Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A918DF0C/5B190E30184311EBB3AA713AC4F9AE02/181D7270184711EBAD14343FC4F9AE02.roa
File:                     181D7270184711EBAD14343FC4F9AE02.roa (raw, json)
Hash identifier:          gqCE02CBOTTrdLIogzJpaYzWvwCHcIiO+EC46ysOtw0=
Subject key identifier:   75:68:A3:51:DA:62:77:1E:56:8C:47:31:38:F8:6B:5E:9A:49:43:16
Certificate issuer:       /CN=A918DF0C/serialNumber=8E1B718686417848D9D3E62263C6E0D304BD37EC
Certificate serial:       0699
Authority key identifier: 8E:1B:71:86:86:41:78:48:D9:D3:E6:22:63:C6:E0:D3:04:BD:37:EC
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jhtxhoZBeEjZ0-YiY8bg0wS9N-w.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918DF0C/5B190E30184311EBB3AA713AC4F9AE02/181D7270184711EBAD14343FC4F9AE02.roa
Signing time:             Sun 24 Mar 2024 23:01:54 +0000
ROA not before:           Sun 24 Mar 2024 23:01:54 +0000
ROA not after:            Wed 28 May 2025 00:00:00 +0000
asID:                     63963
IP address blocks:        43.231.76.0/22 maxlen: 22
                          43.231.76.0/24 maxlen: 24
                          43.231.77.0/24 maxlen: 24
                          43.231.78.0/24 maxlen: 24
                          43.231.79.0/24 maxlen: 24
                          103.50.168.0/22 maxlen: 22
                          103.50.168.0/24 maxlen: 24
                          103.50.169.0/24 maxlen: 24
                          103.50.170.0/24 maxlen: 24
                          103.50.171.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918DF0C/5B190E30184311EBB3AA713AC4F9AE02/jhtxhoZBeEjZ0-YiY8bg0wS9N-w.crl
                          rsync://rpki.apnic.net/member_repository/A918DF0C/5B190E30184311EBB3AA713AC4F9AE02/jhtxhoZBeEjZ0-YiY8bg0wS9N-w.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jhtxhoZBeEjZ0-YiY8bg0wS9N-w.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 29 Nov 2024 20:43:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1689 (0x699)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918DF0C/serialNumber=8E1B718686417848D9D3E62263C6E0D304BD37EC
        Validity
            Not Before: Mar 24 23:01:54 2024 GMT
            Not After : May 28 00:00:00 2025 GMT
        Subject: CN=6600b0e1-b7d6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:c5:c1:0a:5f:d7:e1:a6:b6:9a:04:3f:0b:31:
                    ee:07:f4:93:53:cb:73:c8:9d:65:64:c4:6d:d4:ad:
                    d9:66:bf:30:e8:a1:d3:ea:c5:dd:ea:ed:72:20:17:
                    fa:48:44:30:6f:92:c6:6e:03:d5:8b:8e:a5:2d:6b:
                    a5:9c:a6:4d:95:bd:cb:be:c0:b6:b5:8c:c7:ae:9c:
                    9c:80:a4:a2:e9:cd:08:dc:25:ba:25:17:99:40:f1:
                    14:fb:ed:6c:a0:42:b9:a0:00:01:23:ac:82:ff:4a:
                    be:33:e7:49:34:34:8d:25:37:e4:16:b5:e9:02:fe:
                    06:74:ad:1b:52:04:4f:05:90:48:1d:6f:e5:34:5b:
                    15:b0:0d:5d:60:dd:be:36:16:af:39:d5:f2:f9:06:
                    64:9d:25:ec:be:a1:a4:c7:4a:06:71:97:80:03:01:
                    8e:c0:27:26:df:44:5e:c4:2e:e0:69:55:3c:f6:d2:
                    7d:0f:37:92:c3:21:82:7e:3b:63:77:78:99:20:76:
                    8c:9f:24:c3:7f:1c:76:64:85:ea:4e:89:ec:fa:97:
                    2c:40:f0:83:9a:00:8a:b9:44:c3:bc:da:1d:f1:fb:
                    dd:f2:1d:80:bc:0c:8c:e6:c0:92:be:60:2f:16:97:
                    73:b6:f9:de:cb:fa:a3:9d:4d:12:3b:29:50:58:5d:
                    be:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                75:68:A3:51:DA:62:77:1E:56:8C:47:31:38:F8:6B:5E:9A:49:43:16
            X509v3 Authority Key Identifier:
                keyid:8E:1B:71:86:86:41:78:48:D9:D3:E6:22:63:C6:E0:D3:04:BD:37:EC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918DF0C/5B190E30184311EBB3AA713AC4F9AE02/jhtxhoZBeEjZ0-YiY8bg0wS9N-w.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jhtxhoZBeEjZ0-YiY8bg0wS9N-w.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918DF0C/5B190E30184311EBB3AA713AC4F9AE02/181D7270184711EBAD14343FC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  43.231.76.0/22
                  103.50.168.0/22

    Signature Algorithm: sha256WithRSAEncryption
         2b:cc:71:61:9f:dd:8c:a1:eb:51:b8:80:99:54:0f:ca:aa:2b:
         b6:86:4e:6e:c3:4f:12:12:b5:10:04:f6:d7:7b:30:e7:72:f7:
         73:6f:a7:6c:51:9c:78:1a:be:d2:20:80:7d:73:fc:ee:6c:de:
         eb:4a:b9:c8:2b:2f:e0:56:18:58:6c:cc:d6:1b:46:46:cf:8b:
         4f:34:3b:c0:18:91:b6:bb:4e:0a:8a:ca:57:23:9b:b2:35:b4:
         8f:1b:cc:e1:ce:b0:5a:db:f3:0f:dd:56:69:38:a9:bc:f6:6d:
         06:79:57:a2:36:6f:df:ce:4b:53:87:76:e1:d3:a1:db:fb:2c:
         4a:8a:43:67:38:69:ce:81:0d:1a:0f:63:40:f7:05:4d:b8:a2:
         24:28:ee:0c:bb:11:ee:dd:47:e4:e0:94:75:90:2e:9a:b3:86:
         84:4d:d4:72:fd:20:85:de:4e:7a:d0:70:ef:57:ec:f3:58:83:
         f1:ae:69:c3:83:58:a1:a5:d3:c4:ca:37:56:77:93:f0:1f:ff:
         07:d7:3c:a9:28:a3:d5:09:2b:29:a2:0c:db:3f:50:98:52:70:
         32:30:35:65:19:f0:22:e8:c3:26:46:ac:aa:8a:94:56:1f:9c:
         03:e5:ec:a8:0b:d5:97:f2:30:46:42:77:9f:d4:d2:7b:30:7f:
         50:d1:83:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 22:24:10 2024 by rpki-client on console-fra.rpki-client.org