Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/6894223C413E11ECA7A0235AC4F9AE02.roa
File:                     6894223C413E11ECA7A0235AC4F9AE02.roa (raw, json)
Hash identifier:          HgwEPWl45GkeEI6CFXaMlnPdFTrP68zdNApjgiaszyk=
Subject key identifier:   C1:F5:EC:59:7B:67:30:0C:85:05:90:AC:38:50:AD:DF:32:E3:53:5D
Certificate issuer:       /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Certificate serial:       8B9B
Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/6894223C413E11ECA7A0235AC4F9AE02.roa
Signing time:             Thu 30 May 2024 16:07:54 +0000
ROA not before:           Thu 30 May 2024 16:07:54 +0000
ROA not after:            Tue 01 Jul 2025 00:00:00 +0000
asID:                     137170
IP address blocks:        103.112.32.0/22 maxlen: 22
                          103.112.32.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
                          rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 21 Feb 2025 05:15:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 35739 (0x8b9b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918EDB2
        Validity
            Not Before: May 30 16:07:54 2024 GMT
            Not After : Jul  1 00:00:00 2025 GMT
        Subject: CN=6658a45a-2ca9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:fa:33:89:18:d6:cd:db:7a:c4:b0:0b:fd:9b:59:
                    75:ae:96:b5:ae:fc:e1:e9:bb:f2:8c:49:08:0c:0b:
                    be:53:6d:aa:7f:14:5b:66:b3:c5:3d:f6:b4:1b:dc:
                    ab:c9:7b:01:be:39:e5:22:91:9f:97:1e:57:9a:d7:
                    9b:f9:f1:e2:ea:ef:47:42:d7:b3:1c:91:cc:4f:e2:
                    e1:b6:3d:51:ca:0b:90:5d:e8:0a:ac:b2:c9:28:7a:
                    4e:0b:00:1e:7b:ba:80:57:24:fd:cf:17:7a:7c:b8:
                    4d:4e:3f:85:4e:66:0e:a6:ad:2f:fa:fe:05:e4:87:
                    7b:b6:18:cb:5c:d1:e2:9c:f7:84:1f:b6:60:b3:3f:
                    d2:fa:a1:7e:3f:49:bf:1c:ee:8e:49:d1:82:7b:1b:
                    29:9e:25:f7:5a:cd:8c:40:be:f0:c5:5f:f8:0c:36:
                    c5:35:32:b7:f9:4d:9d:bb:22:57:8d:c3:95:e4:d0:
                    a9:91:2d:fa:a8:12:4b:d3:16:cf:6b:3a:5c:50:14:
                    5b:b4:1e:84:7d:20:0d:96:c6:ff:21:2b:3f:59:f4:
                    0c:e5:e3:fe:a1:e1:2a:bf:64:b1:a1:60:ba:04:fd:
                    87:e0:da:e4:89:1b:ea:24:ba:96:23:c6:b1:24:21:
                    ee:30:2c:5e:2b:85:7f:8a:9d:29:1d:c7:55:13:b1:
                    96:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C1:F5:EC:59:7B:67:30:0C:85:05:90:AC:38:50:AD:DF:32:E3:53:5D
            X509v3 Authority Key Identifier:
                keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/6894223C413E11ECA7A0235AC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.112.32.0/22

    Signature Algorithm: sha256WithRSAEncryption
         95:07:5e:fa:0a:3b:50:c0:41:f2:dc:98:af:ce:84:fc:b3:04:
         fe:f4:56:fb:0f:e0:ee:02:48:c8:92:93:3c:86:8e:f6:03:27:
         27:20:e0:d0:65:b2:15:4b:90:e0:97:b8:e5:23:e5:e3:70:9c:
         d8:0e:65:2f:74:c6:71:af:a0:7f:89:95:9c:dd:12:92:ba:cb:
         c1:8c:b4:13:13:b8:c4:36:52:88:a7:81:22:10:cd:6c:30:6f:
         17:73:d5:c6:03:c6:7b:6f:2a:f7:00:45:4b:09:61:88:ff:1c:
         42:a5:90:9b:21:e3:aa:4c:b9:b2:44:e8:e9:e6:64:bd:9d:5a:
         dd:5f:ac:b2:33:f7:45:39:6c:18:8d:11:b4:b5:43:1e:e2:c7:
         95:fc:56:f7:78:05:83:b8:ca:79:ee:8a:9d:59:07:13:b9:c7:
         a2:02:e8:a0:2a:4b:33:e0:f4:f6:07:94:a3:57:a4:1f:15:32:
         05:d0:99:1a:a9:77:37:0c:b0:15:16:9b:eb:d9:84:75:d2:cc:
         cd:f1:d0:d4:98:c9:c0:54:5c:f4:6e:42:73:e9:7a:aa:b1:50:
         c7:bf:6c:f5:82:6f:a5:a3:d4:65:f4:1e:4c:ae:b4:df:a4:96:
         ce:13:4a:51:c0:46:cb:2f:34:e9:44:2e:e6:22:5a:17:0e:82:
         6f:6a:7b:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 20:22:04 2025 by rpki-client