Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/502937120EFE11ED9CC07D4AC4F9AE02.roa
File:                     502937120EFE11ED9CC07D4AC4F9AE02.roa (raw, json)
Hash identifier:          UL9Dw6s9GdRRuVrsJ2rejbyvCuChMn6dMM2RMcUYJfA=
Subject key identifier:   ED:22:EF:69:09:70:AA:5A:AB:F2:6D:95:10:5D:0B:AD:43:7E:B2:90
Certificate issuer:       /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Certificate serial:       6F7D
Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/502937120EFE11ED9CC07D4AC4F9AE02.roa
Signing time:             Wed 10 May 2023 16:39:03 +0000
ROA not before:           Wed 10 May 2023 16:39:03 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     142510
IP address blocks:        103.12.85.0/24 maxlen: 24
                          103.169.166.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
                          rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 03 May 2024 15:38:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 28541 (0x6f7d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
        Validity
            Not Before: May 10 16:39:03 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=645bc8a7-97fb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:8e:c3:e3:ba:c9:6e:fb:e0:4e:b2:58:f2:98:
                    de:19:ca:3e:a6:74:37:67:e3:be:8d:68:51:43:78:
                    e2:46:e8:0f:98:1f:e6:86:b1:e7:c0:4d:5b:2f:27:
                    79:6a:13:04:ee:9d:52:50:05:94:5e:a8:66:22:73:
                    d2:0b:87:a7:ef:2b:f9:b5:39:b2:2e:30:90:88:12:
                    8e:33:8f:ac:f6:25:b8:95:1a:78:21:cf:10:13:a5:
                    8b:8f:05:94:e7:a0:e5:a0:2b:64:5e:a7:be:f2:18:
                    a7:07:93:64:4d:1a:c6:7b:59:fe:53:a4:d0:92:83:
                    37:55:7a:c0:71:fe:af:5c:cc:c4:2c:d0:15:e6:a4:
                    6b:71:74:1e:7e:fc:5b:01:20:d6:36:8f:f6:84:13:
                    6e:c0:70:2c:e4:88:bd:36:04:22:b8:68:58:ed:b2:
                    0b:71:4d:56:e8:47:a9:33:ff:a3:a8:73:9c:e6:31:
                    f6:ee:73:f5:92:e6:03:d5:05:f4:27:c9:58:76:93:
                    22:ee:82:34:58:93:30:5d:da:b8:d4:d1:61:43:83:
                    36:8e:e7:5a:af:3b:8d:df:d1:f0:51:15:b2:aa:1d:
                    ce:f3:65:90:ca:98:fd:a6:fd:a2:45:fb:2c:33:6a:
                    48:85:9a:b3:9e:5c:4a:60:aa:9f:f7:c1:74:11:e3:
                    55:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                ED:22:EF:69:09:70:AA:5A:AB:F2:6D:95:10:5D:0B:AD:43:7E:B2:90
            X509v3 Authority Key Identifier:
                keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/502937120EFE11ED9CC07D4AC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.12.85.0/24
                  103.169.166.0/24

    Signature Algorithm: sha256WithRSAEncryption
         49:04:9f:fc:45:a8:4d:fd:ec:47:ba:50:a6:67:7f:ea:03:b6:
         bb:37:0f:50:44:92:50:bf:72:2b:3f:4c:30:97:ae:fe:9b:29:
         84:58:9c:e3:87:7f:1b:b1:9f:32:79:e7:20:3c:f8:38:10:2d:
         77:a6:e4:25:43:6b:3b:d5:ce:53:58:70:59:87:e6:17:61:ad:
         eb:58:68:95:97:b3:e5:be:3e:93:01:d8:cd:1c:ec:74:b8:6d:
         18:48:70:af:88:94:22:a8:0a:ab:fa:06:d1:68:b8:c9:ec:96:
         51:a7:56:0e:02:cb:48:2f:ec:0e:86:87:7f:71:07:f8:a4:3c:
         9a:f4:bf:d6:e8:4c:f8:43:73:eb:a8:37:5c:18:6f:b4:b9:e1:
         cd:55:74:16:dd:db:fb:f3:95:e9:bc:e4:7c:79:bf:a1:31:6a:
         4b:97:47:d2:9b:72:d7:c3:c9:5b:0f:19:26:15:97:36:57:9c:
         71:ef:da:b5:7a:98:ed:42:21:b1:85:e4:91:e7:31:c1:02:db:
         5b:53:89:63:6a:be:5f:67:f6:51:f6:ee:36:38:26:6d:19:6d:
         14:f8:25:b5:76:3e:5d:a2:59:d1:94:d8:e7:83:66:df:4c:68:
         e0:c9:22:0a:d6:63:bd:fc:61:83:9d:83:98:4d:10:2b:c6:56:
         4b:2e:cd:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 27 10:19:33 2024 by rpki-client on console-ams.rpki-client.org