Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/1493F91C619711ED9437B344C4F9AE02.roa
File:                     1493F91C619711ED9437B344C4F9AE02.roa (raw, json)
Hash identifier:          7uIzOAc2sA8v+6C09C68UtaO7ATG4c4bZ2kwCsxtS+0=
Subject key identifier:   60:7E:3F:5E:4C:29:2D:0B:74:7A:3A:3D:2D:4F:94:A8:DC:CC:DA:0C
Certificate issuer:       /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Certificate serial:       8F42
Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/1493F91C619711ED9437B344C4F9AE02.roa
Signing time:             Thu 30 May 2024 16:23:05 +0000
ROA not before:           Thu 30 May 2024 16:23:05 +0000
ROA not after:            Tue 01 Jul 2025 00:00:00 +0000
asID:                     149593
IP address blocks:        103.189.178.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
                          rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 21 Feb 2025 05:15:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 36674 (0x8f42)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918EDB2
        Validity
            Not Before: May 30 16:23:05 2024 GMT
            Not After : Jul  1 00:00:00 2025 GMT
        Subject: CN=6658a7e9-8c8d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:25:cd:2e:41:54:57:64:60:c4:a4:b0:bc:c0:
                    1f:b8:0c:0c:6f:10:bb:02:3a:29:40:35:48:3d:c7:
                    32:a0:ce:b3:28:43:a9:96:51:89:e4:76:1c:b1:db:
                    67:af:51:04:70:45:52:1e:37:49:72:1b:15:b1:38:
                    fe:92:aa:2d:75:a2:cf:99:7f:c9:7d:06:92:fa:5a:
                    b1:23:91:ef:0a:cc:f6:41:66:f0:3a:f7:d4:74:dc:
                    a4:b2:6e:2d:cc:a4:17:43:c8:f5:f8:e4:01:9b:5e:
                    f2:dd:92:fa:89:38:e6:37:1e:66:79:f9:b1:6f:28:
                    af:67:f1:11:ca:2e:30:d7:5a:1f:aa:dc:ae:45:95:
                    3d:39:8a:50:0d:49:95:c9:45:e2:76:5c:59:e9:3c:
                    1e:5c:52:9a:84:4c:24:ee:b4:d7:2d:e5:de:25:b7:
                    5e:cc:32:8e:b6:92:c3:a3:04:df:6f:ff:70:7a:0d:
                    27:7b:26:ff:c0:dc:dd:a6:19:d6:92:fc:5e:bd:2e:
                    15:12:e9:ae:db:ee:08:f7:be:df:37:cd:1b:e8:0d:
                    e4:fe:bd:63:fb:50:1d:01:f2:48:55:24:6f:76:b4:
                    92:23:78:86:d5:90:7e:bf:03:f9:8e:6c:8b:f2:22:
                    28:a2:7f:c2:11:a6:ea:9b:ee:fa:e3:c5:6e:78:a3:
                    d5:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                60:7E:3F:5E:4C:29:2D:0B:74:7A:3A:3D:2D:4F:94:A8:DC:CC:DA:0C
            X509v3 Authority Key Identifier:
                keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/1493F91C619711ED9437B344C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.189.178.0/24

    Signature Algorithm: sha256WithRSAEncryption
         b3:2e:4c:43:e3:12:be:a3:32:71:63:6e:c0:1f:0e:2c:21:d4:
         97:3f:fa:fe:ac:74:d5:e2:a4:b2:c1:c3:d2:df:47:ef:46:11:
         5a:0f:03:9a:8b:0f:f4:a4:ce:82:7e:ce:7b:fe:b7:23:5d:79:
         bf:32:79:b3:61:01:8a:43:2b:5a:fc:81:9a:6f:9d:8b:e3:ae:
         5f:41:4a:0a:1d:fc:5e:97:f0:eb:4b:9b:50:bc:36:56:5f:19:
         f1:17:a8:d4:a3:ae:22:d0:12:70:6e:28:6e:41:65:2a:0e:1a:
         a9:73:89:20:9d:d7:70:55:1c:18:38:78:47:b9:bd:42:5f:4f:
         27:96:d3:0e:cc:07:22:a6:3a:b3:d3:21:00:8d:1f:89:dc:c3:
         b8:af:33:0b:e3:cd:e7:ae:3f:0a:4f:5c:83:3e:dc:0c:51:92:
         12:b7:59:bf:7f:22:a1:a4:74:4f:18:3a:67:84:95:89:d1:ba:
         0e:b9:b4:26:bf:b0:54:37:30:32:a9:b3:3d:9e:7b:6d:5d:5e:
         a8:cb:0a:c3:5e:33:cf:89:8f:68:74:41:86:7f:f6:40:a2:7e:
         8b:5e:5e:b1:80:ce:07:42:df:c9:c2:7c:68:03:1a:67:29:53:
         8e:9a:7d:b6:ca:5c:cd:ed:2a:97:59:f3:b8:1e:42:0d:8e:c7:
         3d:d9:90:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 20:20:45 2025 by rpki-client