Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/EEB826C8CD5711EDB0692553C4F9AE02.roa
File:                     EEB826C8CD5711EDB0692553C4F9AE02.roa (raw, json)
Hash identifier:          GPYpa4ScQc6LlXkeyRiADEodzXtZezdOMdmKyQ57/D0=
Subject key identifier:   1B:B5:7C:18:19:1F:6F:77:63:4B:DF:F3:49:F0:37:6C:07:62:A2:D1
Certificate issuer:       /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Certificate serial:       8F03
Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/EEB826C8CD5711EDB0692553C4F9AE02.roa
Signing time:             Thu 30 May 2024 16:22:03 +0000
ROA not before:           Thu 30 May 2024 16:22:03 +0000
ROA not after:            Tue 01 Jul 2025 00:00:00 +0000
asID:                     149270
IP address blocks:        103.181.140.0/24 maxlen: 24
                          2400:59a0::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
                          rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 21 Feb 2025 05:15:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 36611 (0x8f03)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918EDB2
        Validity
            Not Before: May 30 16:22:03 2024 GMT
            Not After : Jul  1 00:00:00 2025 GMT
        Subject: CN=6658a7aa-bfa3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:e2:9a:96:e0:0e:1e:2d:00:ff:af:19:69:bc:
                    04:35:5c:8e:f5:04:dd:01:c2:37:2b:f1:69:0e:6f:
                    36:3b:66:2b:fd:22:8b:b2:b9:e7:81:8f:2b:5f:53:
                    cb:95:b2:12:3e:eb:66:9f:05:07:9b:16:55:83:36:
                    cb:13:bf:ec:60:01:15:a3:88:ce:47:f9:af:d7:2e:
                    24:74:0d:e4:37:85:a7:27:29:fb:e5:39:85:e9:f1:
                    14:3b:3c:74:17:c9:8f:7e:bc:03:fa:7d:3c:f4:15:
                    c3:26:34:31:6f:83:f0:59:71:a2:b9:53:39:c6:4b:
                    ce:b5:e7:ab:fa:79:cc:23:f0:06:06:cd:d8:2b:34:
                    a5:77:d0:79:b2:72:b6:d7:fc:32:c3:1a:f7:1e:1d:
                    79:6c:4a:9d:9d:ae:41:28:fb:17:ed:34:47:ed:01:
                    7a:0d:dc:66:b2:a6:1c:e7:42:1e:d9:20:66:5a:9f:
                    94:33:13:18:7b:9d:af:52:3a:f4:9a:cc:b9:25:c4:
                    07:75:7e:dc:b6:f8:01:24:4f:a3:58:a6:52:98:81:
                    38:5f:aa:6b:6c:70:ae:96:17:1f:06:c6:5a:a4:3a:
                    67:e3:fd:b1:50:c7:25:f5:12:99:b4:3c:59:39:f0:
                    c5:0e:75:a4:ad:b8:b3:33:7d:a8:65:44:d6:01:88:
                    8d:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1B:B5:7C:18:19:1F:6F:77:63:4B:DF:F3:49:F0:37:6C:07:62:A2:D1
            X509v3 Authority Key Identifier:
                keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/EEB826C8CD5711EDB0692553C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.181.140.0/24
                IPv6:
                  2400:59a0::/32

    Signature Algorithm: sha256WithRSAEncryption
         6b:16:67:83:1c:bd:13:d7:63:b8:5e:31:2d:7d:7a:f6:08:bb:
         0b:a3:ea:09:0e:8d:16:24:f5:d1:60:db:d5:e5:f2:16:6b:93:
         3a:fa:ce:f7:cc:39:08:02:ed:cb:5b:91:fe:bf:ae:ad:5b:a4:
         a5:13:1f:a0:03:77:48:a0:4c:11:1e:f1:3c:9d:56:93:1a:99:
         fe:b7:a4:76:27:58:36:70:45:2f:f5:5c:6b:b7:fd:7b:f0:4b:
         df:b2:5a:b0:8c:ec:a8:e0:81:dc:57:75:49:0b:3f:e8:d0:2a:
         66:93:6c:f9:0d:61:0c:ab:60:a8:60:80:3a:24:20:89:6d:fa:
         f6:73:8a:81:f0:ea:01:a3:c5:45:d4:00:11:c6:fc:3b:7c:e5:
         77:37:c8:1c:94:65:78:5b:67:a4:6e:f3:1c:d4:ae:1d:56:ae:
         d3:79:67:09:01:48:b8:85:c9:9e:e5:37:22:10:fd:d7:82:00:
         53:68:c0:da:46:1d:5e:fd:c6:d4:93:e4:d1:96:68:de:4b:58:
         68:19:f9:d3:6c:54:52:54:2f:c0:06:36:16:3e:71:40:ce:2d:
         9b:5a:1b:72:70:2a:ba:c5:74:3a:65:6d:7a:e3:ca:da:dd:3c:
         8e:4f:76:87:af:48:75:5a:69:13:30:2a:ea:c4:59:cb:c9:cc:
         e9:53:f3:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 20:31:28 2025 by rpki-client