Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A916A033/8BAE8B88294B11EBA0BC902FC4F9AE02/EB0FEBAA295811EBB519AC70C4F9AE02.roa
File:                     EB0FEBAA295811EBB519AC70C4F9AE02.roa (raw, json)
Hash identifier:          l0d5U/HukOAxqR+/ThmuC5REmFDut/5BnvDM1762AlY=
Subject key identifier:   5E:7F:32:76:21:B3:C4:0F:FE:54:B8:D1:AE:60:5A:9D:6C:2E:B4:45
Certificate issuer:       /CN=A916A033/serialNumber=B4D1C57EEEF2DA910AAF79460A9BCB21A6FCD2FD
Certificate serial:       06AA
Authority key identifier: B4:D1:C5:7E:EE:F2:DA:91:0A:AF:79:46:0A:9B:CB:21:A6:FC:D2:FD
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tNHFfu7y2pEKr3lGCpvLIab80v0.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A916A033/8BAE8B88294B11EBA0BC902FC4F9AE02/EB0FEBAA295811EBB519AC70C4F9AE02.roa
Signing time:             Thu 04 Jul 2024 23:00:56 +0000
ROA not before:           Thu 04 Jul 2024 23:00:56 +0000
ROA not after:            Sun 31 Aug 2025 00:00:00 +0000
asID:                     58507
IP address blocks:        103.115.188.0/22 maxlen: 24
                          2402:ecc0::/32 maxlen: 40
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A916A033/8BAE8B88294B11EBA0BC902FC4F9AE02/tNHFfu7y2pEKr3lGCpvLIab80v0.crl
                          rsync://rpki.apnic.net/member_repository/A916A033/8BAE8B88294B11EBA0BC902FC4F9AE02/tNHFfu7y2pEKr3lGCpvLIab80v0.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tNHFfu7y2pEKr3lGCpvLIab80v0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 21 Feb 2025 05:15:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1706 (0x6aa)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A916A033
        Validity
            Not Before: Jul  4 23:00:56 2024 GMT
            Not After : Aug 31 00:00:00 2025 GMT
        Subject: CN=668729a7-d1e1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:5e:8c:e5:52:67:f4:b3:f1:1f:ce:5a:22:df:
                    2c:b5:e1:b4:64:75:47:b5:a9:3c:1a:a9:9f:31:b2:
                    e6:f3:00:fd:c1:e7:c3:bd:6f:3d:0e:0e:47:d2:4d:
                    6c:da:de:52:a6:60:aa:11:00:23:d7:78:d7:16:e1:
                    ec:b1:55:b8:58:95:66:32:f0:ba:a4:fe:2d:e7:60:
                    5c:40:a9:05:bf:9c:97:de:f9:88:75:ff:92:20:6f:
                    77:ed:b6:2c:6a:3a:e5:78:c2:42:d8:35:d9:2e:38:
                    b5:3a:73:d4:a5:64:9e:8e:6b:3e:53:65:06:12:e6:
                    f0:7f:6f:f5:ec:83:09:c5:69:a7:df:aa:d3:b2:0c:
                    30:0b:5d:34:6c:88:94:7e:4b:69:50:12:74:78:16:
                    76:c8:f9:b4:1c:6b:e7:51:cb:b0:51:22:82:e2:a4:
                    e3:b5:c8:03:5c:d0:76:69:29:85:f5:b7:dd:5d:c7:
                    d3:69:dc:18:d8:ca:e0:c2:eb:f4:a2:29:48:0e:1b:
                    e9:8a:d4:72:b3:8a:7b:31:3d:47:65:01:b5:03:a1:
                    10:76:f3:53:50:f2:14:6f:e0:ff:23:60:67:f8:54:
                    ae:0c:26:3a:0a:5b:eb:74:11:01:1d:19:9a:91:8b:
                    e1:0f:6c:b1:89:cf:95:5e:06:58:4b:b2:64:2c:7f:
                    3d:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5E:7F:32:76:21:B3:C4:0F:FE:54:B8:D1:AE:60:5A:9D:6C:2E:B4:45
            X509v3 Authority Key Identifier:
                keyid:B4:D1:C5:7E:EE:F2:DA:91:0A:AF:79:46:0A:9B:CB:21:A6:FC:D2:FD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A916A033/8BAE8B88294B11EBA0BC902FC4F9AE02/tNHFfu7y2pEKr3lGCpvLIab80v0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tNHFfu7y2pEKr3lGCpvLIab80v0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916A033/8BAE8B88294B11EBA0BC902FC4F9AE02/EB0FEBAA295811EBB519AC70C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.115.188.0/22
                IPv6:
                  2402:ecc0::/32

    Signature Algorithm: sha256WithRSAEncryption
         61:63:fc:75:6f:a8:70:2c:0b:c1:22:12:22:5f:8b:55:f0:fc:
         cf:04:46:38:4e:bf:36:e6:fe:fa:d0:1a:ec:92:b9:57:f8:d3:
         a8:a6:1f:2a:13:28:67:59:f5:8e:4b:24:70:9a:7f:a5:15:0a:
         26:5c:8e:ac:13:a0:91:b0:fa:e5:0f:b9:c9:b2:3a:90:c0:eb:
         4f:a4:f6:35:dc:ac:5e:5d:15:bd:d8:0d:59:94:dc:f7:63:49:
         b7:0b:e3:f0:d6:d8:67:de:c0:31:59:80:3f:fe:d4:de:fc:53:
         55:7f:65:d0:5a:fa:b8:df:4f:0e:0e:77:87:68:da:c4:c9:51:
         9b:85:6f:df:e7:b9:ed:ab:53:c0:26:e0:9b:85:4e:14:05:2b:
         c4:d5:e4:8f:69:f9:b2:b9:c2:9c:cb:93:82:61:b3:1f:94:9e:
         52:ae:77:44:ae:50:d2:36:8b:06:4b:80:53:20:ae:97:5e:64:
         5a:29:ab:ac:7e:6f:b6:ea:63:94:b5:6a:75:ac:af:b9:45:b9:
         19:bf:db:9d:04:14:61:b1:6e:df:3f:73:bf:e8:b6:ef:aa:59:
         5d:fc:7b:b7:aa:8c:6a:03:ed:50:ba:92:f4:3e:5d:07:64:d3:
         b6:05:f8:ec:e4:e2:a0:a4:c0:36:3d:fb:4c:1d:9d:a0:c4:6d:
         ba:d4:44:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 20:49:11 2025 by rpki-client