Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/E981961AED9311EDA02CDC7AC4F9AE02.roa
File:                     E981961AED9311EDA02CDC7AC4F9AE02.roa (raw, json)
Hash identifier:          kDD3DxnO8vTeZQjBE0MFCBFH9hjz/TF0qNMokBbByAg=
Subject key identifier:   42:22:51:CF:BD:6E:EC:AF:52:6F:0E:DD:2B:D0:C9:AF:DF:34:EA:57
Certificate issuer:       /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Certificate serial:       8FFA
Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/E981961AED9311EDA02CDC7AC4F9AE02.roa
Signing time:             Thu 30 May 2024 16:26:01 +0000
ROA not before:           Thu 30 May 2024 16:26:01 +0000
ROA not after:            Tue 01 Jul 2025 00:00:00 +0000
asID:                     150658
IP address blocks:        103.69.162.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
                          rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 21 Feb 2025 05:15:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 36858 (0x8ffa)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918EDB2
        Validity
            Not Before: May 30 16:26:01 2024 GMT
            Not After : Jul  1 00:00:00 2025 GMT
        Subject: CN=6658a899-f0b9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e2:a9:bf:fb:b8:1f:a2:dc:51:f1:db:e4:8f:21:
                    a0:c4:be:6e:a9:c5:56:3c:00:ec:3c:20:f6:7d:a6:
                    4b:ad:78:c8:3b:f0:d2:48:8a:b5:ae:37:63:84:65:
                    a2:4b:c2:13:2d:2c:68:1a:a5:d1:eb:34:01:51:8c:
                    d4:0e:e0:c5:73:a1:39:a1:3a:6c:5f:62:78:47:56:
                    8f:7d:06:04:56:38:8f:6b:fc:6e:12:2e:01:ca:4e:
                    24:c9:e6:7f:9e:80:98:72:55:f6:b6:43:24:de:f7:
                    e2:fb:c7:f3:b4:6e:0f:12:34:85:3a:08:31:bc:46:
                    50:fe:02:d9:d8:40:28:80:39:69:b8:c8:6f:7d:b3:
                    37:3e:da:93:ad:e1:c8:9a:40:00:9b:ed:6e:28:e1:
                    11:2a:7b:fb:6c:c3:c9:e5:46:62:b7:1e:a2:88:13:
                    3a:ac:0d:08:54:c5:47:83:68:14:84:c4:50:0d:fd:
                    40:b5:2e:2b:30:23:1b:ce:b1:21:df:7b:84:b3:5b:
                    43:3d:2f:6c:b5:cc:8a:85:98:02:37:c4:0e:ae:43:
                    82:0a:91:fd:3e:c6:10:7c:a5:bf:e8:ba:de:d8:49:
                    e9:a4:9f:40:c7:bd:5f:bb:cb:6e:61:cb:14:53:02:
                    da:5b:18:73:61:96:25:75:54:f1:8f:4b:72:87:d3:
                    f9:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                42:22:51:CF:BD:6E:EC:AF:52:6F:0E:DD:2B:D0:C9:AF:DF:34:EA:57
            X509v3 Authority Key Identifier:
                keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/E981961AED9311EDA02CDC7AC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.69.162.0/23

    Signature Algorithm: sha256WithRSAEncryption
         2b:4e:f2:68:27:25:f1:1e:08:8b:95:b1:e0:63:db:75:95:75:
         06:5b:96:e6:c5:40:11:a3:9f:af:9d:77:b5:ba:89:50:24:72:
         f0:fb:db:fd:12:e1:9e:69:3c:92:c9:cc:dc:8d:3d:78:b2:78:
         76:8f:e9:db:09:d3:36:95:61:74:30:31:c6:62:e7:7d:b9:fc:
         d3:e5:78:09:4a:4c:a1:12:c3:68:20:03:90:fd:49:f6:bc:67:
         c3:2b:25:59:3c:2f:40:27:78:fb:11:ee:08:84:10:06:2b:6e:
         92:9b:c3:30:fa:b0:67:60:15:d5:27:6a:96:5a:62:56:d8:e8:
         44:ad:f0:b7:10:cb:a0:2b:08:96:ba:34:e9:cc:0c:88:ea:54:
         43:3f:a5:ac:6e:c0:1d:b2:ca:24:30:95:88:eb:47:ad:23:34:
         83:80:fa:df:e7:0a:e4:d0:c7:d5:54:a4:70:e8:8c:c8:18:dd:
         45:65:62:5f:14:90:02:2f:55:94:f5:24:2c:24:6f:a7:f7:75:
         b7:0c:f2:6e:be:21:9e:03:ef:d4:1a:47:dd:36:d8:d5:b8:6d:
         13:dd:a0:1d:dd:69:e2:6c:54:a9:13:7b:b2:d3:24:9c:7e:7a:
         d2:a3:68:1f:66:66:fd:69:aa:33:65:09:87:40:41:bc:70:84:
         71:84:33:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 20:20:45 2025 by rpki-client