Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/1249153C140E11EEA8725D7DC4F9AE02.roa
File:                     1249153C140E11EEA8725D7DC4F9AE02.roa (raw, json)
Hash identifier:          A5iGx9Xzi0jyYqgx7oFEnfquOcq+d1xEl10eTPUpiag=
Subject key identifier:   CF:38:A5:EE:ED:86:AA:B2:BD:20:98:B8:38:6D:D1:5B:7B:F6:63:94
Certificate issuer:       /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Certificate serial:       7487
Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/1249153C140E11EEA8725D7DC4F9AE02.roa
Signing time:             Mon 26 Jun 2023 10:41:57 +0000
ROA not before:           Mon 26 Jun 2023 10:41:57 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     147202
IP address blocks:        103.175.30.0/23 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
                          rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 03 May 2024 15:38:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 29831 (0x7487)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
        Validity
            Not Before: Jun 26 10:41:57 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=64996b74-3f6b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:da:74:6f:8d:b1:28:42:27:56:10:92:52:41:
                    6b:e9:d7:2c:37:44:ec:44:a3:89:bb:f8:99:06:e9:
                    e8:e1:9e:62:e0:fd:9a:a4:a7:d6:c7:66:d8:6e:2a:
                    b7:65:6e:de:4e:f4:8c:de:9f:2d:19:ed:a9:39:e3:
                    7e:16:00:15:66:eb:cb:98:f7:a7:0e:e2:0b:81:bd:
                    1e:dc:dd:a8:3f:86:07:be:31:01:4c:26:1a:6d:77:
                    61:00:da:b8:bd:db:44:40:1c:4b:b3:11:1e:70:2e:
                    47:c2:90:23:cb:bd:ef:d9:b4:51:fe:74:b9:15:24:
                    da:ad:40:78:19:d7:ee:ac:40:6a:00:37:c0:a7:4c:
                    98:24:04:9a:36:cb:83:7a:ac:52:12:33:33:92:da:
                    67:a2:a8:ca:a3:4f:67:88:18:c6:d6:d8:48:ac:2a:
                    2e:52:b1:5e:36:f4:6f:eb:f9:22:84:c1:e0:b2:d7:
                    83:f5:67:e8:e1:ae:60:5b:cb:d2:e6:a7:90:7a:1e:
                    fc:83:67:5e:bc:6e:59:52:a2:ae:e4:ea:be:c8:8a:
                    18:86:16:c8:f7:3a:f7:1f:00:4a:01:a1:10:1e:f0:
                    49:d0:a0:f6:20:50:0e:ae:bd:d3:62:fd:09:5f:ab:
                    f5:aa:14:c8:46:55:62:d1:ca:e3:1c:84:1e:2d:32:
                    0e:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CF:38:A5:EE:ED:86:AA:B2:BD:20:98:B8:38:6D:D1:5B:7B:F6:63:94
            X509v3 Authority Key Identifier:
                keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/1249153C140E11EEA8725D7DC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.175.30.0/23

    Signature Algorithm: sha256WithRSAEncryption
         24:40:ef:dd:37:90:a1:d0:82:18:5f:e4:83:02:5a:6b:7b:25:
         94:a2:d2:f1:f9:f3:c1:5d:54:23:71:2d:58:c2:4d:17:1a:90:
         1a:ab:54:39:b5:79:e5:82:6d:70:04:f2:79:e7:b4:21:65:ca:
         4f:27:ad:f2:ba:d8:b9:c6:ac:51:5d:51:95:c6:e3:b9:7e:06:
         b2:44:8e:bc:23:26:3e:93:ec:57:38:34:e5:59:68:13:04:2f:
         5e:c1:c9:88:30:a1:e7:27:db:e9:39:1f:28:f6:fb:be:f0:bd:
         4f:4e:d2:4f:96:9f:e7:ad:7d:90:f6:61:30:85:5b:a2:f3:5a:
         10:be:b6:28:7c:1e:86:59:52:fc:88:2d:29:f9:4c:3d:86:50:
         f1:a4:9b:cb:62:d3:ac:c6:82:96:36:d6:dc:79:a4:ac:60:96:
         36:3f:43:a0:b9:94:ee:71:55:d1:77:5c:f7:94:43:ad:0f:b4:
         94:d3:f7:02:9f:34:ef:1a:c2:bc:e2:9c:07:41:ce:1b:69:b1:
         25:8c:8b:64:7e:60:9e:a7:41:59:a7:88:de:87:30:2d:09:cc:
         22:f6:f4:22:de:43:26:48:a6:a6:31:c3:28:9f:8f:3a:65:3f:
         fe:dc:56:7b:1a:0a:7b:c3:ed:49:93:9b:e6:65:e6:19:81:79:
         0e:56:e3:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 27 10:19:26 2024 by rpki-client on console-ams.rpki-client.org