Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/48772CC295E211EB8F016284C4F9AE02.roa
File:                     48772CC295E211EB8F016284C4F9AE02.roa (raw, json)
Hash identifier:          T3dbG8TaTiUar334ec+rAADJkRvLfwGWzc/9lEK7F4s=
Subject key identifier:   44:B6:C5:E2:EA:A9:19:14:82:48:62:BF:07:AB:3F:F1:DF:47:A4:3F
Certificate issuer:       /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Certificate serial:       6D18
Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/48772CC295E211EB8F016284C4F9AE02.roa
Signing time:             Wed 10 May 2023 16:27:39 +0000
ROA not before:           Wed 10 May 2023 16:27:39 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     137604
IP address blocks:        103.113.112.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
                          rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 03 May 2024 15:38:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 27928 (0x6d18)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
        Validity
            Not Before: May 10 16:27:39 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=645bc5fb-1e06
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:18:aa:0f:17:c9:6d:b4:fd:06:39:8c:27:f8:
                    95:34:ab:2a:94:c3:b6:3d:cb:fa:82:9e:29:63:84:
                    ac:4d:22:90:ba:e0:bd:3f:72:a3:ed:92:e0:80:ce:
                    fa:c9:f0:36:86:c3:2f:63:b6:27:9d:3b:5d:a8:d9:
                    43:3a:eb:1e:2d:79:43:86:d1:37:b1:c0:c7:12:2c:
                    b3:d1:f0:ac:54:cb:6b:db:9c:5d:41:98:1f:9d:4c:
                    1e:d7:ed:4c:03:5c:ca:8f:44:46:36:4d:2d:88:78:
                    c2:58:e6:32:c7:fe:15:7d:01:74:fe:79:40:fe:6b:
                    47:64:80:4d:b9:19:6d:99:02:6d:a8:e6:71:db:57:
                    19:2b:4a:d3:4f:d0:89:9c:b3:aa:99:14:3e:ca:cb:
                    bc:0f:f8:13:13:3f:ad:07:e5:b6:41:82:99:61:79:
                    08:ba:47:6f:30:5b:2a:18:35:43:a5:75:6f:e1:bb:
                    56:5b:57:2d:4d:ff:df:a7:1f:8a:ec:81:57:dd:3c:
                    77:6f:b6:29:d6:8b:90:ac:a3:7f:fc:fe:2f:d2:6d:
                    2f:83:e6:c7:5e:27:0c:7c:3e:f4:21:34:37:9d:37:
                    1a:ec:ea:bc:7d:d4:a7:db:22:e9:5c:83:11:f6:38:
                    4b:e5:08:84:ef:86:c2:29:2b:a2:84:05:8e:3c:52:
                    f8:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                44:B6:C5:E2:EA:A9:19:14:82:48:62:BF:07:AB:3F:F1:DF:47:A4:3F
            X509v3 Authority Key Identifier:
                keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/48772CC295E211EB8F016284C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.113.112.0/22

    Signature Algorithm: sha256WithRSAEncryption
         80:c4:4d:08:d6:33:4e:f7:38:1d:6e:b1:4c:91:6f:a2:6d:bf:
         08:16:77:5b:9f:28:ec:ea:73:99:db:78:b4:72:8b:3c:28:67:
         cc:cf:ca:f8:74:58:16:26:8e:86:5e:57:0f:79:30:86:2d:83:
         ca:dd:ee:dd:c0:01:99:52:16:a7:44:7b:a1:1b:88:ca:77:6b:
         c6:ec:1d:42:34:c2:fe:11:d9:be:41:f1:b1:b4:ab:7c:2d:ab:
         d5:22:82:63:60:0a:32:49:10:6f:14:f1:52:f4:ad:6f:fc:06:
         a9:38:eb:d8:a4:6c:c5:af:3e:a0:bd:5f:b6:3d:ee:17:7f:41:
         85:24:6e:02:82:5c:60:46:3c:d4:65:50:49:be:7a:7c:ed:8a:
         ad:1e:6a:aa:3f:2a:c1:ae:56:54:f1:7c:47:17:13:02:90:d8:
         67:6f:43:3f:b2:c4:f5:21:f5:62:df:a9:f3:78:12:58:6d:e0:
         51:bd:76:0f:27:2b:6d:40:29:92:a3:16:ac:dc:6f:ff:bf:9e:
         97:a1:53:c2:b2:b6:a2:64:c0:63:ed:ce:b6:f6:09:b2:26:a8:
         dc:ea:97:37:0b:76:05:7e:08:72:18:e7:bf:67:08:da:a2:69:
         1d:66:63:42:a5:e4:da:c6:9a:38:d5:e1:f7:41:50:86:4e:c4:
         f8:b8:92:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 27 10:19:31 2024 by rpki-client on console-ams.rpki-client.org