Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/30EE4564960311EC9F376173C4F9AE02.roa
File:                     30EE4564960311EC9F376173C4F9AE02.roa (raw, json)
Hash identifier:          dhxIvwPBIUoo2ueBvRmj7skguEI9oKnFqD0GbmsQX9c=
Subject key identifier:   26:F4:31:59:35:72:1E:B4:0C:72:1E:39:86:21:1A:72:91:DB:7B:7B
Certificate issuer:       /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Certificate serial:       7050
Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/30EE4564960311EC9F376173C4F9AE02.roa
Signing time:             Wed 10 May 2023 16:43:01 +0000
ROA not before:           Wed 10 May 2023 16:43:01 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     149261
IP address blocks:        103.100.192.0/24 maxlen: 24
                          103.178.112.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
                          rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 03 May 2024 15:38:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 28752 (0x7050)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
        Validity
            Not Before: May 10 16:43:01 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=645bc994-e834
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:92:51:ba:df:f9:b5:0f:07:3a:a2:23:69:ec:
                    c4:42:98:9d:f0:72:c7:c9:4f:50:ed:e3:63:69:6b:
                    0a:24:71:ec:9b:d4:8c:1e:82:07:e3:e2:17:97:99:
                    f7:ee:0b:e7:bd:b9:d3:05:e5:9d:9a:b3:bd:be:f8:
                    2b:65:69:78:45:87:91:7c:15:8b:b6:38:ab:a5:a7:
                    00:36:dd:4f:97:d2:2f:35:0f:ce:13:3c:7e:75:a7:
                    00:1d:59:a8:63:4e:a6:2c:a8:66:f0:6a:b6:6c:41:
                    3c:95:51:dc:39:ae:04:1e:69:22:a4:ac:82:a8:0c:
                    bd:89:01:e6:42:25:80:21:9b:13:e5:b3:24:71:07:
                    27:66:dc:da:01:df:8f:29:e0:e6:a2:41:67:63:ad:
                    40:61:74:ff:95:f6:18:0c:4f:f7:5c:3f:f2:3b:9d:
                    f8:2a:be:5a:93:fc:06:57:bd:1f:62:65:47:fd:eb:
                    51:c2:df:4f:5b:63:06:37:bb:6c:d0:ff:9f:09:c4:
                    59:a9:4e:b7:75:0c:4b:2c:d7:c6:99:31:4f:e5:b8:
                    6b:9b:b6:46:4d:f5:a5:9f:ee:7a:4d:e8:55:14:55:
                    fe:89:75:ab:29:0f:03:f7:f2:99:9b:fd:ec:b5:57:
                    3f:5e:4e:85:30:12:8d:00:07:18:a9:6a:4c:95:94:
                    f0:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                26:F4:31:59:35:72:1E:B4:0C:72:1E:39:86:21:1A:72:91:DB:7B:7B
            X509v3 Authority Key Identifier:
                keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/30EE4564960311EC9F376173C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.100.192.0/24
                  103.178.112.0/24

    Signature Algorithm: sha256WithRSAEncryption
         4f:63:4d:0e:5c:ad:51:76:14:18:54:2c:71:1f:2b:26:95:7c:
         26:10:81:71:1c:e5:e9:7a:63:ef:78:21:9e:56:3a:59:5e:c6:
         cf:8f:c4:bc:96:e8:4e:a7:71:2d:d7:8c:2c:42:b2:5c:8f:32:
         08:ce:b1:55:3e:0c:76:8f:2b:79:32:3a:9c:e7:15:ff:71:ef:
         b4:5b:53:f8:48:e4:b1:1b:68:56:9b:4e:63:86:40:d2:70:02:
         88:97:87:83:32:56:a4:05:f2:87:c7:84:e7:52:f3:f0:0f:fd:
         e0:cb:b0:5d:8c:6c:a7:dd:3c:50:d8:01:f4:2d:dd:57:6d:de:
         9a:a9:aa:7f:15:46:9d:91:09:34:0b:d1:ab:93:78:38:59:15:
         e8:1d:17:c5:7e:34:0e:c6:c5:41:77:bf:90:77:a9:b9:29:81:
         f3:61:f6:47:78:14:af:14:1e:6a:ae:ad:cb:ec:3b:dd:4d:e4:
         79:77:e9:ee:4b:13:ad:02:e5:6d:47:e6:62:78:4a:d9:de:25:
         82:bd:95:c0:5a:bd:87:74:af:7f:c8:73:4a:71:32:96:a0:fa:
         a7:e7:80:44:0f:5f:40:13:d9:50:5a:99:75:11:2f:cd:6e:b1:
         47:55:53:4d:49:99:e1:4b:6d:e8:d7:75:69:22:6f:bc:e2:12:
         21:37:d3:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 27 10:19:29 2024 by rpki-client on console-ams.rpki-client.org