Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/7494BE70EEAF11EB9FF10D4FC4F9AE02.roa
File:                     7494BE70EEAF11EB9FF10D4FC4F9AE02.roa (raw, json)
Hash identifier:          I+TTt5hWUjcpAbCxaBmlm1A2eEEfrxW44Z3cgo83UdY=
Subject key identifier:   1D:70:7A:A8:49:F0:9D:A3:0A:70:A0:43:4B:7E:3F:63:EA:05:9A:78
Certificate issuer:       /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Certificate serial:       6F78
Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/7494BE70EEAF11EB9FF10D4FC4F9AE02.roa
Signing time:             Wed 10 May 2023 16:38:58 +0000
ROA not before:           Wed 10 May 2023 16:38:58 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     142504
IP address blocks:        103.170.40.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
                          rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 03 May 2024 15:38:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 28536 (0x6f78)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
        Validity
            Not Before: May 10 16:38:58 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=645bc8a2-3cfa
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:00:38:a7:4f:b0:73:35:99:ca:2c:61:3b:b5:
                    97:6f:0b:70:2c:93:94:ab:ff:10:ed:55:1b:4b:1d:
                    ef:56:8e:d4:03:c8:b3:64:31:ca:ab:03:72:cf:cd:
                    ae:c5:15:d3:c1:82:32:1e:27:15:a4:5d:6b:de:72:
                    36:e4:84:4a:e3:e9:87:3e:af:5e:26:90:f6:18:04:
                    c3:18:a9:04:ed:fc:0d:8c:86:00:2e:22:cc:76:49:
                    25:20:2f:6a:8a:ab:65:8c:09:49:79:40:d4:8b:21:
                    87:07:75:ab:d7:36:82:59:0e:69:51:68:b0:a5:de:
                    64:51:dd:e2:1d:9b:d2:8d:e0:f2:20:2b:62:b3:de:
                    aa:58:77:85:d8:59:b4:28:a7:24:9a:58:84:e7:ae:
                    7c:e3:c9:7c:5b:12:97:86:c1:dd:99:41:15:56:ff:
                    54:98:fd:7a:b4:b2:0a:1e:31:6d:f4:08:60:d1:c7:
                    77:2f:6f:8d:ae:1d:2a:a0:ac:2c:2c:07:04:a5:13:
                    56:df:21:2d:56:5d:72:3e:4b:91:b2:a2:a8:af:c5:
                    b7:83:b8:eb:83:05:c4:7d:0b:08:fc:84:61:09:a4:
                    ba:b5:3f:74:ec:d0:29:ab:2c:81:49:c6:d3:1a:f7:
                    3c:ec:91:ab:26:6b:f7:e4:8a:3b:a5:c0:2f:c9:76:
                    1a:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1D:70:7A:A8:49:F0:9D:A3:0A:70:A0:43:4B:7E:3F:63:EA:05:9A:78
            X509v3 Authority Key Identifier:
                keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/7494BE70EEAF11EB9FF10D4FC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.170.40.0/24

    Signature Algorithm: sha256WithRSAEncryption
         59:79:22:23:12:6d:72:95:01:0a:93:c2:54:a1:d0:99:93:d1:
         14:cf:55:c5:b0:c0:71:9e:11:64:f9:ca:84:f4:e0:94:45:52:
         7b:58:f8:7d:54:36:66:29:6c:3f:d2:e4:a4:13:de:09:23:13:
         ff:2c:a1:74:27:d0:b9:f4:d2:c5:7e:1c:80:ab:0b:93:1b:d7:
         d8:cf:e4:b9:59:10:16:97:83:9b:c7:10:b0:d6:14:e5:15:36:
         b3:f7:0f:63:bf:90:51:dd:7a:65:00:0d:fd:3d:f0:a7:65:6a:
         11:1e:f7:47:c3:bf:27:eb:59:ee:6c:d3:95:1f:eb:f8:8e:6e:
         b0:0a:7f:18:c1:8c:e9:04:1e:b7:71:22:42:cc:7f:36:11:dc:
         8f:de:c3:58:9a:3f:57:f5:56:a8:13:85:ac:5f:34:fd:62:fb:
         bc:23:84:12:1c:88:c9:f8:f0:b7:25:c9:2e:fe:ef:bd:ba:85:
         e7:ec:de:6a:81:7e:b8:c6:f9:8d:57:6e:b3:4d:74:8c:13:6e:
         6a:f5:fa:52:e7:5e:24:b1:cc:a9:d3:01:9d:62:90:ca:cf:ac:
         24:7d:16:d8:3f:48:05:74:da:0f:10:2c:18:20:f2:8d:5c:e5:
         62:6b:cf:c4:c7:f3:38:7c:fb:5b:4e:a4:2e:bc:59:0b:d9:05:
         69:ec:89:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 27 10:19:37 2024 by rpki-client on console-ams.rpki-client.org