Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/4AE07D166EED11EDB6685622C4F9AE02.roa
File:                     4AE07D166EED11EDB6685622C4F9AE02.roa (raw, json)
Hash identifier:          ylPcvvrZ6RcvWqeBG3IVM5jE+bQnVr1jb82n4OAPglE=
Subject key identifier:   CB:A0:95:68:7F:DB:1D:95:AA:06:C2:4E:38:43:99:92:C3:B0:67:8F
Certificate issuer:       /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Certificate serial:       6A9E
Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/4AE07D166EED11EDB6685622C4F9AE02.roa
Signing time:             Wed 10 May 2023 16:15:38 +0000
ROA not before:           Wed 10 May 2023 16:15:38 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     133670
IP address blocks:        103.100.245.0/24 maxlen: 24
                          2001:df1:9640::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
                          rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 03 May 2024 15:38:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 27294 (0x6a9e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
        Validity
            Not Before: May 10 16:15:38 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=645bc32a-e4c7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:18:bc:f5:fb:a2:76:99:cc:bc:32:2d:e2:2d:
                    78:3b:c1:08:6f:9b:3b:8c:09:d0:00:48:9d:9a:74:
                    2a:f8:b0:05:8a:38:35:e5:ff:d2:0f:a3:3c:65:ad:
                    49:52:5c:a7:0f:09:a4:90:34:f3:1b:c8:4d:59:8f:
                    66:5b:f8:de:81:80:9d:46:a0:77:10:ff:8a:cf:8b:
                    a0:f0:26:15:37:a5:7a:e7:d0:66:24:3d:37:fd:f4:
                    d3:e4:66:fc:16:97:32:f1:52:f7:a3:d9:7c:61:4b:
                    ca:b6:35:5c:95:20:9f:b7:03:0c:5c:a8:98:58:5a:
                    f8:b1:41:cf:83:f9:d5:5b:6c:26:b8:66:ec:8d:3c:
                    eb:a8:82:47:5f:35:23:22:f2:2e:26:ab:e0:5a:0d:
                    f8:86:03:f6:b3:6a:04:0d:16:4d:1c:f8:5b:8e:07:
                    5d:05:10:12:80:1a:a9:b5:72:f1:48:22:8f:1a:50:
                    89:a1:7f:6f:69:20:27:37:f0:14:23:3c:18:21:c8:
                    06:d2:2a:df:fa:b7:48:41:cb:b9:5c:d5:a6:57:28:
                    4b:bd:cc:f1:40:da:30:44:e7:6a:21:5d:aa:18:41:
                    3c:14:04:c9:75:3e:f6:db:d6:3b:8b:93:d8:25:1c:
                    fe:0e:3b:e9:38:08:79:ef:2a:9a:e8:03:bd:52:4f:
                    a3:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CB:A0:95:68:7F:DB:1D:95:AA:06:C2:4E:38:43:99:92:C3:B0:67:8F
            X509v3 Authority Key Identifier:
                keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/4AE07D166EED11EDB6685622C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.100.245.0/24
                IPv6:
                  2001:df1:9640::/48

