Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/73041B4208F211EDB951F87AC4F9AE02.roa
File:                     73041B4208F211EDB951F87AC4F9AE02.roa (raw, json)
Hash identifier:          25QAfOvU3Utow3LYp8MIS6fepVj4Q22y26w3UlXuufg=
Subject key identifier:   90:8D:9D:29:D5:0D:0B:A1:67:A2:3A:3A:CB:0F:8E:03:B7:74:9A:76
Certificate issuer:       /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Certificate serial:       8F8B
Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/73041B4208F211EDB951F87AC4F9AE02.roa
Signing time:             Thu 30 May 2024 16:24:17 +0000
ROA not before:           Thu 30 May 2024 16:24:17 +0000
ROA not after:            Tue 01 Jul 2025 00:00:00 +0000
asID:                     150064
IP address blocks:        103.185.212.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
                          rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 29 Nov 2024 06:14:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 36747 (0x8f8b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
        Validity
            Not Before: May 30 16:24:17 2024 GMT
            Not After : Jul  1 00:00:00 2025 GMT
        Subject: CN=6658a830-5dc5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:bc:8b:d0:48:d6:df:93:2f:5e:60:2e:6b:32:
                    9b:be:54:bb:c8:bd:bd:d9:60:c2:f0:be:8a:d1:76:
                    51:1b:74:a3:33:36:4d:08:b5:36:5a:59:e4:f2:66:
                    48:fe:40:75:b1:ec:0f:bd:9a:c9:61:74:01:ae:07:
                    a1:a6:cf:8a:70:e8:12:e9:f5:e7:a5:88:40:87:3f:
                    6c:be:af:0b:a9:f9:be:08:ae:01:10:45:f9:7c:3a:
                    39:46:73:16:83:d5:12:ae:cd:ef:d5:b9:66:b2:bc:
                    67:4f:bc:45:35:65:2b:27:8e:ab:d1:25:6f:1b:8d:
                    76:e1:ec:59:96:cb:b9:b7:7e:66:31:4e:6e:5d:0e:
                    3b:36:dc:1e:e4:94:75:c5:06:a8:f5:0d:f5:37:1b:
                    e4:c2:00:d5:47:3f:6e:ed:d3:1d:db:de:0e:09:31:
                    6c:ee:cc:b1:9e:d0:00:9c:39:ef:23:5e:44:21:f1:
                    f0:b1:cc:71:16:cb:31:53:e8:6c:11:10:6d:d0:7b:
                    30:53:c4:6a:dd:a9:66:99:50:16:eb:fc:1b:29:aa:
                    4f:ff:e7:2d:15:eb:d2:c5:7f:1e:95:4d:e3:7f:a7:
                    1d:ae:e4:f6:03:f0:18:ab:59:52:25:3b:cf:df:33:
                    de:16:9a:93:b3:bb:c3:e5:c1:95:02:8b:ad:57:3a:
                    45:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                90:8D:9D:29:D5:0D:0B:A1:67:A2:3A:3A:CB:0F:8E:03:B7:74:9A:76
            X509v3 Authority Key Identifier:
                keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/73041B4208F211EDB951F87AC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.185.212.0/24

    Signature Algorithm: sha256WithRSAEncryption
         46:0f:ef:1d:ce:7b:c9:66:d4:6b:99:89:07:97:f9:63:1f:36:
         18:c6:19:fd:17:49:b7:86:57:cb:97:12:1f:30:d9:75:ad:08:
         4e:69:37:7d:e6:b1:1d:8e:4e:99:1d:e9:92:0a:3e:3e:91:be:
         62:31:65:1e:f0:6e:df:a7:16:df:b7:ae:c1:d8:ef:66:85:f8:
         61:37:18:ba:76:36:26:36:3b:0b:15:9c:40:67:ad:6f:3a:cb:
         97:ec:d7:54:e6:32:f8:bc:99:03:44:74:15:66:ad:ac:08:b3:
         d6:49:d8:4b:d3:73:f6:6b:e5:69:e3:42:64:0e:2e:66:ec:a3:
         e7:c5:a9:43:97:c4:f5:ce:59:26:e6:55:15:b0:9b:e0:73:f6:
         f9:f9:68:6c:7e:01:08:e1:23:68:95:b4:08:cc:3a:d0:c9:d5:
         5c:b7:00:08:73:ce:d4:76:5c:8c:30:01:a7:15:25:72:79:23:
         4f:d1:2a:2d:ee:ac:ea:34:b2:d4:7e:36:4a:1d:23:95:af:7b:
         61:79:05:80:51:37:73:77:77:69:b2:1d:8b:e7:89:2f:e7:d0:
         3b:de:48:d7:ab:17:35:f8:2f:73:14:69:dd:ea:01:a5:a2:24:
         2e:8b:15:70:d1:b7:6b:94:c3:21:4f:1e:fe:c3:2d:56:de:21:
         35:0c:bb:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 11:17:43 2024 by rpki-client on console-fra.rpki-client.org