Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/C92B915CF5F711EC9B35372AC4F9AE02.roa
File:                     C92B915CF5F711EC9B35372AC4F9AE02.roa (raw, json)
Hash identifier:          nlyY0trjoW+XqdjXKdSyUqkvYAChUa1OqDwG+ku12kI=
Subject key identifier:   CF:9F:E1:E8:A7:66:51:18:D7:BC:17:41:9E:1D:EF:C3:54:CA:11:08
Certificate issuer:       /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Certificate serial:       8F3F
Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/C92B915CF5F711EC9B35372AC4F9AE02.roa
Signing time:             Thu 30 May 2024 16:23:00 +0000
ROA not before:           Thu 30 May 2024 16:23:00 +0000
ROA not after:            Tue 01 Jul 2025 00:00:00 +0000
asID:                     149588
IP address blocks:        103.190.26.0/23 maxlen: 24
                          2001:df0:e2c0::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
                          rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 21 Feb 2025 05:15:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 36671 (0x8f3f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918EDB2
        Validity
            Not Before: May 30 16:23:00 2024 GMT
            Not After : Jul  1 00:00:00 2025 GMT
        Subject: CN=6658a7e4-a762
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:33:71:92:08:d2:1f:72:d5:61:f9:49:8d:d9:
                    2f:a0:8b:cf:37:32:de:8d:0a:1b:62:a7:b1:69:e5:
                    73:30:f7:55:ca:4d:8f:c9:c6:60:71:fb:7f:d6:37:
                    5b:05:64:d3:4c:57:90:6c:6d:24:f8:a0:ed:46:40:
                    4d:21:ed:4f:6e:7a:58:e4:e0:ac:9a:00:4a:07:e0:
                    82:bb:e3:0c:6e:0d:06:df:68:7b:c0:63:90:72:2c:
                    58:38:96:ef:71:61:e7:9e:ec:8a:7f:fa:ac:be:53:
                    c7:a7:b5:1f:f3:4f:38:d5:c4:98:53:20:1e:cc:f7:
                    17:b7:43:03:c3:08:5f:91:db:79:b8:0f:24:df:31:
                    0f:05:fb:12:13:ec:68:d1:ed:e7:fa:ea:3d:84:17:
                    e9:a0:28:c1:1a:05:4b:0b:30:1a:f4:58:4b:18:58:
                    94:41:b9:b3:2c:64:62:77:cf:c3:7a:54:d0:0c:e1:
                    a0:fe:14:24:58:07:73:76:14:5f:bf:3d:e6:e5:b0:
                    00:ec:cf:19:d0:af:8e:10:6f:0f:ee:c7:c4:35:28:
                    35:0f:a2:df:e0:ce:d3:c7:b0:97:ed:36:1f:8c:ff:
                    1a:15:f6:01:0e:31:ff:00:da:86:fd:dd:d4:dc:d6:
                    fb:2f:20:73:f7:10:ad:3e:b6:df:16:1b:9d:75:5a:
                    ba:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CF:9F:E1:E8:A7:66:51:18:D7:BC:17:41:9E:1D:EF:C3:54:CA:11:08
            X509v3 Authority Key Identifier:
                keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/C92B915CF5F711EC9B35372AC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.190.26.0/23
                IPv6:
                  2001:df0:e2c0::/48

    Signature Algorithm: sha256WithRSAEncryption
         3c:22:14:d3:c1:e5:15:16:38:5b:0b:3a:26:1e:55:64:35:a2:
         47:1f:a2:6d:3e:67:1e:ae:79:6a:44:25:4c:f6:57:80:98:a1:
         4a:0a:71:46:a7:be:28:77:bc:b2:ad:9c:55:24:63:15:87:87:
         d4:f2:34:e3:b3:f9:38:09:e1:b8:d8:f9:09:cc:f7:ae:d3:86:
         e7:b9:19:5c:21:d7:bb:7c:4f:7e:92:a7:d5:4c:79:4f:80:ca:
         e5:3f:d5:1a:8c:5e:0c:cf:52:40:24:29:57:63:e9:99:31:dc:
         6c:0f:29:ca:09:88:ea:80:f3:87:39:15:6c:87:13:9e:28:9e:
         73:58:89:3b:49:fa:bf:3a:9c:77:21:58:a7:b3:5e:8c:f3:22:
         d4:66:ec:7d:7e:cf:3d:fc:24:42:fc:55:c8:b1:d3:b3:81:ee:
         c3:e4:9b:85:20:be:28:aa:f4:14:c9:37:ec:ec:d5:1d:49:72:
         4e:49:a9:a8:3d:cb:80:65:cc:0f:20:31:aa:72:94:3e:49:48:
         c4:b5:8b:67:60:91:0f:a1:3d:a0:58:19:42:17:99:08:20:dc:
         f5:9e:0d:b0:64:16:b2:54:81:30:d9:11:87:c7:e7:96:1c:91:
         50:4b:b4:f5:b4:05:e0:a3:28:27:f3:f0:c4:30:f1:40:73:6a:
         ac:3a:20:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 20:47:10 2025 by rpki-client