    Signature Algorithm: sha256WithRSAEncryption
         83:59:ef:6e:9d:d5:44:24:2d:a8:1d:ff:fc:e6:52:d9:2c:aa:
         d3:eb:25:73:df:63:ba:89:ae:c6:a9:fe:bb:82:76:09:d3:b2:
         3f:5b:45:f7:8d:57:40:80:c5:70:74:6e:8b:0f:56:e3:c9:3b:
         09:6a:06:74:93:9f:af:7c:9b:8b:5e:c1:e8:ed:0f:6a:76:53:
         ce:23:4d:fc:0e:b2:13:38:29:75:3a:7c:fd:59:e2:7d:97:30:
         e0:83:aa:24:6a:74:c3:4b:9e:7f:33:92:59:55:4a:b5:2a:e5:
         03:c6:8f:12:bd:68:2c:ec:72:51:82:f0:27:80:2a:87:2d:61:
         2a:3c:1b:22:bd:ef:28:c4:0c:b3:d0:ee:3b:62:ed:4f:96:23:
         5d:4e:25:ed:d8:9a:cc:48:4a:4b:b2:f5:c5:d6:d1:08:3e:78:
         b4:5e:ae:29:fc:6b:9f:ce:06:2c:05:f7:fd:d6:ce:33:65:e5:
         a6:6e:6b:52:4e:47:c1:62:c2:94:41:7a:00:67:1b:32:96:f1:
         b2:70:51:0f:8f:42:aa:8e:c7:ac:44:b3:10:f9:cf:c8:e2:aa:
         2b:90:26:63:73:af:61:c4:48:fa:10:2e:d9:8b:c4:04:b8:3f:
         41:51:96:98:63:26:aa:5e:07:66:5f:5d:2e:4d:60:ea:b0:7c:
         03:16:a8:6b
-----BEGIN CERTIFICATE-----
MIIFgjCCBGqgAwIBAgICap4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
OEVEQjIxMTAvBgNVBAUTKDI5NkVEQjY0RjNBRjZFOUQ5ODA5MzJFODE2Rjk1OTgz
RTNBQkM4MjMwHhcNMjMwNTEwMTYxNTM4WhcNMjQwNzAxMDAwMDAwWjAYMRYwFAYD
VQQDEw02NDViYzMyYS1lNGM3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAzBi89fuidpnMvDIt4i14O8EIb5s7jAnQAEidmnQq+LAFijg15f/SD6M8Za1J
UlynDwmkkDTzG8hNWY9mW/jegYCdRqB3EP+Kz4ug8CYVN6V659BmJD03/fTT5Gb8
Fpcy8VL3o9l8YUvKtjVclSCftwMMXKiYWFr4sUHPg/nVW2wmuGbsjTzrqIJHXzUj
IvIuJqvgWg34hgP2s2oEDRZNHPhbjgddBRASgBqptXLxSCKPGlCJoX9vaSAnN/AU
IzwYIcgG0irf+rdIQcu5XNWmVyhLvczxQNowROdqIV2qGEE8FATJdT7229Y7i5PY
JRz+DjvpOAh57yqa6AO9Uk+jGQIDAQABo4ICpjCCAqIwHQYDVR0OBBYEFMuglWh/
2x2VqgbCTjhDmZLDsGePMB8GA1UdIwQYMBaAFClu22Tzr26dmAky6Bb5WYPjq8gj
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4RURCMi8yQTQzRTMwQzcw
RTkxMUUyQjM2RDRCNkIyOTc5QkIyMC9LVzdiWlBPdmJwMllDVExvRnZsWmctT3J5
Q00uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0tXN2JaUE92YnAyWUNUTG9GdmxaZy1PcnlDTS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
OEVEQjIvMkE0M0UzMEM3MEU5MTFFMkIzNkQ0QjZCMjk3OUJCMjAvNEFFMDdEMTY2
RUVEMTFFREI2Njg1NjIyQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwMAYIKwYBBQUHAQcBAf8E
ITAfMAwEAgABMAYDBABnZPUwDwQCAAIwCQMHACABDfGWQDANBgkqhkiG9w0BAQsF
AAOCAQEAg1nvbp3VRCQtqB3//OZS2Syq0+slc99juomuxqn+u4J2CdOyP1tF941X
QIDFcHRuiw9W48k7CWoGdJOfr3ybi17B6O0PanZTziNN/A6yEzgpdTp8/VnifZcw
4IOqJGp0w0uefzOSWVVKtSrlA8aPEr1oLOxyUYLwJ4Aqhy1hKjwbIr3vKMQMs9Du
O2LtT5YjXU4l7diazEhKS7L1xdbRCD54tF6uKfxrn84GLAX3/dbOM2Xlpm5rUk5H
wWLClEF6AGcbMpbxsnBRD49Cqo7HrESzEPnPyOKqK5AmY3OvYcRI+hAu2YvEBLg/
QVGWmGMmql4HZl9dLk1g6rB8Axaoaw==
-----END CERTIFICATE-----
Generated at Sat Apr 27 10:19:31 2024 by rpki-client on console-ams.rpki-client.org