Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/991142DE84EE11EC83FAF06EC4F9AE02.roa
File:                     991142DE84EE11EC83FAF06EC4F9AE02.roa (raw, json)
Hash identifier:          HmyPfwJfwSrUGBeD/Cj01E6pD0VTDmLDo/z+Qzzft2g=
Subject key identifier:   E0:EE:FA:87:7A:F3:06:23:67:0E:05:1F:3C:18:E1:EA:78:41:04:79
Certificate issuer:       /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Certificate serial:       8E55
Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/991142DE84EE11EC83FAF06EC4F9AE02.roa
Signing time:             Thu 30 May 2024 16:19:16 +0000
ROA not before:           Thu 30 May 2024 16:19:16 +0000
ROA not after:            Tue 01 Jul 2025 00:00:00 +0000
asID:                     146896
IP address blocks:        103.173.193.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
                          rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 02 Dec 2024 10:54:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 36437 (0x8e55)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
        Validity
            Not Before: May 30 16:19:16 2024 GMT
            Not After : Jul  1 00:00:00 2025 GMT
        Subject: CN=6658a704-7078
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f0:7d:93:7a:88:4b:8e:66:62:cc:c3:99:59:9e:
                    13:04:8e:78:c3:9f:31:37:37:a2:34:3d:09:a8:9a:
                    f3:23:3b:6e:82:ab:d0:0b:21:b9:7b:c6:3f:a2:79:
                    5b:c2:bd:11:72:65:9b:b2:08:c8:2d:5d:5c:fd:01:
                    05:83:ff:45:a9:c8:86:e7:d4:a7:0b:25:12:0e:54:
                    d7:f8:96:77:30:00:87:a0:b5:10:94:ee:25:e5:10:
                    28:af:8c:07:34:ba:e4:0b:22:f7:e9:9f:42:ab:36:
                    90:38:b3:8c:01:f6:d3:7f:be:08:4d:09:df:79:49:
                    03:6e:fa:be:8b:91:da:95:70:0f:31:fd:f4:e8:8e:
                    ad:56:ea:91:83:1b:f6:da:97:5d:ae:12:75:83:13:
                    03:b6:25:cc:ff:14:d2:96:5d:de:5a:cc:f0:4d:67:
                    72:35:39:c8:1c:b2:15:77:6f:d8:a0:48:47:9f:16:
                    a5:ad:27:a2:b3:dd:45:09:17:ba:ee:89:89:a3:e2:
                    5c:14:b0:22:fb:6f:d5:b5:f9:76:27:41:4f:0e:a6:
                    99:b4:ca:75:43:d7:1d:f1:ec:f2:64:c2:df:6c:0b:
                    76:ab:f4:98:30:4e:0d:e6:9d:55:c6:69:1a:8f:9f:
                    7f:5a:ac:de:78:d4:9e:a7:3c:b9:20:ad:c8:49:dd:
                    06:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E0:EE:FA:87:7A:F3:06:23:67:0E:05:1F:3C:18:E1:EA:78:41:04:79
            X509v3 Authority Key Identifier:
                keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/991142DE84EE11EC83FAF06EC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.173.193.0/24

    Signature Algorithm: sha256WithRSAEncryption
         3a:23:b3:83:ce:e9:5a:10:db:4d:e0:f2:00:11:34:32:2a:cc:
         64:8e:41:46:ef:6a:0b:05:14:33:9e:12:e0:2b:c1:e3:e1:05:
         46:3f:b4:ef:20:30:3b:91:20:69:c9:71:d6:28:c5:4b:56:10:
         60:cf:63:3e:2b:24:fc:41:fd:2b:aa:bb:e8:19:f7:3c:d6:f4:
         29:f8:26:9b:d9:47:d8:81:c8:2e:c2:9e:cb:36:af:39:87:ae:
         3f:69:89:52:1e:64:e4:82:7f:75:e7:e8:28:34:a5:ad:e0:63:
         1e:59:a3:59:38:13:2d:ec:1b:19:00:b6:ab:42:0f:1a:b0:87:
         cc:21:3d:bc:24:4d:2e:d8:49:9c:a7:9b:2d:a3:79:43:01:63:
         c7:97:1b:5b:b5:47:8b:2f:58:18:d9:e0:92:f1:1f:a7:da:09:
         07:40:57:81:8c:04:f5:53:3e:14:50:c1:40:57:70:8c:ff:b1:
         19:f3:54:60:a8:f2:f0:8e:1d:59:21:7e:a9:ea:e9:32:92:31:
         69:50:36:c8:80:75:d3:73:c8:95:ec:47:e6:bb:fe:5b:3b:21:
         50:9d:db:49:57:d0:8c:de:e1:a2:53:61:77:72:48:c8:88:17:
         62:d1:df:00:5b:e5:33:1b:d8:5b:78:00:93:86:34:21:2f:4b:
         10:92:c3:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 25 13:05:02 2024 by rpki-client on console-fra.rpki-client.org