Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/F8B213524C2D11ECA85EBF28C4F9AE02.roa
File:                     F8B213524C2D11ECA85EBF28C4F9AE02.roa (raw, json)
Hash identifier:          o+iOxHqPurxn0zArJaN81mBGdLtgU0plIVE50gcWMz0=
Subject key identifier:   10:A0:82:F6:D0:ED:79:60:63:3D:B7:32:96:07:C9:54:D4:83:4B:65
Certificate issuer:       /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Certificate serial:       8A4C
Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/F8B213524C2D11ECA85EBF28C4F9AE02.roa
Signing time:             Thu 30 May 2024 16:02:24 +0000
ROA not before:           Thu 30 May 2024 16:02:24 +0000
ROA not after:            Tue 01 Jul 2025 00:00:00 +0000
asID:                     135692
IP address blocks:        103.71.76.0/22 maxlen: 24
                          103.105.152.0/22 maxlen: 24
                          103.160.176.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
                          rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 21 Feb 2025 05:15:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 35404 (0x8a4c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918EDB2
        Validity
            Not Before: May 30 16:02:24 2024 GMT
            Not After : Jul  1 00:00:00 2025 GMT
        Subject: CN=6658a310-f324
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:79:fd:cb:d9:04:0e:75:d2:47:97:bb:8b:3f:
                    d3:98:38:b7:d2:d0:77:a6:32:94:53:e7:d7:62:9e:
                    4c:93:d5:ff:4e:4f:a8:9f:19:ce:b3:97:af:01:b5:
                    c0:6c:c3:33:1e:3c:f3:82:eb:2a:92:b8:f6:83:de:
                    b7:8f:f6:04:33:42:c4:4b:3d:88:5c:8c:16:0d:78:
                    35:00:12:9b:19:9b:88:af:c1:ac:ec:12:0e:18:2a:
                    4d:ef:0c:3c:f3:15:d8:8a:c5:e1:cb:34:3e:78:0c:
                    06:cb:34:08:e0:76:cf:88:90:39:af:7f:47:46:10:
                    6b:ed:c6:b6:5f:71:58:00:d0:55:62:78:6c:ad:97:
                    ff:c3:7a:ee:4f:d3:c0:84:93:81:38:9d:43:ed:d1:
                    9a:22:e3:d8:18:35:c4:9d:b0:47:09:4c:87:76:37:
                    87:ca:2c:34:78:10:5a:53:33:7f:2b:70:00:3c:e2:
                    ec:6c:13:ed:ab:cb:60:8b:31:89:43:42:13:32:77:
                    1f:1d:a2:9c:6a:96:d8:57:16:69:dc:32:1e:c9:5d:
                    ea:2f:dd:15:a8:4d:b1:41:c4:a7:24:fb:db:0d:e4:
                    8a:5b:31:d8:78:be:86:32:6d:08:1a:bf:bf:c7:44:
                    31:5b:e6:eb:64:ff:1c:9e:b5:bc:74:0e:fb:a4:39:
                    b6:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                10:A0:82:F6:D0:ED:79:60:63:3D:B7:32:96:07:C9:54:D4:83:4B:65
            X509v3 Authority Key Identifier:
                keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/F8B213524C2D11ECA85EBF28C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.71.76.0/22
                  103.105.152.0/22
                  103.160.176.0/23

    Signature Algorithm: sha256WithRSAEncryption
         76:94:4a:12:1e:0e:b5:5c:18:b7:91:7b:66:71:93:e8:9b:b8:
         70:f6:1e:02:47:c6:a5:e1:46:f4:6d:8e:df:9b:67:93:c6:20:
         25:5a:88:49:e0:a2:b8:3a:0b:94:97:b0:c5:e6:81:8b:61:8a:
         d3:31:b4:9a:e0:0c:e1:f3:12:ed:4a:e4:c2:f9:c9:bd:c4:0f:
         9c:52:d1:90:6c:16:33:66:df:4d:42:a6:e9:b0:83:68:0b:2b:
         54:fc:fa:7e:d8:46:26:0e:18:26:a6:fb:2a:b5:a9:7e:7d:46:
         46:60:31:3a:1d:df:3f:c9:1d:f3:6e:2d:8e:f6:e7:09:31:b5:
         27:44:57:81:c4:5e:55:1d:65:ac:fb:af:91:49:01:4f:df:ba:
         c8:be:85:0f:63:e4:e7:7a:12:39:72:43:04:31:2b:57:47:a5:
         e2:13:66:b1:8f:7c:1a:26:5b:49:97:f9:4e:31:04:84:b0:fb:
         ec:13:81:c2:5d:97:d9:4f:0d:a1:6f:7c:24:e9:ec:59:71:96:
         73:00:fc:66:75:c7:25:c6:80:47:e3:61:85:83:9b:42:c0:68:
         bd:8a:69:d8:05:f2:14:3c:36:18:6a:9d:11:7d:02:62:33:cf:
         13:9e:68:36:9b:98:29:58:44:b2:d3:76:a3:df:71:f7:30:d9:
         16:7b:65:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 20:23:34 2025 by rpki-client