:13:75:db:e8:f8:0b:6f:49:84:a7:35:03:d6:3d:a8:07:
         67:f1:5f:03:d6:2d:87:a4:1e:77:84:5f:3b:b0:4b:f5:15:2c:
         6d:02:2c:bc:7d:9f:08:64:24:c7:c6:8b:ac:53:b6:d2:15:5d:
         de:2c:af:7b:34:89:68:4b:41:d4:18:26:2b:e7:27:a7:5b:3b:
         6f:7b:64:65:7f:05:12:e7:8b:f2:3f:84:ac:65:6b:9d:02:f1:
         9c:31:a0:8f:cb:a5:f8:11:ed:cd:2c:fc:dd:c4:9a:ea:90:9c:
         96:40:be:0f:da:47:0a:3e:3a:fc:80:08:49:a0:35:6d:75:41:
         5b:91:5b:96:c6:2f:7d:84:bf:97:d7:bf:4e:a7:fa:87:bc:05:
         3b:d8:10:cc:24:c6:25:ac:a1:3c:7e:f5:f6:50:7d:8e:7e:4e:
         b9:d0:ee:c1:ae:ac:f9:24:dc:92:63:5e:ac:95:c9:ad:f4:1e:
         dd:1c:fe:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 20 11:30:26 2025 by rpki-client