Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/1E026214BCB311EDB63ABA82C4F9AE02.roa
File:                     1E026214BCB311EDB63ABA82C4F9AE02.roa (raw, json)
Hash identifier:          8rIfewIiLmgfg5n/PSwfEbvxg9eKFh+bhsRk0qR7cYI=
Subject key identifier:   33:EB:65:1B:75:1E:BE:04:5E:75:59:0E:37:60:AC:BE:01:A6:66:E1
Certificate issuer:       /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Certificate serial:       707B
Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/1E026214BCB311EDB63ABA82C4F9AE02.roa
Signing time:             Wed 10 May 2023 16:43:47 +0000
ROA not before:           Wed 10 May 2023 16:43:47 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     149561
IP address blocks:        103.189.182.0/23 maxlen: 24
                          2001:df2:28c0::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
                          rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 03 May 2024 15:38:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 28795 (0x707b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
        Validity
            Not Before: May 10 16:43:47 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=645bc9c2-bbcd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:e7:33:40:8f:51:92:46:34:70:9a:fe:71:b3:
                    9b:ec:1e:1f:9e:66:da:30:3a:77:de:a9:0c:68:5f:
                    b2:68:cc:1a:17:f3:6e:bd:31:f8:73:f3:1a:8e:01:
                    90:e5:86:64:48:1c:84:bf:79:80:89:04:e6:b4:d4:
                    e9:49:96:b9:e2:13:4e:12:5c:18:10:44:31:ef:b9:
                    02:3f:1b:a7:9a:8b:cd:c0:18:5a:45:20:7a:4a:e9:
                    f7:a9:b2:23:9a:e5:8c:20:d5:5d:b4:47:5a:16:cc:
                    3a:80:99:5c:94:be:e1:ae:e5:9c:71:b4:95:9e:67:
                    ed:a6:1d:91:9d:d8:ec:09:5a:ea:55:15:8d:c1:e9:
                    fa:bc:90:44:ef:6f:8c:7b:da:1a:cd:4e:6d:31:e0:
                    0f:74:c0:8c:09:d5:d1:27:f6:ef:a3:8e:a6:2d:46:
                    cd:9f:58:31:9f:7b:09:e5:0a:06:61:02:10:f0:98:
                    58:b3:64:68:83:11:2e:bf:a0:78:de:0e:e9:75:c0:
                    70:87:8a:51:8b:72:75:de:42:77:2c:9b:ea:4b:0f:
                    bf:c7:5f:60:dd:e7:5d:4e:9f:e3:b6:3d:3f:8c:a3:
                    d0:7b:db:b9:4f:be:88:00:5d:16:f0:de:07:47:80:
                    5e:94:32:a2:ad:0c:45:36:99:a6:87:0d:45:69:b3:
                    90:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                33:EB:65:1B:75:1E:BE:04:5E:75:59:0E:37:60:AC:BE:01:A6:66:E1
            X509v3 Authority Key Identifier:
                keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/1E026214BCB311EDB63ABA82C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.189.182.0/23
                IPv6:
                  2001:df2:28c0::/48

    Signature Algorithm: sha256WithRSAEncryption
         a0:41:1f:bb:41:ef:90:89:25:ec:51:54:91:53:e9:88:eb:13:
         c9:3d:31:ec:52:41:27:47:35:bb:95:ed:0b:22:18:11:c8:88:
         d6:7e:dc:cd:0e:73:00:0a:74:c2:08:17:77:28:07:56:b9:d7:
         78:50:0a:05:8e:08:8b:e9:b1:22:d9:cb:59:36:66:f1:43:54:
         9a:6e:5e:83:e6:b3:9e:32:68:55:ee:66:1b:03:da:00:db:1c:
         83:8b:31:76:0d:25:78:85:2f:43:9e:35:77:88:e1:21:b2:b5:
         54:94:b5:00:31:fa:26:6e:58:8d:da:54:0d:ea:13:fb:e3:d1:
         7f:a7:e9:6d:ff:3f:54:31:66:f6:71:b8:74:7f:86:73:c5:02:
         0e:ee:57:43:ec:68:90:07:4f:e9:7d:c0:f6:4a:1b:97:aa:f8:
         76:af:dd:81:68:12:37:74:bb:c7:07:3c:27:96:70:35:e7:44:
         d6:e3:94:9b:c4:d6:73:1c:e9:73:71:25:86:1b:b7:f0:1c:62:
         59:f5:6e:5a:b0:59:82:82:1b:44:aa:c5:0e:27:57:b1:84:88:
         9e:d6:70:89:50:b6:be:ea:67:ee:92:b0:19:3b:91:58:97:8c:
         d8:31:54:9c:86:83:e7:92:70:9d:c6:86:54:d0:72:29:63:62:
         73:c1:09:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 27 10:19:27 2024 by rpki-client on console-ams.rpki-client.org