Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/E74EB5EE308F11F09AD94578C4F9AE02.roa
File:                     E74EB5EE308F11F09AD94578C4F9AE02.roa (raw, json)
Hash identifier:          zu2jDCFXaOb/4pRAnxlhFO1SN6hF1f5FIsxF61bILbA=
Subject key identifier:   C2:F6:D8:EA:AC:D1:55:61:42:27:FF:35:7E:6B:89:15:A1:27:CE:85
Certificate issuer:       /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Certificate serial:       BAE1
Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/E74EB5EE308F11F09AD94578C4F9AE02.roa
Signing time:             Wed 14 May 2025 06:51:47 +0000
ROA not before:           Wed 14 May 2025 06:51:47 +0000
ROA not after:            Wed 01 Jul 2026 00:00:00 +0000
asID:                     139571
IP address blocks:        103.181.194.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
                          rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 12 Jun 2025 12:12:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 47841 (0xbae1)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918EDB2, serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
        Validity
            Not Before: May 14 06:51:47 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=68243d83-b0ba
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:f8:42:81:90:79:2d:da:12:7a:30:1a:ba:ba:
                    12:60:10:ed:93:2d:2d:e0:93:03:50:af:70:fc:b0:
                    fd:9a:d2:3e:ec:76:bb:8d:83:5f:ef:3e:f9:1f:0b:
                    26:25:bc:6c:6a:8e:4d:ce:a1:88:12:70:39:68:fc:
                    f8:5d:97:01:e9:f2:cc:95:9d:2a:c9:51:e4:a9:7d:
                    e2:03:39:20:e5:01:88:00:3e:8e:62:54:94:c6:1d:
                    2a:ec:93:95:eb:2c:e3:77:6a:2b:8b:c2:a0:79:f9:
                    df:79:34:62:44:9d:87:d0:de:b3:8c:73:59:be:42:
                    f0:62:59:ad:d0:d7:70:2f:b8:27:47:36:a8:27:5f:
                    b8:cb:88:96:8d:be:ba:c9:b6:50:f0:d4:99:b7:30:
                    e2:f9:e6:cc:f7:92:96:f2:f7:1c:3a:57:8f:dc:e9:
                    2d:bc:d9:30:b3:8c:4b:dc:13:ec:c4:7a:04:26:ca:
                    46:26:f5:a6:d5:6f:ff:7a:af:a9:6d:c6:d1:38:8b:
                    64:55:3c:60:f4:31:48:16:e1:77:e0:aa:82:7a:30:
                    33:f4:1e:01:71:f6:2a:32:56:09:ea:fc:e4:22:8a:
                    c4:a3:f8:1d:98:9d:32:e0:67:86:d6:36:1f:bc:55:
                    e0:19:42:14:81:36:63:ec:e9:6b:e2:69:ef:31:d3:
                    b1:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C2:F6:D8:EA:AC:D1:55:61:42:27:FF:35:7E:6B:89:15:A1:27:CE:85
            X509v3 Authority Key Identifier:
                keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/E74EB5EE308F11F09AD94578C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.181.194.0/24

    Signature Algorithm: sha256WithRSAEncryption
         7d:e4:30:e4:13:a2:4c:03:7e:51:72:bf:d4:34:bf:a2:6a:5b:
         18:e4:a0:db:23:9e:de:1a:f5:c2:2c:92:1c:fa:6e:ee:5a:7a:
         b3:26:6d:1c:80:17:dc:69:35:be:27:be:7c:16:7a:88:0b:04:
         fd:81:17:52:9f:46:07:e7:1c:71:e7:25:e3:f9:fd:74:3e:93:
         d5:f5:67:4c:6d:2f:2f:5e:b3:09:d8:d4:87:e7:52:af:9e:16:
         4d:40:cb:a5:41:b9:6a:0c:26:3a:d4:f2:22:ed:fd:c5:c8:59:
         a3:b1:6f:2a:ef:a7:89:41:d4:e0:fd:0d:cb:5a:4c:65:6f:e8:
         93:06:e5:f7:11:e8:66:07:34:ac:14:54:0e:95:fc:d0:0a:d8:
         dd:63:b3:eb:6f:25:f2:32:b8:17:1d:39:64:68:c8:21:38:dc:
         57:d5:25:c0:29:d4:08:0a:8d:a0:bb:38:a9:ef:5f:ae:91:9b:
         57:16:42:6f:b7:5b:a3:40:09:a8:ed:d0:73:7e:9c:a5:ca:f5:
         85:21:fd:11:01:67:a2:24:65:8c:8f:ef:b9:91:6b:3f:fa:7e:
         c1:8a:5f:59:de:f1:ce:04:c1:a5:e2:32:d2:2f:07:e3:66:74:
         8f:47:16:4e:b9:1a:1b:9d:db:e4:d4:a3:3c:47:53:7f:54:ef:
         65:c3:0f:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 6 06:46:11 2025 by rpki-client