Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/070090465BD411F0A0A63980C4F9AE02.roa
File:                     070090465BD411F0A0A63980C4F9AE02.roa (raw, json)
Hash identifier:          1sU5D3L+2IxUxPvSsRMeYW4pPlNmCIzQLZSfyGQ+B84=
Subject key identifier:   23:B0:8A:B5:9B:19:A9:40:C6:33:1E:09:1F:35:2E:96:FF:13:56:A8
Certificate issuer:       /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Certificate serial:       BFCF
Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/070090465BD411F0A0A63980C4F9AE02.roa
Signing time:             Tue 08 Jul 2025 08:17:46 +0000
ROA not before:           Tue 08 Jul 2025 08:17:46 +0000
ROA not after:            Wed 01 Jul 2026 00:00:00 +0000
asID:                     45194
IP address blocks:        43.249.180.0/22 maxlen: 22
                          43.249.180.0/24 maxlen: 24
                          43.249.181.0/24 maxlen: 24
                          43.249.182.0/24 maxlen: 24
                          43.249.183.0/24 maxlen: 24
                          45.117.212.0/22 maxlen: 24
                          45.124.48.0/22 maxlen: 24
                          103.51.152.0/22 maxlen: 24
                          103.58.4.0/22 maxlen: 24
                          103.97.180.0/22 maxlen: 24
                          103.183.25.0/24 maxlen: 24
                          103.185.237.0/24 maxlen: 24
                          103.199.136.0/22 maxlen: 24
                          103.209.36.0/24 maxlen: 24
                          103.209.37.0/24 maxlen: 24
                          103.231.0.0/22 maxlen: 24
                          137.59.64.0/22 maxlen: 24
                          137.59.68.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
                          rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 29 Jul 2025 15:26:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 49103 (0xbfcf)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918EDB2, serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
        Validity
            Not Before: Jul  8 08:17:46 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=686cd429-30b8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:a1:d2:29:e9:4f:69:d1:c6:79:1b:9a:75:86:
                    a7:69:a8:3c:5d:67:cd:94:be:c5:e2:47:86:d6:ff:
                    c5:04:11:3b:b8:71:53:f3:fc:ba:64:3b:0c:e3:b9:
                    31:33:c5:00:c6:c7:61:09:6c:6d:5d:9a:55:67:c4:
                    d0:49:a0:ca:c5:5e:7b:7b:b3:47:66:7c:0b:44:cd:
                    b1:43:71:62:72:85:a2:98:11:2e:f1:7d:8f:c2:74:
                    75:1e:ec:81:d0:b1:3d:11:43:83:2f:f0:42:d6:3a:
                    0f:d6:08:04:c9:64:15:54:96:07:de:43:4c:b0:9d:
                    28:e5:ac:55:b9:e7:0e:99:a8:16:35:04:a0:e5:c1:
                    b0:d9:bc:1c:5f:93:0e:06:54:2e:03:05:0a:27:ee:
                    f3:14:a6:79:a3:66:1c:45:2d:98:aa:07:12:f3:fd:
                    74:d1:55:fc:3e:f0:3c:c8:ee:4d:b6:20:30:80:8b:
                    3f:8f:bd:ed:af:1e:04:d1:8e:0e:61:15:89:ff:3f:
                    a8:c5:78:48:43:37:cc:2f:d2:f5:5c:ac:15:0c:e8:
                    6c:df:9d:d8:e8:28:e0:2b:00:d4:4b:9e:93:3e:59:
                    92:25:86:ed:6b:d0:d8:3d:5e:9e:d2:40:3a:56:16:
                    f3:11:50:42:2c:0a:45:b8:fe:0c:f0:b4:52:52:f9:
                    f6:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                23:B0:8A:B5:9B:19:A9:40:C6:33:1E:09:1F:35:2E:96:FF:13:56:A8
            X509v3 Authority Key Identifier:
                keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/070090465BD411F0A0A63980C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  43.249.180.0/22
                  45.117.212.0/22
                  45.124.48.0/22
                  103.51.152.0/22
                  103.58.4.0/22
                  103.97.180.0/22
                  103.183.25.0/24
                  103.185.237.0/24
                  103.199.136.0/22
                  103.209.36.0/23
                  103.231.0.0/22
                  137.59.64.0/21

    Signature Algorithm: sha256WithRSAEncryption
         4e:d8:c5:13:42:90:e9:9d:2a:aa:2d:4b:d8:2c:e0:a1:e1:11:
         38:07:25:72:74:2d:e2:77:3a:94:16:37:df:9e:63:de:e7:20:
         95:b3:3d:13:76:11:6c:e1:6f:58:37:1e:1c:c4:12:6d:c1:94:
         27:f8:5c:46:63:01:98:91:1c:b5:f2:43:da:dc:61:17:e2:9c:
         7c:59:16:62:50:f2:7a:f0:34:33:1d:24:0f:ff:66:58:35:0b:
         77:9d:f9:fe:43:ca:4e:8c:1e:21:2a:43:8f:ec:52:b0:fd:97:
         ab:37:df:23:2e:aa:2c:34:72:af:cd:29:d8:82:db:5f:c4:50:
         b1:92:f8:f9:b1:4a:dd:22:2a:47:f6:d8:82:8e:f4:58:78:2d:
         53:f1:57:8e:86:53:89:6e:b3:3f:d9:fb:d5:ec:a9:e1:cf:30:
         df:3d:37:08:b4:f4:6d:07:c7:a0:b3:53:5b:30:43:06:60:a9:
         ab:a3:94:df:a1:f4:97:12:99:2f:4b:7d:0b:81:80:bb:da:64:
         00:90:21:78:85:97:3d:17:a6:c9:81:b7:72:c2:b9:60:3d:a5:
         53:9e:42:51:67:64:2b:ec:18:43:c9:3c:ca:c6:08:93:a5:6d:
         a6:ad:df:15:2f:18:32:ea:5d:85:08:3e:4b:64:59:4e:1b:ae:
         83:71:08:71
-----BEGIN CERTIFICATE-----
MIIFtDCCBJygAwIBAgIDAL/PMA0GCSqGSIb3DQEBCwUAMEYxETAPBgNVBAMTCEE5
MThFREIyMTEwLwYDVQQFEygyOTZFREI2NEYzQUY2RTlEOTgwOTMyRTgxNkY5NTk4
M0UzQUJDODIzMB4XDTI1MDcwODA4MTc0NloXDTI2MDcwMTAwMDAwMFowGDEWMBQG
A1UEAxMNNjg2Y2Q0MjktMzBiODCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBAMCh0inpT2nRxnkbmnWGp2moPF1nzZS+xeJHhtb/xQQRO7hxU/P8umQ7DOO5
MTPFAMbHYQlsbV2aVWfE0EmgysVee3uzR2Z8C0TNsUNxYnKFopgRLvF9j8J0dR7s
gdCxPRFDgy/wQtY6D9YIBMlkFVSWB95DTLCdKOWsVbnnDpmoFjUEoOXBsNm8HF+T
DgZULgMFCifu8xSmeaNmHEUtmKoHEvP9dNFV/D7wPMjuTbYgMICLP4+97a8eBNGO
DmEVif8/qMV4SEM3zC/S9VysFQzobN+d2Ogo4CsA1Euekz5ZkiWG7WvQ2D1entJA
OlYW8xFQQiwKRbj+DPC0UlL59s0CAwEAAaOCAtcwggLTMB0GA1UdDgQWBBQjsIq1
mxmpQMYzHgkfNS6W/xNWqDAfBgNVHSMEGDAWgBQpbttk869unZgJMugW+VmD46vI
IzAOBgNVHQ8BAf8EBAMCB4AwgYMGA1UdHwR8MHoweKB2oHSGcnJzeW5jOi8vcnBr
aS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkxOEVEQjIvMkE0M0UzMEM3
MEU5MTFFMkIzNkQ0QjZCMjk3OUJCMjAvS1c3YlpQT3ZicDJZQ1RMb0Z2bFpnLU9y
eUNNLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBr
aS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3
MkZEMUZGMi9LVzdiWlBPdmJwMllDVExvRnZsWmctT3J5Q00uY2VyMEoGA1UdIAEB
/wRAMD4wPAYIKwYBBQUHDgIwMDAuBggrBgEFBQcCARYiaHR0cHM6Ly93d3cuYXBu
aWMubmV0L1JQS0kvQ1BTLnBkZjCBywYIKwYBBQUHAQsEgb4wgbswgYMGCCsGAQUF
BzALhndyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5
MThFREIyLzJBNDNFMzBDNzBFOTExRTJCMzZENEI2QjI5NzlCQjIwLzA3MDA5MDQ2
NUJENDExRjBBMEE2Mzk4MEM0RjlBRTAyLnJvYTAzBggrBgEFBQcwDYYnaHR0cHM6
Ly9ycmRwLmFwbmljLm5ldC9ub3RpZmljYXRpb24ueG1sMGEGCCsGAQUFBwEHAQH/
BFIwUDBOBAIAATBIAwQCK/m0AwQCLXXUAwQCLXwwAwQCZzOYAwQCZzoEAwQCZ2G0
AwQAZ7cZAwQAZ7ntAwQCZ8eIAwQBZ9EkAwQCZ+cAAwQDiTtAMA0GCSqGSIb3DQEB
CwUAA4IBAQBO2MUTQpDpnSqqLUvYLOCh4RE4ByVydC3idzqUFjffnmPe5yCVsz0T
dhFs4W9YNx4cxBJtwZQn+FxGYwGYkRy18kPa3GEX4px8WRZiUPJ68DQzHSQP/2ZY
NQt3nfn+Q8pOjB4hKkOP7FKw/ZerN98jLqosNHKvzSnYgttfxFCxkvj5sUrdIipH
9tiCjvRYeC1T8VeOhlOJbrM/2fvV7KnhzzDfPTcItPRtB8egs1NbMEMGYKmro5Tf
ofSXEpkvS30LgYC72mQAkCF4hZc9F6bJgbdywrlgPaVTnkJRZ2Qr7BhDyTzKxgiT
pW2mrd8VLxgy6l2FCD5LZFlOG66DcQhx
-----END CERTIFICATE-----
Generated at Wed Jul 23 02:25:21 2025 by rpki-client