Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/BBE7B19C48CA11EF96754382C4F9AE02.roa
File:                     BBE7B19C48CA11EF96754382C4F9AE02.roa (raw, json)
Hash identifier:          uiw4OgQ1CO40yJSARg3B6NR5hBiyZq/8z9tQXee01ho=
Subject key identifier:   94:36:ED:5C:86:13:A9:AD:4E:03:5D:FB:6A:23:71:64:55:5A:FF:3B
Certificate issuer:       /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Certificate serial:       9514
Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/BBE7B19C48CA11EF96754382C4F9AE02.roa
Signing time:             Tue 23 Jul 2024 08:08:24 +0000
ROA not before:           Tue 23 Jul 2024 08:08:24 +0000
ROA not after:            Tue 01 Jul 2025 00:00:00 +0000
asID:                     132746
IP address blocks:        103.163.244.0/23 maxlen: 24
                          103.215.106.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
                          rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 21 Feb 2025 05:15:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 38164 (0x9514)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918EDB2
        Validity
            Not Before: Jul 23 08:08:24 2024 GMT
            Not After : Jul  1 00:00:00 2025 GMT
        Subject: CN=669f64f8-b2bc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:97:ca:1e:10:46:a5:22:a0:fe:2d:39:51:a9:
                    a1:e5:d6:97:d2:cd:33:1f:0b:d9:99:ec:aa:c8:fd:
                    83:f3:25:5f:5d:3b:ad:3e:d3:38:de:bb:8b:59:65:
                    1f:d8:e2:fc:d2:e4:ee:b5:83:70:8f:b0:fd:de:61:
                    5d:60:39:95:fb:54:1f:b5:5e:e3:61:40:34:51:61:
                    88:75:fc:3a:90:b5:8f:16:02:4f:9e:65:90:9d:53:
                    e1:d7:1d:56:8b:f4:fb:1f:aa:df:b6:51:ce:0c:16:
                    61:40:56:3b:13:8b:97:23:9a:41:a4:21:3b:7a:9e:
                    83:c5:ba:fd:6f:c7:78:49:1c:b5:66:54:24:c3:34:
                    ba:b1:50:45:1f:71:33:b3:d0:39:2b:07:b5:29:93:
                    44:01:84:37:a9:61:00:43:9a:8d:54:72:1a:51:0c:
                    ec:53:c5:63:e2:aa:6e:f4:81:85:ff:86:e3:aa:a2:
                    bd:7e:ad:18:a6:d9:93:eb:b0:d4:2d:9d:75:0c:f5:
                    7e:16:0f:ef:78:8f:93:a1:47:87:99:66:8d:8f:e8:
                    19:ef:0e:87:9b:73:5e:f1:56:54:cd:b5:a9:9d:d0:
                    e1:15:7c:42:0a:b7:cf:50:34:2a:21:74:0e:35:ee:
                    07:a7:3d:33:dc:61:d1:93:fc:a0:e6:a0:6e:9f:08:
                    f4:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                94:36:ED:5C:86:13:A9:AD:4E:03:5D:FB:6A:23:71:64:55:5A:FF:3B
            X509v3 Authority Key Identifier:
                keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/BBE7B19C48CA11EF96754382C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.163.244.0/23
                  103.215.106.0/23

    Signature Algorithm: sha256WithRSAEncryption
         88:ef:55:aa:29:e8:f9:48:da:70:ad:29:36:13:df:6c:28:23:
         7f:f7:b8:81:a4:1d:90:77:18:8f:9c:0d:ff:53:de:8e:00:d2:
         ea:15:22:77:ce:a6:cf:73:32:3e:bc:b6:d7:c1:a0:4e:c2:e0:
         70:54:c1:82:e2:4e:97:91:2d:ac:c0:40:40:0b:56:09:43:a7:
         8d:2b:c9:7c:1d:59:69:43:fe:11:7c:6a:86:2b:cc:05:41:ce:
         3e:9e:95:64:32:be:f8:60:74:e4:c4:78:81:14:8b:fa:a6:3f:
         f0:a4:0a:45:25:f9:8f:15:86:7f:36:f4:f7:28:be:78:55:e0:
         8b:6a:c2:3b:11:23:bf:d5:f0:c8:cf:6a:c9:87:52:0a:96:14:
         ee:c6:36:49:c9:48:0d:fe:a4:f8:20:67:b6:74:48:0d:f3:7e:
         23:b1:9d:99:17:7c:08:03:99:e8:d6:36:4b:26:2e:06:c3:45:
         f0:23:ba:0c:dc:ff:a8:be:6e:86:8c:3b:2c:3f:1f:95:ec:02:
         0e:a6:a6:dc:a9:85:ea:ec:b1:51:4e:93:6b:b9:11:88:25:16:
         a2:bb:eb:8d:9e:7c:0b:4c:63:de:f6:ee:bc:ca:1c:ac:d8:3c:
         74:64:30:ca:ac:70:8b:4c:ce:64:63:cd:7d:c7:26:e3:7d:dc:
         e9:4e:51:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 20:24:56 2025 by rpki-client