Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/1E0A2812BDCB11EA8AB8267EC4F9AE02.roa
File:                     1E0A2812BDCB11EA8AB8267EC4F9AE02.roa (raw, json)
Hash identifier:          ideHaf4S9n8lv35xL3/0AQWf2MdFyjncoz0H7L1Thbc=
Subject key identifier:   42:F2:0E:EB:6A:12:06:98:51:B5:AC:6D:2C:CB:71:00:A0:7F:B2:6E
Certificate issuer:       /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Certificate serial:       8B75
Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/1E0A2812BDCB11EA8AB8267EC4F9AE02.roa
Signing time:             Thu 30 May 2024 16:07:18 +0000
ROA not before:           Thu 30 May 2024 16:07:18 +0000
ROA not after:            Tue 01 Jul 2025 00:00:00 +0000
asID:                     137115
IP address blocks:        103.110.186.0/24 maxlen: 24
                          103.110.187.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
                          rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 02 Dec 2024 10:54:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 35701 (0x8b75)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
        Validity
            Not Before: May 30 16:07:18 2024 GMT
            Not After : Jul  1 00:00:00 2025 GMT
        Subject: CN=6658a435-5afb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:1b:df:b0:54:ea:1e:ec:a6:39:17:34:fb:15:
                    5d:c8:e8:a9:69:3b:c6:cd:05:ca:e5:58:c9:06:5b:
                    9c:ed:b9:4d:a5:d5:3d:e8:b2:63:da:33:e6:08:4f:
                    94:f0:a6:d7:50:08:8b:34:44:7a:06:a3:17:c2:83:
                    19:7b:44:b7:cb:e6:0f:b9:36:81:9f:47:67:bc:df:
                    0f:38:c3:d6:91:f4:85:a0:13:06:40:65:48:c0:9f:
                    b0:15:d8:46:65:73:57:71:84:52:3f:c1:9d:3b:fa:
                    d4:35:ec:ef:b0:fd:08:4d:86:f4:53:3f:ee:d5:35:
                    1f:76:2c:09:ae:d3:dc:3b:a5:28:b8:05:67:5a:b8:
                    ab:1c:a9:31:5a:70:3e:88:e3:04:19:3c:b7:92:91:
                    74:b5:4a:bb:1c:61:12:a4:f7:9e:2b:bd:3d:97:43:
                    aa:42:37:76:27:c4:c3:db:94:66:9e:fb:4f:84:ac:
                    4e:9a:bb:18:65:75:bf:b5:4c:78:a1:55:b8:a0:48:
                    62:54:5d:e4:82:39:7d:ff:e0:8b:5e:b6:ae:76:54:
                    41:81:c4:01:8e:fa:eb:6d:28:38:18:5a:9a:ff:df:
                    d8:52:ce:eb:45:d6:15:d4:bb:4c:d4:25:81:b8:39:
                    46:c4:b9:c0:6d:ee:c3:6e:90:88:14:72:af:0e:fb:
                    59:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                42:F2:0E:EB:6A:12:06:98:51:B5:AC:6D:2C:CB:71:00:A0:7F:B2:6E
            X509v3 Authority Key Identifier:
                keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/1E0A2812BDCB11EA8AB8267EC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.110.186.0/23

    Signature Algorithm: sha256WithRSAEncryption
         b5:74:29:e6:98:c8:32:87:9a:53:32:e0:db:64:e5:bb:3a:27:
         5f:f9:e1:1b:bb:28:04:f8:79:84:8f:04:16:84:54:f1:d6:34:
         75:f2:8f:3c:89:a1:c1:73:c3:ea:76:de:f0:38:f3:01:0b:b2:
         fa:67:e7:73:9f:cd:ae:16:3e:89:6a:02:b7:02:d8:47:55:ee:
         fe:6f:41:61:d7:7b:23:4e:cd:82:28:fc:c1:49:e3:98:b3:42:
         3f:80:47:a9:1e:e6:6c:3b:a5:13:76:0f:dd:86:1d:61:22:0a:
         71:d1:b4:3c:fc:e7:bf:07:b5:f1:51:59:ac:43:fa:f1:a4:2b:
         a9:d2:8e:21:1f:50:d1:df:6a:86:f1:0a:58:ab:b8:23:de:dd:
         52:dc:13:50:18:98:fa:90:96:3a:c3:f2:45:5f:95:d4:4d:69:
         3b:51:12:15:41:f9:70:1b:0f:b2:c1:70:7e:53:e2:93:94:1f:
         0a:f1:76:32:cc:38:1a:ff:b5:ca:a4:92:14:e1:bd:50:ce:db:
         c1:a6:cc:3c:ea:91:03:39:fb:a4:e1:94:d3:9f:4e:38:bf:79:
         e1:41:86:ce:3f:82:82:25:8f:b5:5d:39:ae:80:07:78:75:ab:
         d6:7b:ea:f5:b4:6b:2c:ec:7a:ff:4a:7d:b0:9d:e2:fd:40:b3:
         92:01:1e:f6
-----BEGIN CERTIFICATE-----
MIIFcjCCBFqgAwIBAgIDAIt1MA0GCSqGSIb3DQEBCwUAMEYxETAPBgNVBAMTCEE5
MThFREIyMTEwLwYDVQQFEygyOTZFREI2NEYzQUY2RTlEOTgwOTMyRTgxNkY5NTk4
M0UzQUJDODIzMB4XDTI0MDUzMDE2MDcxOFoXDTI1MDcwMTAwMDAwMFowGDEWMBQG
A1UEAxMNNjY1OGE0MzUtNWFmYjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBALUb37BU6h7spjkXNPsVXcjoqWk7xs0FyuVYyQZbnO25TaXVPeiyY9oz5ghP
lPCm11AIizREegajF8KDGXtEt8vmD7k2gZ9HZ7zfDzjD1pH0haATBkBlSMCfsBXY
RmVzV3GEUj/BnTv61DXs77D9CE2G9FM/7tU1H3YsCa7T3DulKLgFZ1q4qxypMVpw
PojjBBk8t5KRdLVKuxxhEqT3niu9PZdDqkI3difEw9uUZp77T4SsTpq7GGV1v7VM
eKFVuKBIYlRd5II5ff/gi162rnZUQYHEAY76620oOBhamv/f2FLO60XWFdS7TNQl
gbg5RsS5wG3uw26QiBRyrw77WWECAwEAAaOCApUwggKRMB0GA1UdDgQWBBRC8g7r
ahIGmFG1rG0sy3EAoH+ybjAfBgNVHSMEGDAWgBQpbttk869unZgJMugW+VmD46vI
IzAOBgNVHQ8BAf8EBAMCB4AwgYMGA1UdHwR8MHoweKB2oHSGcnJzeW5jOi8vcnBr
aS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkxOEVEQjIvMkE0M0UzMEM3
MEU5MTFFMkIzNkQ0QjZCMjk3OUJCMjAvS1c3YlpQT3ZicDJZQ1RMb0Z2bFpnLU9y
eUNNLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBr
aS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3
MkZEMUZGMi9LVzdiWlBPdmJwMllDVExvRnZsWmctT3J5Q00uY2VyMEoGA1UdIAEB
/wRAMD4wPAYIKwYBBQUHDgIwMDAuBggrBgEFBQcCARYiaHR0cHM6Ly93d3cuYXBu
aWMubmV0L1JQS0kvQ1BTLnBkZjCBywYIKwYBBQUHAQsEgb4wgbswgYMGCCsGAQUF
BzALhndyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5
MThFREIyLzJBNDNFMzBDNzBFOTExRTJCMzZENEI2QjI5NzlCQjIwLzFFMEEyODEy
QkRDQjExRUE4QUI4MjY3RUM0RjlBRTAyLnJvYTAzBggrBgEFBQcwDYYnaHR0cHM6
Ly9ycmRwLmFwbmljLm5ldC9ub3RpZmljYXRpb24ueG1sMB8GCCsGAQUFBwEHAQH/
BBAwDjAMBAIAATAGAwQBZ266MA0GCSqGSIb3DQEBCwUAA4IBAQC1dCnmmMgyh5pT
MuDbZOW7Oidf+eEbuygE+HmEjwQWhFTx1jR18o88iaHBc8Pqdt7wOPMBC7L6Z+dz
n82uFj6JagK3AthHVe7+b0Fh13sjTs2CKPzBSeOYs0I/gEepHuZsO6UTdg/dhh1h
Igpx0bQ8/Oe/B7XxUVmsQ/rxpCup0o4hH1DR32qG8QpYq7gj3t1S3BNQGJj6kJY6
w/JFX5XUTWk7URIVQflwGw+ywXB+U+KTlB8K8XYyzDga/7XKpJIU4b1QztvBpsw8
6pEDOfuk4ZTTn044v3nhQYbOP4KCJY+1XTmugAd4davWe+r1tGss7Hr/Sn2wneL9
QLOSAR72
-----END CERTIFICATE-----
Generated at Mon Nov 25 13:17:05 2024 by rpki-client on console-ams.rpki-client.org