Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/FAD6E7AEB67411EDA32C9C33C4F9AE02.roa
File:                     FAD6E7AEB67411EDA32C9C33C4F9AE02.roa (raw, json)
Hash identifier:          syczVlybgQjJKlN42nRmXVfIO80N9W7D/a3Q0AYbRPE=
Subject key identifier:   53:A2:8B:4E:F4:78:85:9C:AA:BD:27:73:A8:A2:B5:0A:62:72:FA:BF
Certificate issuer:       /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Certificate serial:       8FE4
Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/FAD6E7AEB67411EDA32C9C33C4F9AE02.roa
Signing time:             Thu 30 May 2024 16:25:41 +0000
ROA not before:           Thu 30 May 2024 16:25:41 +0000
ROA not after:            Tue 01 Jul 2025 00:00:00 +0000
asID:                     150633
IP address blocks:        103.83.28.0/23 maxlen: 24
                          2400:dba0::/32 maxlen: 32
                          2400:dba0::/40 maxlen: 40
                          2400:dba0:100::/40 maxlen: 40
                          2400:dba0:200::/40 maxlen: 40
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
                          rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 21 Feb 2025 05:15:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 36836 (0x8fe4)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918EDB2
        Validity
            Not Before: May 30 16:25:41 2024 GMT
            Not After : Jul  1 00:00:00 2025 GMT
        Subject: CN=6658a885-5617
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:15:31:0c:88:91:4a:0e:97:2f:ec:89:ac:88:
                    9f:2b:3d:c6:1d:c8:e2:44:10:7e:af:f1:cb:7d:61:
                    34:64:0f:4c:d6:4f:09:db:b6:21:6d:36:cd:7b:5c:
                    3b:7a:b5:62:d7:31:63:7b:ef:8c:16:3a:e6:01:ef:
                    33:d6:63:ab:6f:b7:b0:1c:af:f3:61:78:59:14:43:
                    dd:e0:32:5f:60:21:33:73:7c:01:5c:cc:53:ad:2f:
                    dd:ef:3f:e1:46:4d:c4:56:b1:db:7c:17:1d:89:14:
                    07:21:82:ed:3b:70:0a:44:9f:98:01:60:69:34:7d:
                    87:e1:69:a2:66:82:d9:f6:c5:ff:ad:c3:c4:0f:ba:
                    89:2b:c8:97:2a:c3:34:1e:65:82:aa:c6:2b:d9:9c:
                    25:3b:03:e9:48:b8:03:87:e1:dd:32:18:a2:44:a9:
                    fd:40:08:2d:a2:b3:27:d3:9e:f2:d4:77:19:d6:c4:
                    54:94:9d:57:41:e0:6d:a2:10:41:61:ac:a3:01:48:
                    06:7d:ac:44:6b:35:66:5f:60:49:8c:ed:a7:76:f7:
                    3c:df:41:54:21:01:57:e4:44:14:17:dc:cf:da:f2:
                    e0:81:e1:8a:06:18:6a:a8:17:da:97:79:de:2c:81:
                    53:54:9f:b8:53:58:aa:88:31:6f:fb:89:e3:3c:f4:
                    5e:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                53:A2:8B:4E:F4:78:85:9C:AA:BD:27:73:A8:A2:B5:0A:62:72:FA:BF
            X509v3 Authority Key Identifier:
                keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/FAD6E7AEB67411EDA32C9C33C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.83.28.0/23
                IPv6:
                  2400:dba0::/32

