Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/7A44A836119411EDA5BF6877C4F9AE02.roa
File:                     7A44A836119411EDA5BF6877C4F9AE02.roa (raw, json)
Hash identifier:          b57eaiWBRChORfQ5eWBV911PAxFFyVvf58JQ69kiH/c=
Subject key identifier:   FD:90:5C:2F:52:90:23:06:3A:C8:B4:7A:2C:65:4D:93:8B:FC:59:61
Certificate issuer:       /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Certificate serial:       8887
Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/7A44A836119411EDA5BF6877C4F9AE02.roa
Signing time:             Thu 30 May 2024 15:54:55 +0000
ROA not before:           Thu 30 May 2024 15:54:55 +0000
ROA not after:            Tue 01 Jul 2025 00:00:00 +0000
asID:                     132784
IP address blocks:        103.49.254.0/24 maxlen: 24
                          103.49.255.0/24 maxlen: 24
                          103.174.199.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
                          rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 21 Feb 2025 05:15:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 34951 (0x8887)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918EDB2
        Validity
            Not Before: May 30 15:54:55 2024 GMT
            Not After : Jul  1 00:00:00 2025 GMT
        Subject: CN=6658a14f-8e9b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:ad:fd:e9:0c:70:38:75:ae:ca:99:f8:57:9d:
                    5d:d2:96:9d:ca:45:ec:cc:74:d5:3c:0c:24:b6:7e:
                    cf:58:88:cd:9c:e6:00:be:7b:8f:05:5a:22:2f:d9:
                    7a:cf:cf:ad:cb:36:2e:7a:10:44:34:55:2d:68:e6:
                    a7:1b:4d:70:92:a4:0d:a5:d3:24:db:b2:fb:3b:37:
                    ef:67:68:d3:bb:2a:a4:cc:80:6b:21:92:14:9b:ca:
                    34:f8:ea:6e:9d:e4:4e:6d:d2:3d:1f:47:60:c2:d6:
                    2e:5e:7f:d7:d6:e0:d0:df:12:51:18:c9:79:54:e1:
                    90:6e:b1:34:e0:12:8b:e3:37:47:e1:74:e8:84:6a:
                    1f:df:b1:1e:f7:63:25:ab:0c:f9:9f:71:01:87:b4:
                    9d:c7:af:96:29:a3:8e:a9:c9:f2:b4:02:a4:58:45:
                    93:30:ea:23:d2:85:97:4a:53:4c:fb:74:57:b0:5d:
                    02:ed:88:72:bb:14:35:74:d7:0c:18:76:df:45:48:
                    ba:63:83:63:c6:57:b6:3e:a3:77:bc:a3:a8:be:6e:
                    1e:33:9e:cc:8b:2e:2f:94:5b:da:6a:e1:fa:98:c8:
                    2b:14:2a:79:ac:06:04:d3:11:29:9b:93:59:36:f5:
                    a4:77:ad:9b:ac:70:1f:5e:b8:8d:3a:5e:53:4a:be:
                    81:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FD:90:5C:2F:52:90:23:06:3A:C8:B4:7A:2C:65:4D:93:8B:FC:59:61
            X509v3 Authority Key Identifier:
                keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/7A44A836119411EDA5BF6877C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.49.254.0/23
                  103.174.199.0/24

    Signature Algorithm: sha256WithRSAEncryption
         03:76:7c:dc:95:da:3b:65:dd:0e:42:47:f7:cc:06:87:7a:ca:
         5e:64:f0:ea:fe:69:0b:dd:ed:69:82:56:4c:0f:0e:5b:b0:b3:
         37:e7:77:cf:9d:3c:46:a0:89:2a:c8:19:58:46:e7:15:54:b0:
         d8:d2:6e:c8:ba:a7:80:a6:6b:06:5e:18:0b:f9:ae:eb:3c:15:
         ae:28:e0:ee:e9:10:bd:a3:14:a5:fb:47:c4:83:75:d7:ae:ec:
         55:59:3c:d9:5f:69:3a:e3:5a:5b:55:f0:ac:5c:a1:e8:71:54:
         ec:2d:75:6d:4d:a2:61:98:23:8a:ba:39:b6:04:f3:55:b3:e7:
         25:2a:b8:c6:2e:ed:16:11:2f:e5:27:97:54:60:71:1a:fe:2e:
         79:bb:66:b9:be:b4:51:7e:de:58:81:1e:21:01:5b:c8:f6:b3:
         9e:3b:d6:e5:e0:53:e5:b8:7f:41:20:3d:00:25:ec:78:8d:22:
         51:c4:8b:24:d3:76:22:f2:f8:47:fd:7e:52:33:14:5f:40:8f:
         20:8c:6a:06:3d:cd:31:3d:e4:3a:a5:89:60:df:c8:80:2d:4c:
         d6:18:6a:6d:6c:b3:f3:da:a4:f1:12:5a:7b:e3:67:e0:63:ff:
         3f:fa:39:1d:ca:7e:96:8b:d8:16:11:4e:05:a5:e0:75:23:ee:
         98:4f:b4:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 20:27:24 2025 by rpki-client