Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/E15B9EAA05F211EEBB8E1062C4F9AE02.roa
File:                     E15B9EAA05F211EEBB8E1062C4F9AE02.roa (raw, json)
Hash identifier:          qWoKd3y408zPIkuwOEm+ckgWXitb3TDg5WE9I6bkmi0=
Subject key identifier:   DF:7E:04:75:91:06:38:1D:D4:C7:26:FC:D0:8C:8F:FC:C2:54:FB:FB
Certificate issuer:       /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Certificate serial:       8A54
Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/E15B9EAA05F211EEBB8E1062C4F9AE02.roa
Signing time:             Thu 30 May 2024 16:02:33 +0000
ROA not before:           Thu 30 May 2024 16:02:33 +0000
ROA not after:            Tue 01 Jul 2025 00:00:00 +0000
asID:                     135705
IP address blocks:        103.71.64.0/22 maxlen: 24
                          103.117.208.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
                          rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 21 Feb 2025 05:15:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 35412 (0x8a54)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918EDB2
        Validity
            Not Before: May 30 16:02:33 2024 GMT
            Not After : Jul  1 00:00:00 2025 GMT
        Subject: CN=6658a318-dbfb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:af:1a:43:c6:f8:b4:ea:73:04:c3:06:f5:1d:
                    83:86:e5:a8:93:0b:6b:09:79:cd:47:34:c2:0a:50:
                    c1:9d:98:b5:cc:e1:dc:ce:4e:9e:e3:16:12:a4:9d:
                    d1:cd:c0:9d:65:98:a8:4e:d1:f7:82:53:ab:a5:e5:
                    80:76:d8:41:33:17:95:97:f4:0c:0e:e9:06:3f:d3:
                    fe:a4:2a:31:e8:87:a2:e2:99:36:a1:fb:ff:a1:26:
                    78:67:10:7e:cc:88:d0:83:a2:4e:38:64:b7:55:2e:
                    5a:32:91:20:76:68:2f:05:84:ca:1a:b7:08:66:67:
                    51:17:5d:8b:db:59:12:d7:0b:26:9c:7e:6b:9b:69:
                    3b:d4:58:cf:05:3c:50:5c:3c:50:dd:4f:f6:88:3b:
                    78:d2:a0:3b:9e:64:2e:7c:89:bc:a9:09:bb:90:f9:
                    96:64:9a:30:36:8f:15:11:15:4c:32:b8:ae:7b:10:
                    12:7e:cb:ae:b1:01:9e:6b:0d:e5:44:22:57:a6:1b:
                    5d:10:a7:4b:3e:0a:80:62:77:2a:39:56:f8:84:13:
                    cd:67:19:69:cf:15:4a:ff:01:6f:d3:f7:d8:05:f8:
                    c8:fd:2d:56:57:e7:27:dc:92:be:15:58:cf:fb:9c:
                    00:f9:14:94:5e:07:97:45:48:a9:92:5b:e1:c8:04:
                    cb:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DF:7E:04:75:91:06:38:1D:D4:C7:26:FC:D0:8C:8F:FC:C2:54:FB:FB
            X509v3 Authority Key Identifier:
                keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/E15B9EAA05F211EEBB8E1062C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.71.64.0/22
                  103.117.208.0/22

    Signature Algorithm: sha256WithRSAEncryption
         06:c4:fc:a6:56:ca:20:3b:d5:8e:8c:7e:b5:4a:91:35:12:4f:
         21:71:27:d1:51:75:3e:c4:8f:88:4e:a4:80:67:d7:65:38:f5:
         f9:c2:7b:34:5a:24:16:df:1a:ff:54:cc:e2:6a:5b:23:10:5e:
         09:22:48:21:7d:ac:68:91:8e:a5:a4:06:db:55:77:f4:8f:ef:
         68:13:42:12:3d:5a:0f:a0:a3:bf:90:96:ed:ec:bf:63:da:13:
         e0:53:f4:af:87:14:57:89:16:ba:55:81:30:3f:84:22:9f:aa:
         1e:dd:48:2f:d0:eb:ad:6f:a8:cf:55:d5:bd:93:97:e2:7c:9a:
         56:78:19:45:38:43:04:19:9e:c0:d2:8c:f2:c1:6a:72:05:bd:
         83:28:14:58:48:06:a7:57:d5:bc:5d:9e:13:62:90:98:de:bd:
         04:65:e4:3f:09:fe:f9:90:84:bb:36:3a:71:70:0e:3e:45:80:
         7d:a5:b0:21:03:53:e6:25:ef:02:3e:88:a7:bf:60:6c:7c:34:
         7e:72:b6:9d:b7:f7:9c:3f:47:30:e5:e3:73:de:2f:bb:1b:e7:
         ff:bc:44:4d:bb:7b:cf:c9:3f:8e:ab:c5:81:e6:2c:44:2d:70:
         c9:bd:ee:3f:21:6b:e8:a1:82:52:df:a2:4b:99:5a:b4:0b:bb:
         dd:7e:11:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 20:37:48 2025 by rpki-client