Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/37F380B027F811EBB6ADAF84C4F9AE02.roa
File:                     37F380B027F811EBB6ADAF84C4F9AE02.roa (raw, json)
Hash identifier:          MxKPl5US1NbM1NBQTqdT5ZFYOy0n8z0KWhebWqr5VGo=
Subject key identifier:   EB:64:4E:F9:A7:FD:7B:EE:0E:45:E1:29:9A:E5:CF:24:67:34:2D:8A
Certificate issuer:       /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Certificate serial:       8A69
Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/37F380B027F811EBB6ADAF84C4F9AE02.roa
Signing time:             Thu 30 May 2024 16:02:53 +0000
ROA not before:           Thu 30 May 2024 16:02:53 +0000
ROA not after:            Tue 01 Jul 2025 00:00:00 +0000
asID:                     135734
IP address blocks:        103.144.92.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
                          rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 21 Feb 2025 05:15:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 35433 (0x8a69)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918EDB2
        Validity
            Not Before: May 30 16:02:53 2024 GMT
            Not After : Jul  1 00:00:00 2025 GMT
        Subject: CN=6658a32c-7c32
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:9b:c0:b1:25:db:49:59:33:8e:7e:36:17:aa:
                    a6:3e:d1:2a:7f:70:fe:e8:1c:7b:65:38:b1:8b:89:
                    cb:bc:53:ff:3d:b5:ab:36:7c:a8:51:5b:b4:33:25:
                    e8:9b:b9:8c:6a:56:20:8b:91:77:5b:70:5c:fc:16:
                    04:1b:60:35:48:1b:5d:08:7f:6b:f4:87:fb:81:f6:
                    ba:c4:04:e8:b8:7b:49:a9:f3:3f:99:e3:d0:ea:e8:
                    58:88:5a:72:38:2c:5a:c1:1d:1e:71:93:13:6b:b6:
                    2a:b6:25:56:1f:5c:a7:4f:b8:8d:1d:f0:a6:c4:15:
                    a7:74:fd:41:0c:0f:41:9d:21:f1:8e:b1:be:77:72:
                    75:1c:2b:b3:f7:96:6d:93:2f:33:90:95:c6:e3:64:
                    3b:7c:3e:b7:1d:bf:20:ed:bc:0a:20:da:c0:63:4a:
                    c6:dd:0d:3f:51:f4:c7:ec:6f:3e:50:6c:c6:6a:ce:
                    7a:2e:63:97:72:93:89:b7:c3:bb:17:9a:6b:e5:68:
                    5a:c6:9b:c8:71:a0:35:0c:92:53:da:b4:e0:05:6c:
                    e0:81:af:34:a1:aa:ae:22:f7:00:2a:66:f4:d2:b0:
                    fa:6f:4f:6a:5d:b4:26:75:36:4c:74:a0:48:e0:09:
                    77:d2:31:f0:2c:fd:40:e0:28:63:2e:6d:0c:a9:b0:
                    90:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EB:64:4E:F9:A7:FD:7B:EE:0E:45:E1:29:9A:E5:CF:24:67:34:2D:8A
            X509v3 Authority Key Identifier:
                keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/37F380B027F811EBB6ADAF84C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.144.92.0/23

    Signature Algorithm: sha256WithRSAEncryption
         45:32:10:a3:dc:cd:c1:82:a7:5b:4b:4a:07:5e:72:83:63:60:
         e2:33:20:bd:58:29:77:2e:dd:da:30:1e:20:bc:30:1c:4f:cc:
         08:a2:21:2d:0d:86:ac:b8:35:a0:89:c0:ee:0f:e5:05:ac:e1:
         a0:86:c3:79:66:00:68:a2:62:bc:45:e2:cb:03:9d:c4:7e:3c:
         72:3d:bc:c1:24:a1:7a:de:da:c8:34:75:4e:5d:b8:38:d3:ea:
         91:a2:98:3d:61:c0:89:b2:cb:18:91:48:c1:6f:db:bf:66:6e:
         b3:18:46:aa:2d:12:e4:88:28:08:4e:80:a6:2c:46:be:45:11:
         83:7e:9d:07:0d:dc:46:df:a2:e9:5e:47:4a:4f:9d:aa:81:c4:
         46:7a:5a:cf:b2:10:b3:12:3c:a1:a5:fa:6d:29:7c:03:8e:72:
         5e:c2:1f:3c:27:6c:98:a5:4b:f0:6e:04:57:99:b8:cc:41:7d:
         f7:bd:86:88:65:d6:fd:85:6b:d9:34:cf:80:4f:7c:38:2f:80:
         7d:c7:64:1c:93:37:69:0f:b1:9f:66:b1:8c:a1:21:8c:4f:a5:
         41:98:d6:c5:dd:f7:da:11:dd:39:8f:cf:29:41:6c:88:55:d6:
         00:21:79:7c:12:cf:ab:81:f2:38:ca:08:6c:bc:47:44:4a:fd:
         e1:81:01:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 20:32:34 2025 by rpki-client