Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/52F0FA4EBB4F11EE875CE450C4F9AE02.roa
File:                     52F0FA4EBB4F11EE875CE450C4F9AE02.roa (raw, json)
Hash identifier:          IZHuI+MreVAg3ApFz2JU9h1b7yOPw+zI8pX1IlmgBmg=
Subject key identifier:   01:39:13:42:85:3A:7B:9C:33:18:04:89:D9:6A:CF:66:0E:28:93:8F
Certificate issuer:       /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Certificate serial:       B93E
Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/52F0FA4EBB4F11EE875CE450C4F9AE02.roa
Signing time:             Thu 08 May 2025 16:27:42 +0000
ROA not before:           Thu 08 May 2025 16:27:42 +0000
ROA not after:            Wed 01 Jul 2026 00:00:00 +0000
asID:                     151719
IP address blocks:        103.16.12.0/23 maxlen: 24
                          103.16.14.0/24 maxlen: 24
                          2401:7920::/32 maxlen: 48
                          2401:86e0::/36 maxlen: 36
                          2401:86e0::/48 maxlen: 48
                          2401:86e0:1::/48 maxlen: 48
                          2401:86e0:2::/48 maxlen: 48
                          2401:86e0:3::/48 maxlen: 48
                          2401:86e0:4::/48 maxlen: 48
                          2401:86e0:5::/48 maxlen: 48
                          2401:86e0:6::/48 maxlen: 48
                          2401:86e0:7::/48 maxlen: 48
                          2401:86e0:8::/48 maxlen: 48
                          2401:86e0:9::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
                          rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 17 Jun 2025 15:22:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 47422 (0xb93e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918EDB2, serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
        Validity
            Not Before: May  8 16:27:42 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=681cdb7e-d446
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:68:cc:64:8d:e7:9a:2d:4a:f9:eb:72:61:10:
                    c9:f7:ec:e6:5a:63:64:37:47:7d:e6:a5:4d:16:41:
                    77:a0:3a:c7:86:27:21:2b:b6:91:86:c5:7c:83:c3:
                    98:16:0a:85:7b:f1:89:1b:d0:3f:80:12:bb:32:00:
                    a1:a9:73:0a:1e:76:17:c7:89:bf:2b:3c:17:69:d7:
                    e5:f1:df:1d:a5:83:de:cc:cc:15:22:48:26:56:a1:
                    22:52:20:88:9e:15:6c:45:7f:0b:06:47:a3:58:87:
                    96:c4:d9:3f:1a:28:4e:15:6a:11:fc:c9:2e:50:17:
                    27:3c:50:e9:88:ae:4b:a1:11:83:de:37:92:b3:cd:
                    4e:2e:f4:ab:5b:08:36:c0:ec:a8:8e:d4:ec:95:53:
                    b7:e6:ca:a0:a5:76:2a:4f:58:fd:72:36:67:80:1a:
                    f9:de:ec:8d:b4:39:42:6c:04:72:0f:b2:66:23:d2:
                    64:69:d0:d5:11:c7:5b:e0:6e:d7:0a:1b:6b:15:38:
                    c9:00:84:04:cc:e3:00:43:f8:c1:4b:a1:a5:74:45:
                    20:ce:6b:8c:c5:4c:9e:10:12:34:0f:51:2e:9d:51:
                    9c:2d:a0:81:41:7a:67:17:15:a4:06:10:e7:2a:d6:
                    dd:99:07:43:f6:63:72:94:03:3e:e8:09:94:4f:2f:
                    85:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                01:39:13:42:85:3A:7B:9C:33:18:04:89:D9:6A:CF:66:0E:28:93:8F
            X509v3 Authority Key Identifier:
                keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/52F0FA4EBB4F11EE875CE450C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.16.12.0-103.16.14.255
                IPv6:
                  2401:7920::/32
                  2401:86e0::/36

    Signature Algorithm: sha256WithRSAEncryption
         18:17:d7:e2:13:e0:77:89:81:a8:bd:ae:02:95:a5:09:5f:25:
         56:ca:5f:df:96:2f:91:8c:d1:65:fd:d1:0b:95:6a:09:97:fb:
         67:56:f5:61:c4:85:be:01:83:12:f8:12:cd:71:01:a6:75:c2:
         a4:e1:9c:85:c3:5c:8f:0e:c5:c8:7c:d3:05:a5:3e:4e:6a:36:
         17:34:46:d0:ac:fa:f5:09:f2:b9:7a:69:08:79:d1:8d:a1:f9:
         1d:38:9c:27:2a:53:23:76:07:16:d9:07:39:7d:27:05:48:24:
         c1:31:ec:94:a5:50:aa:92:99:62:fc:00:56:43:5d:e5:38:2f:
         e1:c5:fa:d9:eb:2d:ed:38:b5:da:fa:6a:07:5b:5c:40:e1:ce:
         bc:f3:de:2a:af:5e:05:5b:52:a1:d7:dd:48:5f:ea:6a:a3:db:
         46:5d:61:cc:59:fb:3d:62:de:3c:98:e6:ae:53:a2:f5:ff:15:
         16:1e:0c:95:80:e6:7a:b0:64:19:54:98:49:8f:16:12:c4:cb:
         b1:67:51:60:f3:40:d8:d5:af:c5:de:bd:c1:cb:1c:d3:a7:a7:
         7e:34:43:0f:86:d0:a6:6a:04:c0:ce:66:ff:2a:0f:d7:09:8d:
         1a:f1:a1:ab:50:0f:d3:93:45:71:0e:7c:45:c2:e8:ee:fe:17:
         3c:ad:75:ba
-----BEGIN CERTIFICATE-----
MIIFkTCCBHmgAwIBAgIDALk+MA0GCSqGSIb3DQEBCwUAMEYxETAPBgNVBAMTCEE5
MThFREIyMTEwLwYDVQQFEygyOTZFREI2NEYzQUY2RTlEOTgwOTMyRTgxNkY5NTk4
M0UzQUJDODIzMB4XDTI1MDUwODE2Mjc0MloXDTI2MDcwMTAwMDAwMFowGDEWMBQG
A1UEAxMNNjgxY2RiN2UtZDQ0NjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBAKtozGSN55otSvnrcmEQyffs5lpjZDdHfealTRZBd6A6x4YnISu2kYbFfIPD
mBYKhXvxiRvQP4ASuzIAoalzCh52F8eJvys8F2nX5fHfHaWD3szMFSJIJlahIlIg
iJ4VbEV/CwZHo1iHlsTZPxooThVqEfzJLlAXJzxQ6YiuS6ERg943krPNTi70q1sI
NsDsqI7U7JVTt+bKoKV2Kk9Y/XI2Z4Aa+d7sjbQ5QmwEcg+yZiPSZGnQ1RHHW+Bu
1wobaxU4yQCEBMzjAEP4wUuhpXRFIM5rjMVMnhASNA9RLp1RnC2ggUF6ZxcVpAYQ
5yrW3ZkHQ/ZjcpQDPugJlE8vhSsCAwEAAaOCArQwggKwMB0GA1UdDgQWBBQBORNC
hTp7nDMYBInZas9mDiiTjzAfBgNVHSMEGDAWgBQpbttk869unZgJMugW+VmD46vI
IzAOBgNVHQ8BAf8EBAMCB4AwgYMGA1UdHwR8MHoweKB2oHSGcnJzeW5jOi8vcnBr
aS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkxOEVEQjIvMkE0M0UzMEM3
MEU5MTFFMkIzNkQ0QjZCMjk3OUJCMjAvS1c3YlpQT3ZicDJZQ1RMb0Z2bFpnLU9y
eUNNLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBr
aS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3
MkZEMUZGMi9LVzdiWlBPdmJwMllDVExvRnZsWmctT3J5Q00uY2VyMEoGA1UdIAEB
/wRAMD4wPAYIKwYBBQUHDgIwMDAuBggrBgEFBQcCARYiaHR0cHM6Ly93d3cuYXBu
aWMubmV0L1JQS0kvQ1BTLnBkZjCBywYIKwYBBQUHAQsEgb4wgbswgYMGCCsGAQUF
BzALhndyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5
MThFREIyLzJBNDNFMzBDNzBFOTExRTJCMzZENEI2QjI5NzlCQjIwLzUyRjBGQTRF
QkI0RjExRUU4NzVDRTQ1MEM0RjlBRTAyLnJvYTAzBggrBgEFBQcwDYYnaHR0cHM6
Ly9ycmRwLmFwbmljLm5ldC9ub3RpZmljYXRpb24ueG1sMD4GCCsGAQUFBwEHAQH/
BC8wLTAUBAIAATAOMAwDBAJnEAwDBABnEA4wFQQCAAIwDwMFACQBeSADBgQkAYbg
ADANBgkqhkiG9w0BAQsFAAOCAQEAGBfX4hPgd4mBqL2uApWlCV8lVspf35YvkYzR
Zf3RC5VqCZf7Z1b1YcSFvgGDEvgSzXEBpnXCpOGchcNcjw7FyHzTBaU+Tmo2FzRG
0Kz69QnyuXppCHnRjaH5HTicJypTI3YHFtkHOX0nBUgkwTHslKVQqpKZYvwAVkNd
5Tgv4cX62est7Ti12vpqB1tcQOHOvPPeKq9eBVtSodfdSF/qaqPbRl1hzFn7PWLe
PJjmrlOi9f8VFh4MlYDmerBkGVSYSY8WEsTLsWdRYPNA2NWvxd69wcsc06enfjRD
D4bQpmoEwM5m/yoP1wmNGvGhq1AP05NFcQ58RcLo7v4XPK11ug==
-----END CERTIFICATE-----
Generated at Tue Jun 10 19:32:37 2025 by rpki-client