Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/181B8B66CD2911ECB748426CC4F9AE02.roa
File:                     181B8B66CD2911ECB748426CC4F9AE02.roa (raw, json)
Hash identifier:          bzyjj70XXGVxOXuyqzLYlX1L8jeZuZq78FYnAofkTzg=
Subject key identifier:   EA:23:AC:F3:81:AE:5E:14:52:84:F1:2F:B2:A9:67:43:21:CA:50:FF
Certificate issuer:       /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Certificate serial:       8DFC
Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/181B8B66CD2911ECB748426CC4F9AE02.roa
Signing time:             Thu 30 May 2024 16:17:50 +0000
ROA not before:           Thu 30 May 2024 16:17:50 +0000
ROA not after:            Tue 01 Jul 2025 00:00:00 +0000
asID:                     142464
IP address blocks:        103.168.216.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
                          rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 02 Dec 2024 10:54:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 36348 (0x8dfc)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
        Validity
            Not Before: May 30 16:17:50 2024 GMT
            Not After : Jul  1 00:00:00 2025 GMT
        Subject: CN=6658a6ad-5d7f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f4:15:a5:68:7b:29:82:02:06:43:25:e2:a3:c2:
                    64:50:90:6f:d3:a9:a9:6d:c3:bc:df:69:d1:b7:2c:
                    7f:4a:85:57:23:d2:f3:69:6e:5f:05:63:e7:b2:e4:
                    50:99:c7:bb:8c:a2:47:d5:3c:e5:fb:ab:1f:ae:7b:
                    fe:4c:1c:91:ac:fe:a0:7b:3e:1b:f5:78:06:e8:a8:
                    20:36:9b:10:65:d9:00:8b:41:72:e7:22:44:90:ad:
                    1d:2c:8f:34:32:c8:a0:b9:04:c4:34:9a:9c:76:49:
                    1e:b3:02:52:4f:00:f3:6a:4c:87:52:45:e2:9e:de:
                    15:da:1e:4e:e7:db:b2:22:9a:8b:48:f3:70:bc:1e:
                    24:5f:3c:8c:43:ce:7b:71:3e:49:1d:c9:a3:82:1b:
                    47:35:99:e1:94:56:f2:d1:99:3c:16:3f:f4:5e:e5:
                    31:8a:c2:07:96:aa:ee:74:7f:27:36:a8:88:cc:1d:
                    e3:67:b7:b7:86:d3:30:58:7f:d2:b3:df:37:34:9e:
                    10:85:8d:42:9a:d9:6c:93:c8:f1:2b:38:b3:81:90:
                    74:29:78:5d:ee:dd:37:0d:36:42:20:91:6c:1a:de:
                    90:49:42:0a:23:59:48:65:1d:6f:0c:95:90:3f:f6:
                    8b:da:ca:53:f6:30:0d:dd:d2:3b:f1:e2:76:1a:ad:
                    be:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EA:23:AC:F3:81:AE:5E:14:52:84:F1:2F:B2:A9:67:43:21:CA:50:FF
            X509v3 Authority Key Identifier:
                keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/181B8B66CD2911ECB748426CC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.168.216.0/24

    Signature Algorithm: sha256WithRSAEncryption
         5d:83:4b:68:70:9e:52:19:68:27:45:c8:30:ff:ab:1c:e8:5e:
         61:87:e8:89:ae:71:19:2e:43:c9:9d:fd:0c:d0:e3:8c:67:54:
         31:8e:e5:ae:57:75:eb:47:86:f5:bc:15:78:e6:2b:a3:8a:60:
         c1:22:15:d2:85:2a:e5:4f:84:bd:26:69:9d:15:a6:85:da:f2:
         7c:41:81:0d:8f:28:33:32:75:11:c8:c2:9a:91:f2:54:1d:92:
         d2:4c:96:11:5a:90:73:e6:fd:b1:bd:5b:d4:50:82:49:88:7f:
         a1:b0:45:a8:33:ca:43:8d:8b:7c:5d:46:91:e1:4b:c4:3e:b3:
         6c:d5:bd:d9:67:4e:b4:d7:96:c8:05:90:81:0b:1a:a8:d9:73:
         bd:79:06:ce:c0:67:93:1b:80:04:7d:01:cf:f4:c4:18:1d:ec:
         36:05:49:13:72:ad:a7:0e:68:fa:7e:99:ec:0e:e8:fb:ee:65:
         7c:e7:8a:e5:00:fb:7a:d8:61:ab:96:b9:08:83:12:7f:6a:52:
         77:a5:de:b1:33:2c:e4:e3:26:c0:e7:04:34:a7:f6:10:31:55:
         10:66:d6:53:f5:53:be:c5:67:96:2b:3d:fc:eb:4b:17:d1:57:
         03:13:d6:df:fd:fb:38:c9:28:1c:60:ad:ca:17:99:81:db:d3:
         b3:66:d2:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 25 13:17:05 2024 by rpki-client on console-ams.rpki-client.org