Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/99170A903E2511EBB1B0E431C4F9AE02.roa
File:                     99170A903E2511EBB1B0E431C4F9AE02.roa (raw, json)
Hash identifier:          oe2ulqt7rcZMJjnwyUxCpiMJN8O//GEDOa2ML+9qzLI=
Subject key identifier:   47:29:43:C1:5A:4D:CB:30:2E:E7:23:E2:7F:F5:39:C2:96:63:1C:13
Certificate issuer:       /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Certificate serial:       8D26
Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/99170A903E2511EBB1B0E431C4F9AE02.roa
Signing time:             Thu 30 May 2024 16:14:25 +0000
ROA not before:           Thu 30 May 2024 16:14:25 +0000
ROA not after:            Tue 01 Jul 2025 00:00:00 +0000
asID:                     141295
IP address blocks:        103.160.49.0/24 maxlen: 24
                          2001:df5:9880::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
                          rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 02 Dec 2024 10:54:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 36134 (0x8d26)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
        Validity
            Not Before: May 30 16:14:25 2024 GMT
            Not After : Jul  1 00:00:00 2025 GMT
        Subject: CN=6658a5e1-1c64
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e7:49:e2:59:fe:b3:cb:4a:1e:d2:70:d5:85:d5:
                    02:30:d0:6e:1b:5c:95:a6:55:a4:1c:ba:1b:be:15:
                    7b:46:0e:de:12:c7:af:5f:55:bc:ac:63:63:0b:42:
                    1c:92:c6:f7:ad:d6:c8:eb:6c:b1:87:57:d2:53:f5:
                    8e:e6:8e:8f:8e:45:a7:3b:1f:39:ce:8a:4d:39:a7:
                    2c:4c:43:11:fe:9a:81:12:49:ab:d0:df:da:a0:19:
                    de:0e:db:11:8f:b2:05:a3:a8:5a:0c:ca:84:07:7d:
                    39:5d:17:2d:0f:2a:22:2a:7c:14:7b:b5:bb:6b:5b:
                    df:b4:41:94:ea:dc:4f:4c:51:f2:ab:bb:ff:71:f0:
                    db:ca:02:34:25:5c:e1:a7:8e:6d:3c:cb:b6:16:d8:
                    e0:20:df:19:33:c2:f7:6f:82:37:bc:84:5b:28:5f:
                    e7:b8:6c:33:5c:2f:fc:3e:5d:a4:b5:80:7a:66:f1:
                    b2:9a:ad:9b:a6:b6:4b:78:90:bf:cb:e8:ca:ff:b8:
                    37:fc:2f:05:f0:b3:83:f4:fa:ee:fc:9a:50:83:f0:
                    ac:c7:d6:6b:88:4c:a8:ff:d6:bf:01:b1:ce:38:ec:
                    2e:31:07:86:23:44:4d:be:22:9f:79:99:7b:94:ea:
                    60:9e:5b:57:c2:0d:92:c8:bc:f9:25:56:7a:71:1a:
                    5f:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                47:29:43:C1:5A:4D:CB:30:2E:E7:23:E2:7F:F5:39:C2:96:63:1C:13
            X509v3 Authority Key Identifier:
                keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/99170A903E2511EBB1B0E431C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.160.49.0/24
                IPv6:
                  2001:df5:9880::/48

    Signature Algorithm: sha256WithRSAEncryption
         15:30:d5:bc:1a:92:77:ce:93:3b:18:f8:9f:6b:c5:78:c3:29:
         af:67:25:e2:dc:a1:38:ec:a3:bc:54:b6:40:10:49:c9:8c:e2:
         d1:12:31:6f:20:8e:4d:b5:e8:b7:9b:c8:5d:a5:6d:c5:d6:b6:
         01:67:24:c2:60:70:53:52:20:9e:36:51:18:75:b3:f2:b3:3e:
         6b:1c:6e:5e:1b:ad:00:42:1e:53:71:24:f2:51:2f:fd:70:e3:
         6c:b2:a0:af:fe:10:91:af:97:fc:8f:b8:5c:48:6c:b7:67:df:
         50:f2:27:6e:47:53:fa:f8:d5:82:bc:93:06:d8:74:05:87:3e:
         e6:0b:c3:1d:dc:9e:65:8d:66:26:94:cc:a8:b3:ac:a7:c4:a2:
         9d:50:c5:9e:2d:05:ef:03:4b:b4:a3:31:da:5d:1f:88:df:3e:
         54:aa:85:fe:52:e5:ae:2f:d7:a9:65:f2:6d:e1:3b:30:e4:a8:
         b7:42:be:69:2c:a6:db:5d:2e:9a:3b:92:2b:39:b6:24:5e:7f:
         24:98:84:30:84:46:c7:64:b4:d5:b7:06:71:26:98:76:e6:b1:
         ae:d4:73:6d:05:4e:e3:80:f5:ce:ba:5d:6f:b2:01:bc:71:10:
         ad:d3:d3:a6:28:52:58:8e:95:13:73:26:f5:e2:d6:9d:8c:cd:
         05:d6:28:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 25 13:17:20 2024 by rpki-client on console-ams.rpki-client.org