Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/351D6B2465D111EFBE016A60C4F9AE02.roa
File:                     351D6B2465D111EFBE016A60C4F9AE02.roa (raw, json)
Hash identifier:          8curEmjzqamK9mn9eveV67iN1OWBK+7R1mIRBE4+zvQ=
Subject key identifier:   A5:CF:8A:55:34:61:BA:48:85:69:A2:8A:A3:2D:83:62:96:66:D1:EC
Certificate issuer:       /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Certificate serial:       97C8
Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/351D6B2465D111EFBE016A60C4F9AE02.roa
Signing time:             Thu 29 Aug 2024 06:42:00 +0000
ROA not before:           Thu 29 Aug 2024 06:42:00 +0000
ROA not after:            Tue 01 Jul 2025 00:00:00 +0000
asID:                     136331
IP address blocks:        103.54.27.0/24 maxlen: 24
                          2001:df1:1980::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
                          rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 21 Feb 2025 05:15:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 38856 (0x97c8)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918EDB2
        Validity
            Not Before: Aug 29 06:42:00 2024 GMT
            Not After : Jul  1 00:00:00 2025 GMT
        Subject: CN=66d01838-8e6f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:dd:4a:d3:a0:52:8e:14:55:fd:53:e2:10:51:
                    07:c3:d4:17:c2:3f:11:af:a6:9b:1a:33:04:c3:2d:
                    d8:28:61:ce:b5:13:77:01:cb:eb:62:3d:3c:ab:99:
                    ac:9e:27:b8:38:22:c4:3b:e8:f9:41:41:80:50:4a:
                    17:57:6a:0c:53:ed:16:df:54:bb:21:f3:75:8b:36:
                    57:20:3c:45:1f:f6:2c:24:bd:99:e6:92:72:7f:af:
                    54:40:de:68:cc:fc:9b:37:b4:78:1a:e1:45:2d:c9:
                    61:2d:2c:19:9c:e0:5e:cb:c9:1f:3d:56:7e:79:93:
                    29:c2:44:88:ef:23:bd:0e:73:5b:6a:81:99:55:e1:
                    52:7b:e0:ee:f0:82:38:d0:09:bb:b1:0f:15:cc:52:
                    cd:4e:2f:3d:b5:18:c6:88:e1:b3:05:c9:e8:8c:a5:
                    00:23:a0:80:d9:81:76:f4:43:d1:a9:1e:98:6f:d8:
                    ec:e6:40:ac:af:99:b7:97:b9:f1:ec:55:a4:ab:a0:
                    02:45:27:11:c3:4d:af:95:1c:73:ce:24:3f:ed:04:
                    c6:e8:50:7d:d8:b6:4f:5c:d9:8d:7c:79:b7:68:82:
                    ea:56:0a:4f:b7:10:25:a2:46:ce:ae:a6:90:f6:f0:
                    90:3a:5e:51:71:4d:11:c2:cf:65:c1:be:d4:95:8b:
                    bb:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A5:CF:8A:55:34:61:BA:48:85:69:A2:8A:A3:2D:83:62:96:66:D1:EC
            X509v3 Authority Key Identifier:
                keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/351D6B2465D111EFBE016A60C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.54.27.0/24
                IPv6:
                  2001:df1:1980::/48

    Signature Algorithm: sha256WithRSAEncryption
         87:f3:87:08:5c:79:56:cb:5e:da:54:18:5d:72:61:1c:c8:1c:
         21:df:26:b6:b5:c2:28:19:a3:fa:18:32:66:50:87:5a:e0:d9:
         87:53:04:0c:9e:55:7b:e3:10:06:a8:5a:79:d7:f2:c6:8e:2d:
         8b:0b:67:ef:7e:7f:b4:03:3c:b5:0f:f1:04:33:96:bb:7c:36:
         5e:bd:72:b8:9b:eb:64:80:5f:34:32:3c:3c:a9:80:36:00:55:
         71:04:cf:3d:67:0f:20:ca:e4:f0:cc:a4:80:49:9f:0c:3a:d3:
         54:26:bf:b6:c3:f9:48:fe:02:0b:2e:bb:1f:9a:fe:33:98:3d:
         ca:37:a2:e2:2f:5a:4c:09:30:fc:36:a7:e4:76:00:dc:0f:48:
         dc:7c:4d:e8:bc:58:bf:bd:57:13:73:21:7d:2d:91:fa:6c:69:
         86:18:66:8f:06:6a:56:72:5d:95:ac:6b:d9:c5:49:40:1c:fc:
         3e:44:03:52:53:f8:fc:a1:d2:24:f8:85:42:49:03:ba:cd:82:
         e1:2a:f6:ae:e8:25:6f:31:8c:3d:e1:46:3e:7a:de:34:fe:4c:
         57:3d:fa:72:56:94:0b:11:38:4d:37:07:ba:dd:e3:0e:ae:e7:
         d5:e6:a1:e1:d9:3e:8e:d7:ac:2c:fc:7b:8c:68:2b:e6:04:cb:
         84:0d:c3:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 20:37:24 2025 by rpki-client