Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/E2279050FD8F11EF99E81935C4F9AE02.roa
File:                     E2279050FD8F11EF99E81935C4F9AE02.roa (raw, json)
Hash identifier:          QRxOU4s0zIyAd03RNch45qO8RbaGeYXTU40ak/6bRKA=
Subject key identifier:   7D:3A:94:D5:43:F1:D2:86:6A:62:1B:F3:BB:A6:54:F6:21:D3:1F:61
Certificate issuer:       /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Certificate serial:       A9C2
Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/E2279050FD8F11EF99E81935C4F9AE02.roa
Signing time:             Mon 10 Mar 2025 09:13:09 +0000
ROA not before:           Mon 10 Mar 2025 09:13:09 +0000
ROA not after:            Tue 01 Jul 2025 00:00:00 +0000
asID:                     150644
IP address blocks:        103.174.254.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
                          rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 11 Apr 2025 15:26:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 43458 (0xa9c2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918EDB2
        Validity
            Not Before: Mar 10 09:13:09 2025 GMT
            Not After : Jul  1 00:00:00 2025 GMT
        Subject: CN=67cead25-3eb0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:4d:2c:72:db:ee:b5:09:7f:4e:ef:da:92:8d:
                    a0:d0:6b:f4:04:d7:24:6a:2d:c5:4f:f5:8f:9b:86:
                    8d:12:21:cd:bb:52:0f:06:a4:85:52:86:a0:41:bb:
                    87:5e:87:57:c6:b9:d7:4f:7c:9e:ef:e2:94:2c:42:
                    57:2c:b5:61:52:87:86:cb:3f:50:fc:78:a4:f8:d8:
                    ed:ab:c5:79:b2:34:9e:6c:f0:bc:74:84:16:9c:b6:
                    fa:14:88:07:af:7d:cf:14:0a:6a:dd:38:0b:47:42:
                    62:b7:33:2b:68:bb:89:4b:13:30:b8:1c:b8:a0:3e:
                    78:cd:a9:ef:fa:61:ce:25:b4:04:cd:ef:c9:bc:2c:
                    8f:77:d3:72:6e:14:e1:14:72:aa:00:b7:3b:18:23:
                    36:9c:b3:2e:69:59:4d:4b:f4:18:59:7c:5c:4d:b4:
                    4f:f1:b1:97:92:ed:84:15:83:fc:13:ca:b8:fc:85:
                    ff:aa:b1:b4:d1:6f:2f:2b:64:c5:85:38:27:68:f1:
                    86:48:99:5e:bd:5a:25:b8:16:21:5e:02:73:9f:22:
                    1c:6e:33:78:91:04:79:2c:a8:84:9d:f9:2c:6b:d5:
                    b9:3a:e1:47:06:fc:be:64:e0:ce:3a:3e:77:db:39:
                    6d:b3:f0:55:c7:3e:2f:d9:bc:2a:60:4a:68:96:f7:
                    a1:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7D:3A:94:D5:43:F1:D2:86:6A:62:1B:F3:BB:A6:54:F6:21:D3:1F:61
            X509v3 Authority Key Identifier:
                keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/E2279050FD8F11EF99E81935C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.174.254.0/23

    Signature Algorithm: sha256WithRSAEncryption
         3d:6d:e6:12:f0:3b:15:31:6a:57:49:43:7e:cc:3c:02:cc:fd:
         d7:e0:50:46:02:59:2b:a2:f2:8d:14:e1:a9:0a:af:07:a7:e3:
         b7:b7:f6:37:61:bc:3d:f5:67:7f:8d:d7:3e:6a:73:85:27:3c:
         4c:e0:6e:74:8e:b8:9d:d4:6b:85:2e:16:bc:56:36:19:49:a0:
         4f:bb:4a:c3:8d:b2:43:04:fc:e4:20:3f:fb:d1:80:2f:88:df:
         14:7c:60:7d:01:45:78:d9:77:5d:f6:12:6c:13:72:27:91:73:
         67:b8:af:95:d4:91:55:52:58:4c:5e:ef:34:bb:b8:c2:5c:0d:
         bb:f6:32:90:fa:be:ed:2a:0c:c3:2f:e9:5d:9b:7e:df:64:9b:
         39:0f:d3:8b:de:fa:a1:d4:17:e3:63:de:d1:05:2f:eb:b9:9d:
         a2:e7:d5:43:6b:53:2a:eb:ed:1b:4a:38:85:b8:3a:00:bf:35:
         94:12:be:77:62:ff:55:ff:1a:fd:c7:0a:62:c6:de:7e:98:b8:
         fc:db:98:af:99:8b:1b:68:e5:9c:b9:f4:6f:a1:85:79:9e:26:
         9a:73:69:d2:f1:73:ce:13:58:19:33:76:1d:89:70:b2:5c:19:
         37:14:3f:a1:bc:c1:fe:f4:dc:48:47:47:97:80:03:79:e9:b5:
         db:b6:c8:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 10:34:28 2025 by rpki-client