Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/693EEC340FB711ECA0E62853C4F9AE02.roa
File:                     693EEC340FB711ECA0E62853C4F9AE02.roa (raw, json)
Hash identifier:          7Pm1fOlWDfguGd9Fy9VoMvAMT+CzOkTYNpoDnP7P+ts=
Subject key identifier:   ED:79:68:D5:62:A8:A9:3D:99:C6:1C:DA:90:83:E1:EE:F8:38:24:87
Certificate issuer:       /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Certificate serial:       8E30
Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/693EEC340FB711ECA0E62853C4F9AE02.roa
Signing time:             Thu 30 May 2024 16:18:41 +0000
ROA not before:           Thu 30 May 2024 16:18:41 +0000
ROA not after:            Tue 01 Jul 2025 00:00:00 +0000
asID:                     142533
IP address blocks:        103.169.250.0/24 maxlen: 24
                          103.169.251.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
                          rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 21 Feb 2025 05:15:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 36400 (0x8e30)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918EDB2
        Validity
            Not Before: May 30 16:18:41 2024 GMT
            Not After : Jul  1 00:00:00 2025 GMT
        Subject: CN=6658a6e0-8a5d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:1f:b1:c7:f9:15:ba:36:45:a9:fe:ec:d5:af:
                    39:b2:54:0c:dd:c9:67:b9:74:8c:5c:34:fc:f1:91:
                    4a:a5:9f:21:11:20:32:b1:39:30:56:c7:ac:7f:82:
                    ac:43:13:7b:f7:5b:33:25:1c:cf:4c:73:7f:61:3b:
                    74:89:4e:a6:b6:80:cd:2c:40:b5:76:cd:42:ee:31:
                    18:69:6d:12:fc:e6:d4:17:74:73:b2:47:a8:7b:4a:
                    a6:27:c9:66:47:68:b9:cb:42:39:25:14:a9:40:15:
                    d1:fc:b3:86:33:2d:eb:b8:e3:16:0e:03:b2:a7:46:
                    33:87:0c:b2:0b:7d:de:08:b6:10:fd:99:ee:a8:06:
                    10:f8:cb:5b:d8:3d:ca:46:b9:af:0e:73:84:1b:dc:
                    b8:b0:9a:a3:22:ca:f4:47:fa:0b:c2:80:8f:5a:9a:
                    b3:e5:0a:e3:6c:cb:69:e6:45:9b:d7:8a:c4:b2:3f:
                    8b:3c:85:13:d7:0e:01:7d:32:08:72:04:30:fa:e6:
                    26:cd:29:42:5f:46:64:25:87:96:21:4b:6c:2f:3d:
                    0b:13:51:32:ae:c0:9e:b9:23:db:80:98:db:4e:86:
                    35:3a:7a:2f:af:25:03:cf:00:30:78:20:98:bf:13:
                    d4:11:5e:bf:12:ac:80:01:59:b7:3a:63:c0:a6:03:
                    f5:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                ED:79:68:D5:62:A8:A9:3D:99:C6:1C:DA:90:83:E1:EE:F8:38:24:87
            X509v3 Authority Key Identifier:
                keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/693EEC340FB711ECA0E62853C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.169.250.0/23

    Signature Algorithm: sha256WithRSAEncryption
         5d:64:8c:04:7a:50:c1:49:ce:c1:89:82:bf:57:5e:b4:fc:c5:
         9e:a8:b7:46:e3:dc:14:1c:68:6d:a2:88:06:1a:1b:7a:65:b3:
         28:02:14:66:00:07:5d:6c:c5:53:f1:ee:17:81:02:d5:79:48:
         c6:2b:42:79:fb:d3:be:42:3c:ce:66:28:41:32:4f:2d:96:e0:
         98:47:d6:cb:6d:0e:b2:dd:f1:68:20:74:c3:31:89:a0:1b:56:
         52:63:02:00:f3:96:ca:1c:62:b9:17:31:9a:4c:30:20:58:0b:
         96:81:b6:0c:14:b7:3d:7e:9d:af:6e:a0:5c:55:7f:16:2f:e1:
         1e:21:75:b7:a0:f9:39:d2:14:5d:00:bd:a3:58:a5:a1:a2:c3:
         f2:79:28:a6:dc:2f:52:ce:b8:65:54:2f:3d:58:62:33:df:e1:
         ba:2e:4c:68:13:35:7f:74:ae:e7:4d:0a:13:28:20:eb:f6:73:
         3c:1e:5e:d4:d0:2e:11:38:b5:35:9d:29:1a:7d:ae:6c:07:3d:
         4b:41:eb:a0:23:47:89:e8:a1:54:6f:0b:b9:65:46:b0:49:42:
         16:6f:f4:57:04:1f:8e:06:76:de:68:1e:cd:5e:e4:11:90:8c:
         d7:8d:62:2f:53:44:4e:68:6b:fe:9a:4b:fb:fe:71:1a:cf:58:
         af:8d:3a:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 20:16:01 2025 by rpki-client