Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/6EC804CA513611EE81AEB539C4F9AE02.roa
File:                     6EC804CA513611EE81AEB539C4F9AE02.roa (raw, json)
Hash identifier:          vtRXrT9gBEXbucYBbpMdBcbEgWK8SbWrziHaMOxxQZA=
Subject key identifier:   6E:92:C8:D8:A8:1A:AB:06:FC:03:11:AB:4E:06:54:F2:E2:BD:BA:54
Certificate issuer:       /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Certificate serial:       8B89
Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/6EC804CA513611EE81AEB539C4F9AE02.roa
Signing time:             Thu 30 May 2024 16:07:37 +0000
ROA not before:           Thu 30 May 2024 16:07:37 +0000
ROA not after:            Tue 01 Jul 2025 00:00:00 +0000
asID:                     137147
IP address blocks:        103.251.252.0/23 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
                          rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 29 Nov 2024 06:14:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 35721 (0x8b89)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
        Validity
            Not Before: May 30 16:07:37 2024 GMT
            Not After : Jul  1 00:00:00 2025 GMT
        Subject: CN=6658a449-23c1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:fe:26:8b:a2:3d:42:8a:97:8b:2b:99:60:7e:
                    b1:74:1c:f3:91:02:e6:92:7a:79:d5:6b:03:ee:fa:
                    c4:2b:0b:14:b7:d8:94:11:fe:59:06:3d:00:fd:97:
                    6e:43:a4:f0:4b:d6:ad:49:d5:f1:98:b3:7f:6a:da:
                    b9:cf:e8:5f:a0:c0:ea:13:ea:84:4c:d9:a4:27:d4:
                    66:88:4d:82:22:49:bf:f9:87:04:ac:f1:af:7a:6c:
                    88:c3:65:b4:2f:74:94:80:ed:24:d3:cc:7e:ad:53:
                    01:52:dc:ec:77:61:8e:97:1b:43:a8:8b:e9:b5:89:
                    8d:7f:51:e8:29:18:1a:1c:9a:8d:72:13:4a:f5:cd:
                    ba:aa:8b:fa:c6:29:71:4f:ee:6e:86:01:89:73:f3:
                    0a:53:d5:2b:f6:61:e6:52:8b:c7:8b:52:91:40:15:
                    68:32:2e:52:da:f3:ab:01:99:a3:03:dc:f3:d9:a1:
                    87:c9:8f:d9:c9:e3:07:8a:99:1e:0a:65:db:f2:45:
                    a2:a1:7a:a0:87:f4:11:b0:74:b3:1b:a4:6e:2d:c6:
                    53:1e:a9:14:41:f8:fa:63:7b:a2:a0:e9:19:9e:2f:
                    7b:90:a7:b2:5a:0a:88:6c:5d:f0:5a:1c:5f:50:c4:
                    b5:e7:4f:59:77:32:c8:ce:67:be:85:a4:0c:e6:55:
                    31:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6E:92:C8:D8:A8:1A:AB:06:FC:03:11:AB:4E:06:54:F2:E2:BD:BA:54
            X509v3 Authority Key Identifier:
                keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/6EC804CA513611EE81AEB539C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.251.252.0/23

    Signature Algorithm: sha256WithRSAEncryption
         56:b3:06:18:43:47:c9:97:9a:3f:63:10:8b:02:bf:34:93:c6:
         a1:1d:84:e5:43:4c:2c:b9:8e:d5:c1:df:0b:70:22:01:4c:cf:
         a3:f6:70:77:b4:61:ec:a4:b1:9e:cc:1b:d0:2e:1e:ed:35:af:
         52:a3:fd:56:3f:63:fe:63:37:5b:c6:ea:88:65:a7:f7:48:4b:
         73:9d:ca:6e:27:27:37:f4:67:c0:c6:4c:b2:95:09:fd:48:89:
         b9:47:87:96:a0:7c:af:c2:e2:59:f3:56:05:2d:8b:fd:ec:48:
         44:f1:c8:f6:8f:72:6a:8e:0a:c3:64:0f:c9:b6:55:e8:cc:64:
         2f:f9:7a:ec:e0:d8:f0:3d:40:75:a1:9c:b9:69:d4:4d:82:f2:
         f7:81:46:b7:4b:64:9d:7b:d2:09:60:b9:c6:44:a2:d5:4c:7a:
         16:1e:92:0a:18:3d:d2:f1:0d:8f:37:90:e9:3a:0d:e3:a9:db:
         1f:dd:b5:6f:e2:1b:92:97:63:c4:3b:f3:4b:93:2f:44:b4:ec:
         5b:dd:e4:30:62:77:55:db:f4:e7:fa:a1:7e:8b:68:27:3f:3f:
         0e:80:3f:c0:de:c1:40:ef:4b:11:1f:f5:59:de:02:d2:60:9a:
         49:8e:79:06:54:47:df:80:df:49:d3:43:51:8b:f1:3e:05:da:
         cb:a2:75:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 11:17:42 2024 by rpki-client on console-fra.rpki-client.org