Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/49F90AA0F60911ED9D296E52C4F9AE02.roa
File:                     49F90AA0F60911ED9D296E52C4F9AE02.roa (raw, json)
Hash identifier:          eBIKTZS/hFoJug+nocEx5CsKBTWlaFpYLQ9tYKpaEC8=
Subject key identifier:   0A:3E:C2:0B:A1:15:6E:43:25:61:22:07:77:91:A8:F4:11:07:49:3C
Certificate issuer:       /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Certificate serial:       B918
Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/49F90AA0F60911ED9D296E52C4F9AE02.roa
Signing time:             Thu 08 May 2025 16:27:08 +0000
ROA not before:           Thu 08 May 2025 16:27:08 +0000
ROA not after:            Wed 01 Jul 2026 00:00:00 +0000
asID:                     151171
IP address blocks:        103.204.92.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
                          rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 12 Jun 2025 12:12:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 47384 (0xb918)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918EDB2, serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
        Validity
            Not Before: May  8 16:27:08 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=681cdb5c-ebd7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:27:95:5e:d1:50:f1:b5:3b:9b:b6:25:9f:91:
                    24:17:3d:41:53:3c:e7:d5:4a:e6:32:c7:59:9b:5c:
                    71:8f:7c:08:41:a8:a4:f1:ae:74:8d:f5:f4:e4:b8:
                    42:aa:7f:62:4d:91:3a:27:1d:df:b7:34:34:3c:41:
                    76:27:e7:5a:26:dd:2d:e3:68:28:53:62:ca:9b:bc:
                    d7:c5:92:9c:2d:cf:12:5e:35:8a:45:af:63:60:78:
                    56:86:a3:3c:1a:69:7f:4f:1e:dd:e8:78:49:b1:21:
                    94:85:25:b1:38:99:6c:32:64:fd:e3:d9:01:8a:ff:
                    11:62:e7:69:f0:42:2f:cb:f0:e0:6f:ce:f7:1e:33:
                    ef:04:48:0d:a8:ec:83:85:dc:82:a5:bc:81:ae:e5:
                    dc:4c:4e:8d:5c:58:a8:60:e9:50:a6:3b:10:8b:99:
                    a4:f5:28:2e:e6:ff:85:b9:46:6c:a2:90:ec:49:d9:
                    ea:fb:14:79:52:b7:e2:a7:41:08:78:54:4f:0a:0d:
                    39:5a:a1:65:fe:bd:20:d5:5a:36:65:3b:25:0c:92:
                    e5:40:11:38:91:5d:95:b8:84:41:81:9c:5b:28:0b:
                    a3:c3:8b:bb:57:9b:ba:83:3c:da:1b:7b:fa:70:6e:
                    5b:bb:ba:f6:91:a6:72:15:fa:5f:4f:99:60:4b:7d:
                    2f:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0A:3E:C2:0B:A1:15:6E:43:25:61:22:07:77:91:A8:F4:11:07:49:3C
            X509v3 Authority Key Identifier:
                keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/49F90AA0F60911ED9D296E52C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.204.92.0/23

    Signature Algorithm: sha256WithRSAEncryption
         a8:d0:86:1e:6f:f1:da:5d:71:4d:df:36:aa:06:9f:c4:1f:44:
         39:81:17:e6:49:8a:c3:cb:03:f0:7b:69:52:1c:31:1f:59:b3:
         55:83:8b:2f:a0:3a:8b:8f:ef:3f:7c:ee:33:15:1d:36:38:73:
         41:2a:4b:5e:cc:5a:7c:d8:1c:f6:b0:18:76:9d:ab:2e:d6:72:
         48:8d:b8:bf:a3:74:2c:ad:ce:06:b2:de:75:e7:a7:23:03:83:
         b0:e8:d5:bd:e8:24:f0:34:eb:0f:1b:2c:a3:c3:9d:ab:45:68:
         31:75:41:4a:6c:e8:31:b8:f7:ea:d4:5a:06:7c:15:97:af:a3:
         39:43:08:33:74:f5:2d:50:04:0e:fe:05:28:3a:4b:26:96:99:
         5c:44:04:44:0c:6e:5a:99:4a:79:17:a4:a9:ba:17:3d:74:51:
         92:5c:14:3c:52:7b:48:0f:80:27:47:1b:96:fa:4c:0a:9b:95:
         c3:39:2c:d8:f8:b3:90:47:0b:42:a5:2c:fc:72:2f:cf:f7:21:
         62:c7:02:d7:12:71:63:cc:90:7b:2a:bb:8f:f4:ad:27:c9:9d:
         7b:89:63:40:ec:a6:54:5f:3a:96:e9:c4:fb:dc:c4:f8:e3:0d:
         16:07:7e:5d:03:ef:f8:99:14:e7:79:f2:01:00:52:8a:d4:ff:
         75:8c:a9:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 6 07:06:10 2025 by rpki-client