Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/2CCD7DE00D3F11EB87942957C4F9AE02.roa
File:                     2CCD7DE00D3F11EB87942957C4F9AE02.roa (raw, json)
Hash identifier:          A/KDO7cvgOoQa7u8aLpsrWn3/gY5+YipxNpU9RPOtLo=
Subject key identifier:   CB:3D:90:CB:ED:4D:83:D4:A6:33:B6:03:DF:34:8C:30:2D:D2:B6:55
Certificate issuer:       /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Certificate serial:       7182
Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/2CCD7DE00D3F11EB87942957C4F9AE02.roa
Signing time:             Wed 10 May 2023 16:48:35 +0000
ROA not before:           Wed 10 May 2023 16:48:35 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     4195
IP address blocks:        103.145.16.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
                          rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 03 May 2024 15:38:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 29058 (0x7182)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
        Validity
            Not Before: May 10 16:48:35 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=645bcae3-7784
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:48:59:f0:19:fc:2a:28:31:94:bb:fd:fa:7d:
                    fe:8b:34:c2:2a:98:94:12:e8:14:35:61:5f:ae:85:
                    60:a1:58:63:f4:2a:94:30:8e:a5:62:d1:22:4b:ed:
                    7f:df:9b:92:c0:8f:64:15:f4:ae:27:b3:05:48:ca:
                    49:02:21:63:e6:cb:fa:0b:1e:0e:35:8b:ef:23:f4:
                    91:47:df:47:20:31:90:f7:b3:d0:dc:36:98:95:dc:
                    08:7f:0e:b8:8b:ed:99:23:af:48:6c:77:4d:dd:90:
                    1e:0e:f6:35:dd:9c:18:d8:ca:7d:0e:f4:48:c6:a7:
                    bb:91:94:f6:03:66:3b:3b:5e:25:d9:33:db:e3:c1:
                    68:8f:68:05:f7:43:0d:dc:48:b7:1c:25:44:f0:39:
                    13:0d:bc:26:48:48:6a:49:75:a0:08:e8:99:1b:b6:
                    53:89:58:3c:ab:ef:f4:9e:6d:81:39:54:13:05:4a:
                    c2:52:04:18:b7:c3:11:a0:b0:6d:f4:12:11:61:a8:
                    da:39:2b:5b:ba:92:ca:85:28:55:2f:a1:55:d7:bb:
                    4e:d2:a6:83:5b:83:c5:56:e9:66:74:d9:89:af:55:
                    af:20:a0:cf:c1:c0:56:4b:7e:e7:54:95:8e:9b:84:
                    ba:3b:b2:26:0d:8c:66:d5:ad:11:dd:ab:59:38:ec:
                    46:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CB:3D:90:CB:ED:4D:83:D4:A6:33:B6:03:DF:34:8C:30:2D:D2:B6:55
            X509v3 Authority Key Identifier:
                keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/2CCD7DE00D3F11EB87942957C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.145.16.0/24

    Signature Algorithm: sha256WithRSAEncryption
         82:88:e7:83:5b:ee:6a:95:e2:a2:66:1b:be:ce:82:ed:7f:de:
         8e:25:97:84:ab:2f:5e:76:84:ce:da:51:1c:8f:81:04:d0:a9:
         40:98:d1:af:cb:b3:2a:ac:f6:66:a0:07:92:5c:97:5d:f9:fd:
         5a:f2:19:9a:59:8f:9d:d2:64:f1:dd:8c:9b:4f:72:5b:a9:f8:
         33:a5:d0:80:0b:da:e2:0b:4e:57:a4:07:9e:d3:c7:5d:67:51:
         d2:fc:e8:e5:03:2e:fd:1f:ee:a5:e2:7f:82:a6:c6:70:83:0c:
         e5:03:22:b1:33:ad:df:8e:79:7b:2b:a6:99:dc:bb:d4:3c:b6:
         b3:d8:77:b1:b9:0b:c9:0c:94:d8:e7:0c:ea:b5:1d:01:f9:bf:
         ad:7c:11:2d:b1:87:a6:0b:11:66:c5:9a:4d:53:c6:f8:88:d7:
         36:56:85:25:b6:c5:64:e8:c5:a8:b5:46:20:50:56:e4:b5:39:
         60:f1:c2:e0:f3:22:9e:eb:c8:c6:cc:88:0d:5b:f1:af:6e:b8:
         ee:8c:34:58:7d:cc:d2:3b:7f:d2:39:2b:82:53:9c:ae:32:a4:
         e2:68:f2:6a:e9:09:4c:43:10:d7:41:b4:55:1e:06:07:e8:35:
         67:a2:64:4f:46:7f:43:51:d6:84:d8:1a:69:77:af:7a:13:eb:
         6d:d1:b3:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 27 10:19:29 2024 by rpki-client on console-ams.rpki-client.org