Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/9735049C02F811F09ECE6379C4F9AE02.roa
File:                     9735049C02F811F09ECE6379C4F9AE02.roa (raw, json)
Hash identifier:          NSTB/nya/JNabW4puKjTUf5yS/XuiGnRhQArTnkAnSU=
Subject key identifier:   6E:B3:13:56:16:15:04:24:5E:49:D7:B6:72:6A:30:06:31:10:4B:45
Certificate issuer:       /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Certificate serial:       ABAA
Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/9735049C02F811F09ECE6379C4F9AE02.roa
Signing time:             Wed 19 Mar 2025 12:11:53 +0000
ROA not before:           Wed 19 Mar 2025 12:11:53 +0000
ROA not after:            Tue 01 Jul 2025 00:00:00 +0000
asID:                     135258
IP address blocks:        103.70.40.0/22 maxlen: 24
                          2001:df2:47c0::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
                          rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 11 Apr 2025 15:26:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 43946 (0xabaa)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918EDB2
        Validity
            Not Before: Mar 19 12:11:53 2025 GMT
            Not After : Jul  1 00:00:00 2025 GMT
        Subject: CN=67dab489-f0de
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:33:be:6a:85:3b:8f:8d:44:90:66:df:5c:46:
                    c4:19:e0:a5:12:f4:e3:ae:1d:c8:02:19:a0:43:b2:
                    48:3a:a6:e4:c7:3b:4d:f4:d9:a6:fe:38:0b:24:00:
                    74:48:5d:df:3d:f2:d1:b2:32:7c:fb:31:12:37:22:
                    01:d6:b4:7c:ca:93:03:41:4e:66:5e:bc:10:64:ac:
                    59:17:45:e8:95:85:33:61:0e:f2:b3:65:89:36:1c:
                    05:dd:88:47:a3:ce:80:a4:74:ac:90:16:ba:8a:ed:
                    06:2e:23:91:10:78:52:10:77:34:16:23:5f:71:fa:
                    24:3e:2d:56:d8:96:35:04:c7:b1:6c:87:41:f9:69:
                    2a:10:69:59:83:46:0f:e2:04:6c:cd:17:23:24:84:
                    24:80:36:30:98:a5:4a:66:0d:61:d3:b0:d5:18:0f:
                    96:86:da:54:22:dc:55:f1:1e:a2:d5:f7:db:fd:36:
                    6c:67:2d:6a:e8:14:27:6a:c7:b6:7e:1b:69:b8:5a:
                    d6:d5:35:2c:01:92:50:a7:ea:f5:8d:7b:ac:a8:63:
                    42:c3:ba:c7:83:f5:d1:ce:a2:61:0f:f1:d8:49:17:
                    c2:ea:7e:bc:56:64:11:67:0b:95:2f:75:63:15:91:
                    ee:dd:ca:7c:f3:99:17:33:7c:fa:10:7a:ba:6b:8f:
                    b5:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6E:B3:13:56:16:15:04:24:5E:49:D7:B6:72:6A:30:06:31:10:4B:45
            X509v3 Authority Key Identifier:
                keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/9735049C02F811F09ECE6379C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.70.40.0/22
                IPv6:
                  2001:df2:47c0::/48

    Signature Algorithm: sha256WithRSAEncryption
         34:83:4f:44:63:13:c4:19:a2:4c:41:9c:71:d6:51:39:e0:ee:
