Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/5E037EB0BDCF11EA8755D90DC4F9AE02.roa
File:                     5E037EB0BDCF11EA8755D90DC4F9AE02.roa (raw, json)
Hash identifier:          +8EcQRtYGMMQG5apafE7gXCQo6t5GPuzAGE56lGfraM=
Subject key identifier:   39:49:C3:20:87:88:E9:85:62:DE:B5:6E:48:8E:21:49:F1:AE:18:F3
Certificate issuer:       /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Certificate serial:       8C3F
Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/5E037EB0BDCF11EA8755D90DC4F9AE02.roa
Signing time:             Thu 30 May 2024 16:10:31 +0000
ROA not before:           Thu 30 May 2024 16:10:31 +0000
ROA not after:            Tue 01 Jul 2025 00:00:00 +0000
asID:                     138747
IP address blocks:        103.137.61.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
                          rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 21 Feb 2025 05:15:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 35903 (0x8c3f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918EDB2
        Validity
            Not Before: May 30 16:10:31 2024 GMT
            Not After : Jul  1 00:00:00 2025 GMT
        Subject: CN=6658a4f6-ce14
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:14:e3:00:7c:ad:77:6e:f9:bc:7b:6b:6b:38:
                    67:cd:35:d9:9e:0d:d2:73:d5:ea:75:19:67:bc:6d:
                    94:7b:ae:e3:54:1e:ac:09:74:2e:fa:95:57:f9:39:
                    3f:0a:16:f1:80:88:12:a6:4b:09:8b:15:e9:b5:ab:
                    d6:be:5c:e2:bf:6d:e4:8b:95:aa:fc:c5:46:58:c1:
                    88:dc:f3:fd:91:05:f3:9d:0a:ca:01:bf:c4:25:e4:
                    6a:4e:86:27:ee:b4:e2:eb:61:98:f6:86:fc:58:b0:
                    76:35:33:e5:c9:d2:96:73:a8:25:6f:cf:ef:6a:27:
                    07:98:46:e1:8f:58:99:04:87:67:23:4d:dd:22:1e:
                    6f:14:9b:ac:a9:7f:17:6a:9d:1e:b5:9c:41:63:78:
                    42:12:ad:18:a4:44:98:e6:2e:f9:31:59:6c:a1:ba:
                    c6:af:42:d5:24:0e:0b:f8:87:80:08:5a:c8:ba:36:
                    22:98:80:18:32:11:9c:6f:c5:6d:61:87:6c:62:5a:
                    ae:38:71:5f:23:6c:8f:22:48:a5:00:eb:ca:91:9b:
                    1d:ed:9a:f1:f6:e0:6f:fb:13:be:be:b3:9a:8c:d8:
                    ae:c4:a9:f9:f4:53:a4:e4:3c:4c:1e:68:a9:59:49:
                    16:be:73:08:e2:54:65:d2:01:13:37:0b:1f:19:80:
                    73:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                39:49:C3:20:87:88:E9:85:62:DE:B5:6E:48:8E:21:49:F1:AE:18:F3
            X509v3 Authority Key Identifier:
                keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/5E037EB0BDCF11EA8755D90DC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.137.61.0/24

    Signature Algorithm: sha256WithRSAEncryption
         4c:a4:02:80:23:fd:c7:a1:be:19:cb:e4:cc:b8:ee:3f:bf:18:
         88:e3:2d:9c:fc:12:4e:e0:ce:7f:2f:c5:17:6d:5c:0d:3f:b8:
         b0:f0:97:34:c9:28:6d:e5:c5:3c:ea:54:9e:53:24:fd:fb:da:
         7e:5c:10:fb:7a:a0:20:1a:a1:d5:9b:ee:20:b0:a7:d6:53:c7:
         ce:ca:5a:7a:be:ae:1a:61:a4:97:a3:5f:70:85:3d:ad:d2:f9:
         4d:45:10:f7:8e:94:77:82:92:ea:1f:cb:7a:b9:b3:85:ea:59:
         55:1c:59:4f:4c:41:c8:f1:f6:43:44:33:39:f7:d8:9a:76:41:
         47:3d:c4:f4:06:78:57:54:3f:71:b9:d4:63:44:88:3b:d9:99:
         55:14:8a:81:7f:4c:22:e1:2e:66:11:e0:fe:44:82:e9:fc:24:
         ef:75:74:9b:8b:fb:06:fd:05:8e:45:19:84:3d:5e:c9:a0:01:
         92:77:79:52:83:e7:de:f5:20:49:d6:ec:d8:40:ad:b0:5e:a1:
         25:7e:ac:23:12:a6:82:be:7e:1a:3e:d2:ed:ca:04:54:d8:18:
         42:5d:31:a5:a6:34:0e:b0:cd:c7:c1:f7:7c:55:5b:74:28:48:
         3e:ef:19:51:0d:a5:d5:b8:4b:c5:95:f2:00:46:89:2c:31:32:
         a6:82:6b:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 20:12:22 2025 by rpki-client