Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/62141A7634E411ED8621260AC4F9AE02.roa
File:                     62141A7634E411ED8621260AC4F9AE02.roa (raw, json)
Hash identifier:          acdKhPt+o4DfW/x10bDL3OKpCt1VPMED8L69dsABr34=
Subject key identifier:   88:4D:A1:00:49:6C:E6:CD:57:E3:09:65:C0:4F:2F:D3:07:33:47:72
Certificate issuer:       /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Certificate serial:       8E98
Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/62141A7634E411ED8621260AC4F9AE02.roa
Signing time:             Thu 30 May 2024 16:20:21 +0000
ROA not before:           Thu 30 May 2024 16:20:21 +0000
ROA not after:            Tue 01 Jul 2025 00:00:00 +0000
asID:                     147233
IP address blocks:        103.175.72.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
                          rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 21 Feb 2025 05:15:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 36504 (0x8e98)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918EDB2
        Validity
            Not Before: May 30 16:20:21 2024 GMT
            Not After : Jul  1 00:00:00 2025 GMT
        Subject: CN=6658a745-bc56
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:2a:69:71:83:be:a8:05:be:83:12:3c:e2:9a:
                    ec:da:df:e9:57:71:df:06:14:ea:cb:a0:36:87:19:
                    98:dc:60:af:b7:85:84:1c:bd:05:76:91:e7:46:75:
                    c0:53:03:e3:00:dd:de:ad:9b:c9:22:88:3e:08:57:
                    d0:6c:dc:74:14:e3:00:96:4f:d7:5b:41:e1:5c:5b:
                    c0:19:75:8f:35:91:77:fc:98:b6:63:b7:e9:b9:08:
                    6d:ce:92:4b:da:4c:fc:ee:5e:d7:17:d7:e5:d0:ad:
                    ef:1e:48:44:38:6e:9b:ec:e3:90:3b:98:f5:39:d5:
                    4a:0b:1c:39:ba:54:06:cd:1a:da:3a:ea:87:9f:2e:
                    33:34:80:47:d5:6a:b9:b2:25:40:02:e4:cc:be:44:
                    ca:e7:f9:33:82:60:d6:c8:d7:75:ac:fa:3a:c7:3b:
                    23:63:99:aa:68:29:08:80:c6:00:a3:5f:1e:2d:4a:
                    c8:0b:65:31:e3:d1:c5:0d:f6:b9:d3:5e:e6:6f:ab:
                    c3:b6:07:ef:23:27:80:22:1f:c1:55:27:9d:5d:9c:
                    7d:42:65:2c:c6:81:e3:2f:f0:0e:9e:72:4d:7c:c4:
                    c9:18:5e:ee:56:09:f9:67:3f:e4:90:d4:49:ca:65:
                    1e:05:31:c2:92:c8:10:87:80:c9:a5:d8:94:1f:59:
                    b5:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                88:4D:A1:00:49:6C:E6:CD:57:E3:09:65:C0:4F:2F:D3:07:33:47:72
            X509v3 Authority Key Identifier:
                keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/62141A7634E411ED8621260AC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.175.72.0/23

    Signature Algorithm: sha256WithRSAEncryption
         5f:6d:1f:55:5f:bd:13:ca:c2:7f:62:be:88:bc:76:92:a8:78:
