Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/9A431410948F11ECBDE81D52C4F9AE02.roa
File:                     9A431410948F11ECBDE81D52C4F9AE02.roa (raw, json)
Hash identifier:          m26VVjmUQSOmSZqxR7UXwcl20i6j4bVQhEgm8UDiLrQ=
Subject key identifier:   A6:FD:0D:21:BC:ED:A3:A1:7F:F8:73:DF:65:94:F6:BE:8F:33:99:D1
Certificate issuer:       /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Certificate serial:       8AFB
Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/9A431410948F11ECBDE81D52C4F9AE02.roa
Signing time:             Thu 30 May 2024 16:05:15 +0000
ROA not before:           Thu 30 May 2024 16:05:15 +0000
ROA not after:            Tue 01 Jul 2025 00:00:00 +0000
asID:                     136351
IP address blocks:        103.179.147.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
                          rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 21 Feb 2025 05:15:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 35579 (0x8afb)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918EDB2
        Validity
            Not Before: May 30 16:05:15 2024 GMT
            Not After : Jul  1 00:00:00 2025 GMT
        Subject: CN=6658a3bb-f9a4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:2b:42:c4:20:5f:6d:c2:c3:81:ef:21:a7:34:
                    57:cf:8e:bb:3e:ae:67:5a:b9:64:52:6d:50:dd:69:
                    57:56:d5:b4:2f:1d:73:8f:15:50:2a:2c:95:5f:6c:
                    66:13:b0:c8:32:ea:77:13:46:a9:93:ea:90:b5:5b:
                    bb:0c:f0:52:76:24:88:4f:95:70:c5:f1:40:18:74:
                    63:c0:b6:66:9d:b8:3f:0f:0d:6f:24:46:18:7a:02:
                    6f:1a:04:b6:15:ed:6c:64:3d:74:db:c4:ff:b4:3b:
                    12:6b:13:23:e7:bf:0c:38:e6:db:93:cf:23:09:37:
                    be:64:9f:32:6c:e9:a9:8e:3a:00:e2:a2:3c:9a:f1:
                    20:09:02:54:5c:c4:db:64:23:55:8e:d1:bd:60:26:
                    92:32:a4:c0:ce:17:0b:7d:9e:bc:fd:a1:a4:25:3c:
                    56:36:de:e2:d6:77:37:6d:fc:fe:51:14:ff:b6:99:
                    9a:ae:66:0d:d2:79:06:04:82:e0:54:73:6f:9e:8f:
                    2e:7a:e8:a9:66:37:5f:31:50:94:af:81:f9:32:6d:
                    67:fe:1c:b2:4d:95:10:ff:cf:ea:c1:2c:93:59:a3:
                    78:12:09:eb:bd:30:63:c6:84:13:3d:84:2c:66:6a:
                    df:0d:c3:d1:b5:22:cf:b5:b2:f2:4d:1e:15:25:61:
                    9c:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A6:FD:0D:21:BC:ED:A3:A1:7F:F8:73:DF:65:94:F6:BE:8F:33:99:D1
            X509v3 Authority Key Identifier:
                keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/9A431410948F11ECBDE81D52C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.179.147.0/24

    Signature Algorithm: sha256WithRSAEncryption
         77:20:db:d1:bd:79:bc:bf:97:55:d9:ad:18:ba:f9:de:78:a7:
         3a:bf:e6:08:bb:f1:a6:2a:28:c3:94:bd:dc:0c:9e:f7:c7:2a:
         b9:08:ba:54:ea:36:4e:f9:9c:1e:28:e8:73:fb:98:f0:4c:11:
         4a:78:14:bf:48:64:eb:d3:41:90:ad:00:48:df:cf:4f:3f:58:
         06:ae:90:2d:cb:93:ab:db:77:86:30:fa:66:fa:e8:71:56:84:
         dc:85:d4:81:71:1b:4d:43:7b:42:97:1d:0e:01:4a:30:24:37:
         23:b9:94:8d:49:7a:a7:08:c0:f7:0a:6b:10:e2:39:e2:2d:d2:
         36:dd:ca:f2:61:cc:f4:7a:bd:4c:dc:c3:b0:a0:1b:ae:50:07:
         10:df:90:ae:6e:c8:bb:93:6e:e3:f1:b2:a4:e7:e0:08:3c:b8:
         8d:c1:58:6b:21:13:19:74:43:e2:d1:e9:ac:9d:68:f7:36:07:
         c4:a1:7c:92:0c:61:3d:db:19:0d:a9:0c:65:1a:d0:a1:99:11:
         9f:fb:bc:b3:32:07:03:53:ae:8c:27:ba:c5:74:d8:0e:e0:07:
         b1:55:91:7c:98:ac:96:e5:2e:d0:d0:bc:02:4c:19:c2:5d:47:
         fa:c2:b5:c4:8e:83:02:1b:9f:dc:f1:b8:3a:2c:77:53:67:26:
         05:62:78:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 20:35:12 2025 by rpki-client