Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/49C427709AEF11EC9717F22AC4F9AE02.roa
File:                     49C427709AEF11EC9717F22AC4F9AE02.roa (raw, json)
Hash identifier:          ANkQRvhu7v1JKouBsoBzZNmmmQn8DPC0YQkck8+YXBM=
Subject key identifier:   9A:D2:2C:4B:AB:9E:E2:C4:21:E9:EF:2C:52:54:1B:59:92:0E:17:E6
Certificate issuer:       /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Certificate serial:       7099
Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/49C427709AEF11EC9717F22AC4F9AE02.roa
Signing time:             Wed 10 May 2023 16:44:20 +0000
ROA not before:           Wed 10 May 2023 16:44:20 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     149606
IP address blocks:        103.179.168.0/23 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
                          rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 03 May 2024 15:38:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 28825 (0x7099)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
        Validity
            Not Before: May 10 16:44:20 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=645bc9e4-238f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:64:a9:6a:ed:36:a2:b9:b7:a3:ad:6f:38:10:
                    1d:5d:6a:0a:86:0d:a7:38:61:36:a4:c6:4e:6a:4b:
                    0d:6d:c5:b5:fc:34:f0:f6:4f:e1:db:19:5a:33:05:
                    c5:14:ed:5e:44:bf:bd:c1:40:0c:5d:94:fe:70:71:
                    9e:01:dd:23:6e:44:d9:07:f8:00:b4:5f:09:97:48:
                    c9:82:6c:72:fe:67:b6:db:d7:e1:28:1a:9e:1e:3d:
                    20:ae:21:6a:6e:c4:6a:ca:e1:f9:e7:5c:43:24:5a:
                    d1:5a:97:a6:3c:15:4c:72:43:a6:e1:8b:63:67:d0:
                    7a:5c:d1:ab:8f:85:fa:54:f0:65:b1:23:7b:f2:0e:
                    8e:e5:c2:ec:16:1b:8a:b6:a0:a4:6f:6b:b3:ca:51:
                    4c:96:8b:54:96:ff:ee:92:64:c5:ca:ae:05:0c:93:
                    41:99:7b:e4:cb:8a:44:f1:79:81:1d:ed:95:81:89:
                    1e:15:ef:b7:b7:21:22:4c:2c:07:12:32:cc:56:5e:
                    18:b7:1a:08:bd:f2:b6:58:aa:4c:d8:2f:6b:8f:31:
                    52:45:b5:1d:64:d6:3c:ee:0f:5b:e9:48:45:f4:cc:
                    95:e4:7d:cd:d5:99:04:38:05:73:71:60:59:f8:c5:
                    93:fe:e6:a4:40:73:b8:e6:71:40:37:07:e7:d9:5f:
                    cb:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9A:D2:2C:4B:AB:9E:E2:C4:21:E9:EF:2C:52:54:1B:59:92:0E:17:E6
            X509v3 Authority Key Identifier:
                keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/49C427709AEF11EC9717F22AC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.179.168.0/23