         45:0b:06:cc:e8:1f:a3:2b:cb:8a:97:65:ca:3c:3e:00:65:2a:
         bf:97:af:48:27:3d:ba:c2:ce:c5:e2:50:13:bb:18:ad:01:6f:
         6b:60:82:e9:a4:84:1d:b5:9b:a1:14:f4:b2:82:ab:b5:36:11:
         0c:15:ed:01:ec:b8:7e:fa:85:bd:7d:51:c6:63:5b:75:e3:d2:
         f9:b3:73:3d:b9:fe:38:3a:b2:6d:af:a0:64:35:ed:36:7e:2a:
         26:b7:ed:ad:8f:26:19:03:75:c0:a2:9f:2f:5f:1f:8a:d9:05:
         60:82:c7:62:e9:19:d2:18:26:79:5f:bb:eb:54:63:de:fb:2b:
         34:c8:72:dc:fb:08:51:8c:8a:63:5c:7d:a5:e1:f7:ca:c4:68:
         8c:a2:0a:83:b4:a0:13:6a:7a:92:36:c5:7f:d1:c2:f7:1c:6f:
         8a:4f:d6:de:5c:e7:1b:d1:ed:c6:0b:03:7d:da:c0:5c:16:35:
         9b:82:72:fb:0d:f4:ab:ef:9f:68:a8:2c:d0:94:ea:80:d1:45:
         3e:2f:ab:d3:d6:9e:0e:cb:41:3d:9c:26:16:f2:31:c0:ef:c2:
         6e:24:0e:04:bd:26:f8:f8:ec:df:75:73:74:8a:8d:8d:9f:06:
         e4:07:df:c3
-----BEGIN CERTIFICATE-----
MIIFcjCCBFqgAwIBAgIDAI6YMA0GCSqGSIb3DQEBCwUAMEYxETAPBgNVBAMTCEE5
MThFREIyMTEwLwYDVQQFEygyOTZFREI2NEYzQUY2RTlEOTgwOTMyRTgxNkY5NTk4
M0UzQUJDODIzMB4XDTI0MDUzMDE2MjAyMVoXDTI1MDcwMTAwMDAwMFowGDEWMBQG
A1UEAxMNNjY1OGE3NDUtYmM1NjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBAMoqaXGDvqgFvoMSPOKa7Nrf6Vdx3wYU6sugNocZmNxgr7eFhBy9BXaR50Z1
wFMD4wDd3q2bySKIPghX0GzcdBTjAJZP11tB4VxbwBl1jzWRd/yYtmO36bkIbc6S
S9pM/O5e1xfX5dCt7x5IRDhum+zjkDuY9TnVSgscObpUBs0a2jrqh58uMzSAR9Vq
ubIlQALkzL5Eyuf5M4Jg1sjXdaz6Osc7I2OZqmgpCIDGAKNfHi1KyAtlMePRxQ32
udNe5m+rw7YH7yMngCIfwVUnnV2cfUJlLMaB4y/wDp5yTXzEyRhe7lYJ+Wc/5JDU
ScplHgUxwpLIEIeAyaXYlB9ZtX0CAwEAAaOCApUwggKRMB0GA1UdDgQWBBSITaEA
SWzmzVfjCWXATy/TBzNHcjAfBgNVHSMEGDAWgBQpbttk869unZgJMugW+VmD46vI
IzAOBgNVHQ8BAf8EBAMCB4AwgYMGA1UdHwR8MHoweKB2oHSGcnJzeW5jOi8vcnBr
aS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkxOEVEQjIvMkE0M0UzMEM3
MEU5MTFFMkIzNkQ0QjZCMjk3OUJCMjAvS1c3YlpQT3ZicDJZQ1RMb0Z2bFpnLU9y
eUNNLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBr
aS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3
MkZEMUZGMi9LVzdiWlBPdmJwMllDVExvRnZsWmctT3J5Q00uY2VyMEoGA1UdIAEB
/wRAMD4wPAYIKwYBBQUHDgIwMDAuBggrBgEFBQcCARYiaHR0cHM6Ly93d3cuYXBu
aWMubmV0L1JQS0kvQ1BTLnBkZjCBywYIKwYBBQUHAQsEgb4wgbswgYMGCCsGAQUF
BzALhndyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5
MThFREIyLzJBNDNFMzBDNzBFOTExRTJCMzZENEI2QjI5NzlCQjIwLzYyMTQxQTc2
MzRFNDExRUQ4NjIxMjYwQUM0RjlBRTAyLnJvYTAzBggrBgEFBQcwDYYnaHR0cHM6
Ly9ycmRwLmFwbmljLm5ldC9ub3RpZmljYXRpb24ueG1sMB8GCCsGAQUFBwEHAQH/
BBAwDjAMBAIAATAGAwQBZ69IMA0GCSqGSIb3DQEBCwUAA4IBAQBfbR9VX70TysJ/
Yr6IvHaSqHhFCwbM6B+jK8uKl2XKPD4AZSq/l69IJz26ws7F4lATuxitAW9rYILp
pIQdtZuhFPSygqu1NhEMFe0B7Lh++oW9fVHGY1t149L5s3M9uf44OrJtr6BkNe02
fiomt+2tjyYZA3XAop8vXx+K2QVggsdi6RnSGCZ5X7vrVGPe+ys0yHLc+whRjIpj
XH2l4ffKxGiMogqDtKATanqSNsV/0cL3HG+KT9beXOcb0e3GCwN92sBcFjWbgnL7
DfSr759oqCzQlOqA0UU+L6vT1p4Oy0E9nCYW8jHA78JuJA4EvSb4+OzfdXN0io2N
nwbkB9/D
-----END CERTIFICATE-----
Generated at Sun Feb 16 20:33:25 2025 by rpki-client