Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/D75173B48A8511ED98572D26C4F9AE02.roa
File:                     D75173B48A8511ED98572D26C4F9AE02.roa (raw, json)
Hash identifier:          s9mKhC3xRVwvZl0pWHlBLhDJgRrYNpGeAsX4hJ62Uns=
Subject key identifier:   80:23:2B:F6:F2:45:7B:3E:2D:D3:2B:3F:BB:67:FC:C3:6A:FD:3B:E2
Certificate issuer:       /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Certificate serial:       8EEC
Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/D75173B48A8511ED98572D26C4F9AE02.roa
Signing time:             Thu 30 May 2024 16:21:41 +0000
ROA not before:           Thu 30 May 2024 16:21:41 +0000
ROA not after:            Tue 01 Jul 2025 00:00:00 +0000
asID:                     149236
IP address blocks:        103.181.201.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
                          rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 02 Dec 2024 10:54:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 36588 (0x8eec)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
        Validity
            Not Before: May 30 16:21:41 2024 GMT
            Not After : Jul  1 00:00:00 2025 GMT
        Subject: CN=6658a795-26b1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:91:d2:11:ff:6d:ee:72:20:4c:f8:25:99:d3:
                    ff:9d:3a:bc:ae:0f:a6:b5:fa:7b:e0:51:33:5f:81:
                    eb:b3:20:37:79:99:99:11:2e:72:cc:03:06:ed:fb:
                    4b:bb:b6:a8:1a:9e:96:3f:ae:98:79:b1:6e:b9:e5:
                    f3:87:54:7c:c9:9f:28:4a:4b:e3:de:69:30:3a:cc:
                    77:33:7d:d5:bd:78:77:d3:73:4d:88:d1:0d:72:61:
                    5b:d8:d9:f8:f7:05:82:e4:8a:57:8a:e8:23:60:15:
                    79:94:10:46:35:8e:e2:b5:26:4a:8f:54:54:68:8c:
                    3e:8b:52:3b:a2:84:8f:81:82:80:1d:ef:92:bf:a7:
                    a6:3a:8b:7f:e4:1c:c5:0f:2c:8e:d5:b1:79:58:0f:
                    f7:61:45:55:70:95:de:bf:6e:2d:db:2c:1e:53:69:
                    c6:e6:17:92:bf:21:e0:9f:f4:0a:66:24:90:f0:52:
                    26:ae:40:8c:f0:e0:67:ef:6d:b2:a8:0f:26:af:9c:
                    e7:e7:c3:c0:02:ad:c5:83:27:3c:c2:7f:e7:96:8b:
                    76:4d:4c:9e:fe:37:c3:eb:4b:b9:ba:6c:7c:37:0e:
                    94:a8:d0:91:74:fe:ce:13:af:25:ef:87:3b:9b:39:
                    be:9c:26:9d:d4:f8:1c:93:9e:e5:48:24:73:36:65:
                    21:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                80:23:2B:F6:F2:45:7B:3E:2D:D3:2B:3F:BB:67:FC:C3:6A:FD:3B:E2
            X509v3 Authority Key Identifier:
                keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/D75173B48A8511ED98572D26C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.181.201.0/24

    Signature Algorithm: sha256WithRSAEncryption
         6d:91:23:3e:90:24:35:be:d9:86:44:70:9c:98:ef:7a:08:4d:
         01:68:9d:a7:87:72:e3:00:a4:85:17:27:c6:86:26:6c:7b:57:
         46:87:38:3b:d3:e7:f6:c1:20:25:d9:19:20:b6:06:40:12:5b:
         d4:1a:17:82:26:08:90:02:20:ce:74:49:fe:88:08:fc:c6:44:
         6c:e4:3e:4e:f4:ea:d2:4a:67:24:1d:ff:c0:04:44:b3:0a:45:
         74:f4:10:fd:35:d4:b0:64:f8:09:32:6b:20:de:99:3e:35:30:
         40:84:d2:37:1a:f6:72:a5:d4:19:d4:5b:a6:1b:e2:e8:b4:7a:
         60:9f:ad:cc:70:16:d1:7f:65:a5:74:d3:29:2f:52:3c:30:b5:
         73:b4:df:f2:2e:89:9f:88:ee:50:b8:30:de:1e:13:20:6f:7c:
         93:10:9a:26:be:a5:9b:5c:94:5c:0b:9f:54:39:fa:0b:97:41:
         80:19:d0:d8:e8:eb:ac:01:43:7d:ce:30:f4:83:ec:63:b0:58:
         78:89:f1:e7:80:a8:8d:18:a2:ae:ef:38:d9:0c:c0:11:62:6f:
         af:1c:39:32:49:20:96:49:eb:81:bb:4d:24:d8:dd:a0:bf:10:
         7e:56:08:2d:05:71:e1:ea:f3:4c:a4:cf:7c:c1:0e:63:83:da:
         7b:2e:85:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 25 13:17:27 2024 by rpki-client on console-ams.rpki-client.org