Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/225B15F6178511ECB0C6F47CC4F9AE02.roa
File:                     225B15F6178511ECB0C6F47CC4F9AE02.roa (raw, json)
Hash identifier:          7Kb5nhQgGdkKjQwCZjwjq0iDoiKve+IXRDqAmjbPRdQ=
Subject key identifier:   19:DD:04:43:88:C3:D8:7B:BC:4C:C4:E9:4D:45:29:2F:D9:F9:77:58
Certificate issuer:       /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Certificate serial:       8E50
Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/225B15F6178511ECB0C6F47CC4F9AE02.roa
Signing time:             Thu 30 May 2024 16:19:12 +0000
ROA not before:           Thu 30 May 2024 16:19:12 +0000
ROA not after:            Tue 01 Jul 2025 00:00:00 +0000
asID:                     146887
IP address blocks:        103.173.40.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
                          rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 29 Nov 2024 06:14:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 36432 (0x8e50)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
        Validity
            Not Before: May 30 16:19:12 2024 GMT
            Not After : Jul  1 00:00:00 2025 GMT
        Subject: CN=6658a6ff-a43c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:90:94:7a:97:c1:95:0c:09:c8:fc:57:c3:af:
                    af:d6:fc:a4:3d:09:c2:cd:bb:b9:c8:c6:99:30:08:
                    22:ce:8b:7a:aa:e0:b5:da:81:40:82:ce:0f:ec:f7:
                    1c:50:65:91:3b:fe:39:8f:76:1b:82:01:cb:b8:b6:
                    d4:38:dc:f8:04:de:d3:ac:fc:6d:e1:2e:28:3e:68:
                    ff:5b:30:00:76:e4:d2:1e:f0:39:00:5b:db:1d:57:
                    ae:ab:63:49:00:8c:6c:a6:c3:c3:44:60:19:2e:90:
                    ce:62:82:33:df:c3:f7:9a:45:14:54:37:75:9b:1b:
                    3a:52:4d:a3:5e:82:3d:ca:5f:f1:7a:0d:a8:3a:7e:
                    c0:38:63:69:46:1d:5f:2d:c1:8d:f8:5f:57:89:ca:
                    14:a1:ae:d9:db:bc:89:e3:71:ab:cd:ed:aa:52:b0:
                    b7:56:1a:a0:02:24:24:8d:f3:47:cd:1e:7d:69:9d:
                    cc:f8:67:76:b6:a3:70:36:05:d1:e2:ae:4b:95:96:
                    75:49:4e:c7:e9:c5:1a:3d:72:b7:a6:f1:79:23:f1:
                    af:4e:3b:f3:bc:ba:07:9b:0b:79:99:18:fd:29:29:
                    9e:85:27:b5:85:5b:b7:1d:c9:7e:23:4c:39:d3:55:
                    c9:6d:3a:82:17:e4:6c:fc:0a:d5:df:8d:6a:b9:4f:
                    da:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                19:DD:04:43:88:C3:D8:7B:BC:4C:C4:E9:4D:45:29:2F:D9:F9:77:58
            X509v3 Authority Key Identifier:
                keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/225B15F6178511ECB0C6F47CC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.173.40.0/24

    Signature Algorithm: sha256WithRSAEncryption
         82:38:bf:fb:ec:b2:89:01:27:91:28:5e:ec:6f:fd:1c:2d:a2:
         33:f6:b3:9a:f6:5b:71:94:94:d5:ea:e7:f4:16:f8:78:88:56:
         8b:c6:2b:67:b2:4c:fc:50:45:0c:5f:34:ea:ab:ee:f3:9a:a8:
         69:02:29:f3:7c:f6:0a:90:a3:9e:45:cd:0f:69:95:02:59:25:
         7b:65:fb:40:39:36:e1:62:ec:71:d4:4a:1d:23:1d:e1:8d:d7:
         0e:61:ac:5c:2a:43:d1:25:28:79:a3:2a:8b:78:a5:f4:b1:5c:
         79:7a:e6:5f:df:2d:a6:a4:ed:6a:23:bf:b5:13:1a:90:bf:39:
         37:2d:bd:d9:14:fe:06:cc:ef:32:ca:59:48:92:86:64:9e:60:
         07:96:cc:3f:3d:61:d5:34:db:f5:9a:f2:a7:f8:95:49:f9:f2:
         e1:b1:d9:72:d1:ab:cf:d6:3a:ee:38:ec:60:e1:01:0a:88:2c:
         b1:32:80:cc:ae:a4:d5:75:78:49:91:3c:d9:d4:f9:1b:ec:b4:
         45:ac:3a:f5:b1:4b:26:8e:9d:8f:b6:d1:ff:cb:61:98:36:c9:
         39:4b:d8:c9:8e:a7:57:40:f9:44:f2:43:5e:36:88:52:d4:e8:
         98:14:07:69:67:15:82:37:6d:08:b1:d8:07:64:49:8c:1b:fb:
         97:01:28:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 11:47:36 2024 by rpki-client on console-ams.rpki-client.org