Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A918ED57/5CD8244217B011EBB94DA714C4F9AE02/7ED42CD6F35111EF8BF19562C4F9AE02.roa
File:                     7ED42CD6F35111EF8BF19562C4F9AE02.roa (raw, json)
Hash identifier:          wBzKpGMt55FaGaSx04uSE6kMe0UA6A3OvBAA2044T84=
Subject key identifier:   E0:0C:AE:32:3C:43:17:71:A9:75:7A:2D:F7:68:B9:4A:AA:7E:07:CC
Certificate issuer:       /CN=A918ED57/serialNumber=668872E87997B73B975FE3DAD4DACA8EBEC8EBA3
Certificate serial:       074F
Authority key identifier: 66:88:72:E8:79:97:B7:3B:97:5F:E3:DA:D4:DA:CA:8E:BE:C8:EB:A3
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Zohy6HmXtzuXX-Pa1NrKjr7I66M.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918ED57/5CD8244217B011EBB94DA714C4F9AE02/7ED42CD6F35111EF8BF19562C4F9AE02.roa
Signing time:             Tue 25 Feb 2025 08:21:22 +0000
ROA not before:           Tue 25 Feb 2025 08:21:22 +0000
ROA not after:            Fri 31 Oct 2025 00:00:00 +0000
asID:                     19905
IP address blocks:        43.247.168.0/22 maxlen: 24
                          103.14.220.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918ED57/5CD8244217B011EBB94DA714C4F9AE02/Zohy6HmXtzuXX-Pa1NrKjr7I66M.crl
                          rsync://rpki.apnic.net/member_repository/A918ED57/5CD8244217B011EBB94DA714C4F9AE02/Zohy6HmXtzuXX-Pa1NrKjr7I66M.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Zohy6HmXtzuXX-Pa1NrKjr7I66M.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 17 Apr 2025 21:30:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1871 (0x74f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918ED57
        Validity
            Not Before: Feb 25 08:21:22 2025 GMT
            Not After : Oct 31 00:00:00 2025 GMT
        Subject: CN=67bd7d82-63f7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:9a:97:1e:5e:78:60:b3:08:4f:3e:73:52:98:
                    59:b6:bd:ba:a6:37:0c:bb:17:60:c0:9e:ba:b1:45:
                    78:60:40:64:de:f8:ce:5f:d9:4e:9c:4a:07:b4:86:
                    a7:09:71:61:26:c6:b1:9e:29:e5:5a:71:52:7e:5a:
                    a7:34:e4:92:4d:56:76:18:c2:3c:a0:6c:46:89:23:
                    d2:3e:07:d1:ea:5e:02:a0:fc:59:42:fe:bd:76:14:
                    80:b5:94:4d:a6:3e:d1:c0:3a:f9:49:69:15:4f:7f:
                    1f:44:61:45:35:34:7f:d1:f6:2d:f1:85:f6:d7:b0:
                    04:1a:1b:7e:5d:0a:c9:df:c7:d6:96:83:1f:98:27:
                    2f:31:71:78:ba:7e:62:a8:24:03:66:e0:72:00:8d:
                    51:e9:fd:d4:22:4b:78:bb:a4:ec:57:3a:f5:12:e0:
                    84:7f:7f:e9:48:ec:bf:85:09:20:44:4a:89:15:9e:
                    31:1f:e0:33:c6:eb:75:52:15:1f:56:86:fc:e6:8d:
                    48:7e:4c:88:05:ac:00:42:0e:32:5f:45:11:f2:bb:
                    b2:2e:e3:b8:08:b1:d4:fe:46:22:e1:9d:00:02:bb:
                    c7:84:da:66:00:2b:83:6f:b9:45:d8:9d:a0:63:5b:
                    56:55:75:10:19:4c:4e:b4:83:3b:0f:da:51:9f:26:
                    39:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E0:0C:AE:32:3C:43:17:71:A9:75:7A:2D:F7:68:B9:4A:AA:7E:07:CC
            X509v3 Authority Key Identifier:
                keyid:66:88:72:E8:79:97:B7:3B:97:5F:E3:DA:D4:DA:CA:8E:BE:C8:EB:A3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918ED57/5CD8244217B011EBB94DA714C4F9AE02/Zohy6HmXtzuXX-Pa1NrKjr7I66M.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Zohy6HmXtzuXX-Pa1NrKjr7I66M.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918ED57/5CD8244217B011EBB94DA714C4F9AE02/7ED42CD6F35111EF8BF19562C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  43.247.168.0/22
                  103.14.220.0/22

    Signature Algorithm: sha256WithRSAEncryption
         6c:8c:cb:4e:93:4b:5d:5d:99:e4:dc:06:3f:20:cc:66:4e:e8:
         f0:8a:dd:2f:23:86:e4:97:45:a1:f3:27:ad:7a:8b:6f:4d:76:
         45:a5:36:3e:fe:0b:34:64:6b:bf:39:2a:1b:0a:8d:a3:3e:3d:
         c8:4d:d2:47:70:61:5c:c9:ce:b6:0f:73:de:40:63:82:66:be:
         a5:5d:f9:3a:66:1e:84:39:fe:39:1e:90:a4:06:f6:64:5f:48:
         d2:8d:34:41:25:5f:4c:0a:20:d6:a4:73:bc:bc:bf:56:b8:49:
         a2:be:e3:43:c0:16:a1:9e:0c:56:29:81:08:28:c6:25:c0:d1:
         a0:da:27:1c:d5:e9:4e:fd:04:61:9a:8f:a0:6c:a0:be:bf:d1:
         6b:4b:f6:4b:d0:dc:72:8a:58:d1:7b:e2:20:8e:01:ac:28:09:
         23:eb:5e:3c:2e:d6:cb:39:c2:02:02:3d:66:8a:2a:d4:5c:fe:
         20:f4:ac:00:dc:1a:42:27:02:1c:5c:5f:bc:7d:a3:ba:0e:2c:
         d0:46:60:5b:bc:0c:96:7a:d6:02:dc:47:e6:35:0a:dd:ab:b1:
         44:c6:74:20:e7:74:78:38:48:36:ba:f7:b8:fa:59:93:f7:4a:
         a7:8e:d1:c6:61:7f:8e:a8:52:1d:9b:2e:26:b2:bb:25:5f:8d:
         8d:ba:5b:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 01:28:46 2025 by rpki-client