Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/1227494C21E411ED9B456635C4F9AE02.roa
File:                     1227494C21E411ED9B456635C4F9AE02.roa (raw, json)
Hash identifier:          HmSHWCYhDC/nhlP8agLtJmas6FUYKOgweaUTH6hmFhY=
Subject key identifier:   DA:D0:25:77:93:2C:FC:99:96:0B:E6:23:7B:CF:3A:2C:04:95:4A:7A
Certificate issuer:       /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Certificate serial:       90B6
Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/1227494C21E411ED9B456635C4F9AE02.roa
Signing time:             Thu 30 May 2024 16:29:07 +0000
ROA not before:           Thu 30 May 2024 16:29:07 +0000
ROA not after:            Tue 01 Jul 2025 00:00:00 +0000
asID:                     21537
IP address blocks:        103.190.10.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
                          rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 02 Dec 2024 10:54:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 37046 (0x90b6)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
        Validity
            Not Before: May 30 16:29:07 2024 GMT
            Not After : Jul  1 00:00:00 2025 GMT
        Subject: CN=6658a953-2f8b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:d5:cc:62:c6:01:17:73:a7:44:01:ce:0e:9c:
                    da:4a:c7:85:bf:cd:8c:00:09:34:6e:9b:d0:fc:05:
                    78:f6:1c:f9:0b:8c:9a:20:3e:8e:55:89:d4:7f:ad:
                    bc:22:f7:5b:77:2e:fc:39:60:e1:15:33:61:02:33:
                    a6:38:50:98:ed:2b:00:f8:3d:f3:50:5a:d9:12:a8:
                    32:dd:9d:be:c6:2e:93:64:bb:37:c2:84:4e:e6:ef:
                    e3:09:76:94:2e:b2:d9:a1:5d:f7:1f:57:6e:6f:c4:
                    17:df:95:20:03:54:14:e7:70:ea:29:46:98:8a:af:
                    21:f1:62:d9:96:cc:3d:5f:8b:d8:83:07:8d:95:54:
                    63:36:2c:6e:11:f6:9b:b1:8c:e6:9b:68:ed:2f:23:
                    2b:20:92:60:5b:f6:3d:3d:08:47:20:d2:8a:cc:39:
                    89:bf:e2:ec:55:d6:fd:71:f4:81:65:3a:4b:b9:7d:
                    9d:08:b6:41:48:81:19:c8:d0:eb:0b:4d:e8:3c:25:
                    fb:72:8b:44:d5:9a:eb:27:c7:6f:5e:b1:11:ca:a8:
                    85:ee:a3:e0:d9:8c:6f:7f:ed:73:31:69:e0:d3:cc:
                    0a:a1:d0:fb:f3:ea:62:c3:6c:33:e8:a9:85:c2:0a:
                    16:b8:2f:2e:f8:f4:e9:19:d5:47:a4:7d:0d:75:fa:
                    c2:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DA:D0:25:77:93:2C:FC:99:96:0B:E6:23:7B:CF:3A:2C:04:95:4A:7A
            X509v3 Authority Key Identifier:
                keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/1227494C21E411ED9B456635C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.190.10.0/24

    Signature Algorithm: sha256WithRSAEncryption
         29:ff:2c:98:66:9e:a2:86:a9:f9:a9:88:2b:17:17:8a:ae:2d:
         ec:9c:19:b8:3f:ef:e4:d8:e0:d9:84:45:7d:a6:44:ac:7c:d9:
         a6:77:75:0b:4e:d6:fd:5c:29:76:c8:64:f3:85:d1:dc:be:8f:
         b0:50:eb:80:2f:14:0e:16:bb:68:ad:29:ee:a8:9f:a5:71:b7:
         5f:6e:08:8b:9a:a3:fa:fd:f2:32:b1:db:e4:f7:95:2c:11:4c:
         50:c2:97:7b:8f:0c:9e:a6:07:91:f7:8a:e1:b4:7e:7b:b0:14:
         fe:20:e4:d2:ee:dd:1e:bd:02:47:60:5b:49:9a:c3:61:a7:d1:
         b8:e5:e7:e7:3e:82:25:ca:74:29:c9:58:30:47:46:c0:33:ff:
         1d:19:db:a8:ac:3b:45:97:ab:2f:18:ea:1e:02:3c:5e:24:e1:
         47:17:22:24:23:48:77:04:ce:1d:5d:5d:3e:bd:0d:35:12:a0:
         6b:e6:c6:e2:e2:a8:04:36:5c:95:82:ea:a6:9b:44:5d:cf:7c:
         9c:dc:b3:c1:2e:fd:d2:5d:fe:f1:54:04:b4:69:f4:86:e5:e5:
         04:92:62:ec:be:1e:5f:e7:6e:8e:90:bc:ce:b8:65:3b:61:54:
         e1:31:dd:21:c8:7f:6c:0c:32:6e:c3:4c:c3:eb:a9:38:cb:a3:
         8a:72:ea:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 25 13:04:42 2024 by rpki-client on console-fra.rpki-client.org