Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/317841BAE79511EAA3AE7153C4F9AE02.roa
File:                     317841BAE79511EAA3AE7153C4F9AE02.roa (raw, json)
Hash identifier:          +ei7aAoEGhBiPFOp6okDqQQBS8+fR/sVP0m3n5zFvUk=
Subject key identifier:   BB:77:BE:54:7B:D2:BD:3F:00:FB:15:2F:9B:6B:BE:72:E3:1D:E4:EF
Certificate issuer:       /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Certificate serial:       8CE6
Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/317841BAE79511EAA3AE7153C4F9AE02.roa
Signing time:             Thu 30 May 2024 16:13:19 +0000
ROA not before:           Thu 30 May 2024 16:13:19 +0000
ROA not after:            Tue 01 Jul 2025 00:00:00 +0000
asID:                     140186
IP address blocks:        103.152.181.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
                          rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 02 Dec 2024 10:54:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 36070 (0x8ce6)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
        Validity
            Not Before: May 30 16:13:19 2024 GMT
            Not After : Jul  1 00:00:00 2025 GMT
        Subject: CN=6658a59f-1070
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e5:44:99:75:50:ff:ef:b7:ca:74:40:03:91:d5:
                    f1:20:7a:ef:b9:1b:46:de:91:bb:85:ac:c0:1a:f5:
                    91:b3:f7:7a:04:d3:9e:17:e1:88:d4:6d:d1:54:62:
                    22:27:7d:1e:16:70:a2:33:22:ec:c0:75:2a:00:11:
                    88:e8:12:5b:bc:82:5a:9d:60:f8:d7:1c:71:01:9f:
                    74:7d:52:80:40:af:f5:04:90:8d:95:98:6e:dd:22:
                    b5:d7:a8:c0:2b:46:2b:09:30:21:80:c8:f8:6b:3a:
                    18:9b:7d:f7:70:8a:60:b7:07:c4:5b:6c:6a:53:3b:
                    e0:dd:ab:53:f8:77:9a:df:9a:fb:bb:55:86:12:32:
                    9c:01:e4:92:2b:99:13:35:e6:4c:e1:e4:e8:91:87:
                    b4:ec:1a:13:ce:07:48:7f:af:97:12:51:63:08:5d:
                    af:73:e4:93:a1:12:4f:d4:2c:0d:e1:65:e7:4e:67:
                    16:f8:ca:05:22:72:e1:17:91:f1:7d:c9:7f:19:33:
                    5f:32:1c:26:63:ba:c3:8e:3e:66:84:56:eb:a5:a7:
                    0f:05:95:08:3d:f6:27:30:3d:c1:a8:61:34:71:3c:
                    fb:46:25:65:b7:0c:c0:e8:1c:7b:25:63:a4:93:a8:
                    f6:1f:6f:94:0f:c2:4e:9b:80:1e:36:ed:d1:1a:0c:
                    16:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BB:77:BE:54:7B:D2:BD:3F:00:FB:15:2F:9B:6B:BE:72:E3:1D:E4:EF
            X509v3 Authority Key Identifier:
                keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/317841BAE79511EAA3AE7153C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.152.181.0/24

    Signature Algorithm: sha256WithRSAEncryption
         09:3c:d3:ff:cd:2a:d5:7f:ec:d2:2a:4b:6c:76:e1:0e:1d:e8:
         4c:8a:ec:c4:14:35:2c:5b:07:e6:71:ab:11:23:f4:ee:a0:09:
         35:9e:3b:a1:d3:2a:ae:ee:1a:1e:22:eb:31:c7:40:c7:d1:fd:
         f0:c0:6b:b4:3d:ba:04:b0:71:5c:de:61:39:df:33:cc:61:17:
         47:b2:3b:d5:e8:f2:56:23:54:7d:41:04:05:aa:fc:4e:af:4b:
         52:4e:04:12:92:01:65:24:97:9b:9e:ee:04:9f:cb:6a:01:d1:
         38:a3:1d:30:92:57:05:55:18:1f:6f:98:1e:b2:43:88:56:e9:
         42:09:8d:80:5e:d2:b4:2d:7f:bc:47:3f:f3:c7:dc:02:70:49:
         ff:a5:bb:df:a1:ef:52:e1:e9:b9:bb:15:09:a3:11:91:14:a6:
         38:62:22:db:6e:5b:13:fb:50:73:40:9a:81:8d:21:eb:4c:d3:
         68:24:3c:00:0d:80:39:21:28:1a:39:6e:bf:15:08:7e:f3:22:
         bf:7d:b8:13:f4:e0:b2:45:cc:1a:56:08:63:da:a1:db:a6:cc:
         31:4d:11:ed:a8:d9:7a:7b:b7:59:d7:55:2d:48:d9:86:9d:98:
         95:e2:33:c1:70:82:f5:8e:a0:46:e3:b7:f9:4d:2e:18:e2:3c:
         c2:23:81:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 25 13:04:47 2024 by rpki-client on console-fra.rpki-client.org