    Signature Algorithm: sha256WithRSAEncryption
         7f:2f:a9:31:33:6c:37:70:e6:29:0a:bc:39:9d:06:ea:37:7e:
         fe:b6:68:a7:c2:9a:3d:bd:fc:41:70:18:23:69:28:93:76:db:
         a8:95:30:d7:ad:d0:6a:5a:92:97:c7:59:3d:d3:af:4c:ca:30:
         ba:19:fb:6b:fc:6b:80:ec:1a:c6:99:59:fe:6b:38:13:60:45:
         fd:8c:ce:6c:08:59:62:55:0b:ed:4f:e4:fa:99:3d:3d:71:ca:
         9e:b4:b2:b2:67:10:88:16:18:44:d1:12:70:da:d3:fa:b8:16:
         f5:44:78:77:b2:54:50:d6:25:59:38:65:01:0d:27:83:b4:ec:
         71:cd:fb:37:eb:b3:95:c9:10:82:11:e7:9a:cd:3e:4c:71:75:
         17:d9:c3:46:9b:96:d7:f9:2d:38:47:a2:32:bb:39:c1:25:c7:
         5e:10:8d:f8:88:46:42:1b:9c:b5:ca:58:fd:b0:73:8c:3d:1c:
         7e:10:4c:5b:3a:fa:1a:7d:77:b5:36:b2:9d:7a:0d:63:fc:70:
         52:94:af:57:9f:2b:50:e3:ec:43:63:8e:16:6c:1a:8e:df:10:
         2e:08:54:b6:b4:af:53:84:de:fa:90:6d:96:22:47:1c:55:53:
         b6:08:20:67:06:dc:64:f5:78:43:96:f7:c7:e0:29:76:cf:d7:
         d8:bb:61:cf
-----BEGIN CERTIFICATE-----
MIIFcTCCBFmgAwIBAgICcJkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
OEVEQjIxMTAvBgNVBAUTKDI5NkVEQjY0RjNBRjZFOUQ5ODA5MzJFODE2Rjk1OTgz
RTNBQkM4MjMwHhcNMjMwNTEwMTY0NDIwWhcNMjQwNzAxMDAwMDAwWjAYMRYwFAYD
VQQDEw02NDViYzllNC0yMzhmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAymSpau02orm3o61vOBAdXWoKhg2nOGE2pMZOaksNbcW1/DTw9k/h2xlaMwXF
FO1eRL+9wUAMXZT+cHGeAd0jbkTZB/gAtF8Jl0jJgmxy/me229fhKBqeHj0griFq
bsRqyuH551xDJFrRWpemPBVMckOm4YtjZ9B6XNGrj4X6VPBlsSN78g6O5cLsFhuK
tqCkb2uzylFMlotUlv/ukmTFyq4FDJNBmXvky4pE8XmBHe2VgYkeFe+3tyEiTCwH
EjLMVl4YtxoIvfK2WKpM2C9rjzFSRbUdZNY87g9b6UhF9MyV5H3N1ZkEOAVzcWBZ
+MWT/uakQHO45nFANwfn2V/LcwIDAQABo4IClTCCApEwHQYDVR0OBBYEFJrSLEur
nuLEIenvLFJUG1mSDhfmMB8GA1UdIwQYMBaAFClu22Tzr26dmAky6Bb5WYPjq8gj
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4RURCMi8yQTQzRTMwQzcw
RTkxMUUyQjM2RDRCNkIyOTc5QkIyMC9LVzdiWlBPdmJwMllDVExvRnZsWmctT3J5
Q00uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0tXN2JaUE92YnAyWUNUTG9GdmxaZy1PcnlDTS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
OEVEQjIvMkE0M0UzMEM3MEU5MTFFMkIzNkQ0QjZCMjk3OUJCMjAvNDlDNDI3NzA5
QUVGMTFFQzk3MTdGMjJBQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E
EDAOMAwEAgABMAYDBAFns6gwDQYJKoZIhvcNAQELBQADggEBAH8vqTEzbDdw5ikK
vDmdBuo3fv62aKfCmj29/EFwGCNpKJN226iVMNet0GpakpfHWT3Tr0zKMLoZ+2v8
a4DsGsaZWf5rOBNgRf2MzmwIWWJVC+1P5PqZPT1xyp60srJnEIgWGETREnDa0/q4
FvVEeHeyVFDWJVk4ZQENJ4O07HHN+zfrs5XJEIIR55rNPkxxdRfZw0abltf5LThH
ojK7OcElx14QjfiIRkIbnLXKWP2wc4w9HH4QTFs6+hp9d7U2sp16DWP8cFKUr1ef
K1Dj7ENjjhZsGo7fEC4IVLa0r1OE3vqQbZYiRxxVU7YIIGcG3GT1eEOW98fgKXbP
19i7Yc8=
-----END CERTIFICATE-----
Generated at Sat Apr 27 10:19:31 2024 by rpki-client on console-ams.rpki-client.org