    Signature Algorithm: sha256WithRSAEncryption
         81:96:75:08:71:df:dd:0b:65:30:f6:d9:da:b0:11:3d:57:ec:
         58:cb:8e:ee:b7:04:40:32:cc:7f:1d:45:9b:31:ac:cb:16:60:
         b5:cb:c5:c9:40:9b:66:48:f3:c0:43:e1:46:c5:95:62:b7:07:
         21:1a:ea:db:88:fb:d9:f0:83:95:ed:f2:c6:1e:db:92:05:73:
         16:de:0f:2d:67:42:b2:9b:e4:b2:e7:d5:3d:21:97:41:a4:62:
         19:e5:1b:39:e0:59:a0:be:16:34:a6:f9:c6:8b:27:a4:84:bb:
         13:fb:32:a9:7f:b0:56:48:76:6d:de:ef:82:0b:66:c2:44:ec:
         d7:04:91:09:43:13:d1:3a:67:ee:8c:d1:7e:64:6d:4a:76:7d:
         b3:87:7d:72:74:db:b7:04:69:bb:52:83:f4:dc:3f:7e:86:56:
         fd:46:46:d9:95:2c:b6:95:fa:03:e1:1d:d1:52:c5:89:ea:73:
         20:6d:b9:95:f7:c3:a3:71:64:64:fd:ff:d5:dc:32:fe:11:b1:
         f5:32:e0:43:58:43:34:4f:27:84:ba:ca:63:d2:52:5a:8b:5f:
         ff:3b:0a:14:65:b8:7d:db:11:a0:b2:e7:e2:75:cf:ab:a1:c9:
         97:11:7b:c1:1d:c4:c7:7c:94:32:17:2d:cc:87:6a:0b:b1:5a:
         0c:d0:d8:18
-----BEGIN CERTIFICATE-----
MIIFgTCCBGmgAwIBAgIDAI/kMA0GCSqGSIb3DQEBCwUAMEYxETAPBgNVBAMTCEE5
MThFREIyMTEwLwYDVQQFEygyOTZFREI2NEYzQUY2RTlEOTgwOTMyRTgxNkY5NTk4
M0UzQUJDODIzMB4XDTI0MDUzMDE2MjU0MVoXDTI1MDcwMTAwMDAwMFowGDEWMBQG
A1UEAxMNNjY1OGE4ODUtNTYxNzCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBAK0VMQyIkUoOly/siayInys9xh3I4kQQfq/xy31hNGQPTNZPCdu2IW02zXtc
O3q1YtcxY3vvjBY65gHvM9Zjq2+3sByv82F4WRRD3eAyX2AhM3N8AVzMU60v3e8/
4UZNxFax23wXHYkUByGC7TtwCkSfmAFgaTR9h+FpomaC2fbF/63DxA+6iSvIlyrD
NB5lgqrGK9mcJTsD6Ui4A4fh3TIYokSp/UAILaKzJ9Oe8tR3GdbEVJSdV0HgbaIQ
QWGsowFIBn2sRGs1Zl9gSYztp3b3PN9BVCEBV+REFBfcz9ry4IHhigYYaqgX2pd5
3iyBU1SfuFNYqogxb/uJ4zz0XuUCAwEAAaOCAqQwggKgMB0GA1UdDgQWBBRTootO
9HiFnKq9J3OoorUKYnL6vzAfBgNVHSMEGDAWgBQpbttk869unZgJMugW+VmD46vI
IzAOBgNVHQ8BAf8EBAMCB4AwgYMGA1UdHwR8MHoweKB2oHSGcnJzeW5jOi8vcnBr
aS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkxOEVEQjIvMkE0M0UzMEM3
MEU5MTFFMkIzNkQ0QjZCMjk3OUJCMjAvS1c3YlpQT3ZicDJZQ1RMb0Z2bFpnLU9y
eUNNLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBr
aS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3
MkZEMUZGMi9LVzdiWlBPdmJwMllDVExvRnZsWmctT3J5Q00uY2VyMEoGA1UdIAEB
/wRAMD4wPAYIKwYBBQUHDgIwMDAuBggrBgEFBQcCARYiaHR0cHM6Ly93d3cuYXBu
aWMubmV0L1JQS0kvQ1BTLnBkZjCBywYIKwYBBQUHAQsEgb4wgbswgYMGCCsGAQUF
BzALhndyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5
MThFREIyLzJBNDNFMzBDNzBFOTExRTJCMzZENEI2QjI5NzlCQjIwL0ZBRDZFN0FF
QjY3NDExRURBMzJDOUMzM0M0RjlBRTAyLnJvYTAzBggrBgEFBQcwDYYnaHR0cHM6
Ly9ycmRwLmFwbmljLm5ldC9ub3RpZmljYXRpb24ueG1sMC4GCCsGAQUFBwEHAQH/
BB8wHTAMBAIAATAGAwQBZ1McMA0EAgACMAcDBQAkANugMA0GCSqGSIb3DQEBCwUA
A4IBAQCBlnUIcd/dC2Uw9tnasBE9V+xYy47utwRAMsx/HUWbMazLFmC1y8XJQJtm
SPPAQ+FGxZVitwchGurbiPvZ8IOV7fLGHtuSBXMW3g8tZ0Kym+Sy59U9IZdBpGIZ
5Rs54FmgvhY0pvnGiyekhLsT+zKpf7BWSHZt3u+CC2bCROzXBJEJQxPROmfujNF+
ZG1Kdn2zh31ydNu3BGm7UoP03D9+hlb9RkbZlSy2lfoD4R3RUsWJ6nMgbbmV98Oj
cWRk/f/V3DL+EbH1MuBDWEM0TyeEuspj0lJai1//OwoUZbh92xGgsufidc+rocmX
EXvBHcTHfJQyFy3Mh2oLsVoM0NgY
-----END CERTIFICATE-----
Generated at Sun Feb 16 20:26:27 2025 by rpki-client