Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/1E026214BCB311EDB63ABA82C4F9AE02.roa
File:                     1E026214BCB311EDB63ABA82C4F9AE02.roa (raw, json)
Hash identifier:          +OfHLURaCrbA8rT+LBTEMLPRzclE59d3fDcfk8fHWeI=
Subject key identifier:   CA:54:80:93:BE:25:E2:B7:AA:D7:83:D6:87:53:E7:D1:E3:96:E1:22
Certificate issuer:       /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Certificate serial:       8F2B
Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/1E026214BCB311EDB63ABA82C4F9AE02.roa
Signing time:             Thu 30 May 2024 16:22:41 +0000
ROA not before:           Thu 30 May 2024 16:22:41 +0000
ROA not after:            Tue 01 Jul 2025 00:00:00 +0000
asID:                     149561
IP address blocks:        103.189.182.0/23 maxlen: 24
                          2001:df2:28c0::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
                          rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 21 Feb 2025 05:15:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 36651 (0x8f2b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918EDB2
        Validity
            Not Before: May 30 16:22:41 2024 GMT
            Not After : Jul  1 00:00:00 2025 GMT
        Subject: CN=6658a7d1-cc58
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:a9:6f:c2:eb:cc:75:fa:55:94:0b:14:59:b5:
                    79:ef:02:8f:06:73:58:c9:5f:74:25:c0:63:2b:c0:
                    0f:0e:da:71:e5:29:0f:bf:4a:94:3f:7e:51:98:c4:
                    1b:15:57:62:2b:fc:bb:d7:d1:22:1d:6f:a8:4a:33:
                    45:75:d0:4f:f0:6d:67:fa:c9:8e:e5:25:85:e7:66:
                    dc:56:4a:d4:df:03:ee:f0:f8:c0:eb:5a:71:64:6f:
                    ff:ff:1b:e2:a8:c9:5a:70:3b:b9:76:48:ff:28:c5:
                    b2:59:16:a2:07:5d:2a:be:e8:40:44:04:75:ff:44:
                    28:c3:9b:6c:f4:18:c2:9c:89:17:52:7d:01:67:47:
                    fb:59:02:62:0c:8f:44:e3:db:2d:a0:98:73:4c:20:
                    5d:7a:b0:5d:59:6c:5c:bc:9e:3d:85:3c:cf:94:eb:
                    4e:c3:ec:7d:24:66:31:1e:70:53:31:01:e7:29:09:
                    3d:1b:98:c4:a9:17:a2:e5:79:0f:f2:52:47:9f:b7:
                    e1:db:0f:04:79:2d:3e:a5:23:dd:fb:b2:1b:2b:6e:
                    89:c7:3d:28:d7:93:33:11:fe:8c:70:7b:29:70:f2:
                    f1:b5:36:14:c6:0b:a5:ab:44:3d:2a:9c:00:fd:5a:
                    ac:38:24:dd:70:cc:2b:ba:a6:aa:63:94:f4:da:72:
                    99:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CA:54:80:93:BE:25:E2:B7:AA:D7:83:D6:87:53:E7:D1:E3:96:E1:22
            X509v3 Authority Key Identifier:
                keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/1E026214BCB311EDB63ABA82C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.189.182.0/23
                IPv6:
                  2001:df2:28c0::/48

    Signature Algorithm: sha256WithRSAEncryption
         ac:48:ba:6a:6d:f3:07:2a:b4:c3:96:b4:a3:3a:bb:51:cc:7d:
         f6:e9:c4:94:7f:3f:c5:ae:39:d5:56:3a:74:5d:a9:ad:05:44:
         b7:51:87:2d:92:65:93:d7:1c:3d:11:17:c8:d0:02:b6:47:ea:
         12:d1:74:82:0f:53:bd:e3:c3:35:da:6e:56:73:27:e9:d3:9c:
         a0:b8:e9:a5:71:3f:79:b4:e4:4f:20:cf:92:ad:22:98:93:75:
         08:63:87:65:47:a6:99:d8:a1:82:89:cd:e9:ba:b6:4c:84:30:
         29:0e:c1:dc:fc:a9:3b:83:50:98:45:fd:c8:13:42:72:8a:83:
         2c:4d:0b:2e:d6:cd:42:2e:d5:03:c1:4a:e5:13:b6:83:af:56:
         3b:b5:08:3a:ef:ad:eb:97:fa:c1:e6:47:3e:c4:93:66:b7:80:
         a8:b8:f3:c7:7e:e4:3d:fa:74:fd:8d:44:55:de:37:af:a1:bc:
         84:66:ec:bd:07:60:dc:4a:2f:46:e5:85:ee:82:8e:58:b1:4c:
         99:e3:3f:0a:9d:ae:80:5f:9c:7e:3f:79:53:83:a3:df:45:a7:
         34:b5:35:c9:2d:dc:f5:05:05:4b:0e:ef:25:8e:6f:a5:56:54:
         95:50:62:b9:d5:62:b2:85:33:82:fd:18:0a:e4:1d:29:ad:a7:
         8c:fc:a3:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 20:17:13 2025 by rpki-client