         81:35:2f:b8:f9:50:db:c7:9f:87:ef:3e:39:92:43:2d:29:33:
         fe:6a:46:c9:24:4e:df:12:c1:fd:b8:37:47:10:ba:a3:bf:29:
         63:5e:a2:5d:84:53:22:be:87:65:a4:67:3c:70:bb:06:dd:03:
         a5:e3:58:49:75:a9:2a:68:a1:d7:01:06:27:54:bb:bb:96:ef:
         de:66:1c:f2:24:99:14:1a:09:9a:1f:3b:07:dd:9c:4e:0a:d5:
         41:41:5a:69:29:b0:c3:75:2e:f3:50:21:4d:52:37:52:fb:a6:
         cf:d2:3b:58:67:84:ec:72:5b:0b:99:a2:64:46:db:50:12:58:
         2a:53:c3:15:85:b4:ea:f9:76:a3:e2:f7:ec:00:90:4b:5f:54:
         0e:8c:19:2a:65:e1:eb:57:91:c1:73:5e:a4:6b:3f:7f:1c:74:
         8d:86:6e:8a:49:8c:04:69:52:1b:f1:b2:14:fc:bf:8e:71:5c:
         eb:67:17:38:78:c4:4e:05:f1:5f:b2:8d:17:2f:ee:04:c9:e8:
         6f:22:21:5e:c8:6e:37:aa:b6:61:73:f1:3e:2c:d4:7d:20:fc:
         73:03:f5:16:60:9a:cc:78:62:f7:55:af:f7:26:bf:ab:c8:8d:
         cb:95:c2:ca
-----BEGIN CERTIFICATE-----
MIIFgzCCBGugAwIBAgIDAKuqMA0GCSqGSIb3DQEBCwUAMEYxETAPBgNVBAMTCEE5
MThFREIyMTEwLwYDVQQFEygyOTZFREI2NEYzQUY2RTlEOTgwOTMyRTgxNkY5NTk4
M0UzQUJDODIzMB4XDTI1MDMxOTEyMTE1M1oXDTI1MDcwMTAwMDAwMFowGDEWMBQG
A1UEAxMNNjdkYWI0ODktZjBkZTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBAL8zvmqFO4+NRJBm31xGxBngpRL0464dyAIZoEOySDqm5Mc7TfTZpv44CyQA
dEhd3z3y0bIyfPsxEjciAda0fMqTA0FOZl68EGSsWRdF6JWFM2EO8rNliTYcBd2I
R6POgKR0rJAWuortBi4jkRB4UhB3NBYjX3H6JD4tVtiWNQTHsWyHQflpKhBpWYNG
D+IEbM0XIySEJIA2MJilSmYNYdOw1RgPlobaVCLcVfEeotX32/02bGctaugUJ2rH
tn4babha1tU1LAGSUKfq9Y17rKhjQsO6x4P10c6iYQ/x2EkXwup+vFZkEWcLlS91
YxWR7t3KfPOZFzN8+hB6umuPtTMCAwEAAaOCAqYwggKiMB0GA1UdDgQWBBRusxNW
FhUEJF5J17ZyajAGMRBLRTAfBgNVHSMEGDAWgBQpbttk869unZgJMugW+VmD46vI
IzAOBgNVHQ8BAf8EBAMCB4AwgYMGA1UdHwR8MHoweKB2oHSGcnJzeW5jOi8vcnBr
aS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkxOEVEQjIvMkE0M0UzMEM3
MEU5MTFFMkIzNkQ0QjZCMjk3OUJCMjAvS1c3YlpQT3ZicDJZQ1RMb0Z2bFpnLU9y
eUNNLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBr
aS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3
MkZEMUZGMi9LVzdiWlBPdmJwMllDVExvRnZsWmctT3J5Q00uY2VyMEoGA1UdIAEB
/wRAMD4wPAYIKwYBBQUHDgIwMDAuBggrBgEFBQcCARYiaHR0cHM6Ly93d3cuYXBu
aWMubmV0L1JQS0kvQ1BTLnBkZjCBywYIKwYBBQUHAQsEgb4wgbswgYMGCCsGAQUF
BzALhndyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5
MThFREIyLzJBNDNFMzBDNzBFOTExRTJCMzZENEI2QjI5NzlCQjIwLzk3MzUwNDlD
MDJGODExRjA5RUNFNjM3OUM0RjlBRTAyLnJvYTAzBggrBgEFBQcwDYYnaHR0cHM6
Ly9ycmRwLmFwbmljLm5ldC9ub3RpZmljYXRpb24ueG1sMDAGCCsGAQUFBwEHAQH/
BCEwHzAMBAIAATAGAwQCZ0YoMA8EAgACMAkDBwAgAQ3yR8AwDQYJKoZIhvcNAQEL
BQADggEBADSDT0RjE8QZokxBnHHWUTng7oE1L7j5UNvHn4fvPjmSQy0pM/5qRskk
Tt8Swf24N0cQuqO/KWNeol2EUyK+h2WkZzxwuwbdA6XjWEl1qSpoodcBBidUu7uW
795mHPIkmRQaCZofOwfdnE4K1UFBWmkpsMN1LvNQIU1SN1L7ps/SO1hnhOxyWwuZ
omRG21ASWCpTwxWFtOr5dqPi9+wAkEtfVA6MGSpl4etXkcFzXqRrP38cdI2GbopJ
jARpUhvxshT8v45xXOtnFzh4xE4F8V+yjRcv7gTJ6G8iIV7IbjeqtmFz8T4s1H0g
/HMD9RZgmsx4YvdVr/cmv6vIjcuVwso=
-----END CERTIFICATE-----
Generated at Sat Apr 5 03:55:06 2025 by rpki-client