Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/8B30CAE2A5E411ECA7FBAF1AC4F9AE02.roa
File:                     8B30CAE2A5E411ECA7FBAF1AC4F9AE02.roa (raw, json)
Hash identifier:          mMqwKeWvCppt51jcADmDG1zLLjvYIThU5+eHVzhn1Pk=
Subject key identifier:   F8:FA:2F:B1:A5:7B:29:4C:57:78:1A:1E:50:43:20:01:F9:5C:43:C8
Certificate issuer:       /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Certificate serial:       7761
Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/8B30CAE2A5E411ECA7FBAF1AC4F9AE02.roa
Signing time:             Fri 11 Aug 2023 09:28:49 +0000
ROA not before:           Fri 11 Aug 2023 09:28:49 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     146901
IP address blocks:        103.174.32.0/23 maxlen: 24
                          2001:df2:4940::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
                          rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 03 May 2024 15:38:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 30561 (0x7761)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
        Validity
            Not Before: Aug 11 09:28:49 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=64d5ff50-aa92
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:9f:f7:97:a1:0f:83:aa:41:e1:8a:c2:df:8b:
                    15:ae:24:86:5a:af:15:06:eb:57:8f:5a:68:60:f1:
                    51:f3:ec:14:d7:9b:f2:af:04:4d:a7:53:5e:d1:31:
                    e7:ad:85:20:44:e4:a5:a1:7c:c6:79:af:d2:01:6d:
                    a5:87:4e:09:29:aa:24:3e:cb:df:6f:ce:5b:33:15:
                    f8:9e:6e:c3:1a:53:32:8c:cc:9e:84:df:2e:18:d3:
                    c4:5b:ce:29:4e:3e:ab:17:d1:31:f6:98:4c:6c:91:
                    20:ac:df:c0:31:bb:92:46:5b:24:48:9c:da:69:bc:
                    19:08:da:b7:17:4b:00:41:12:8a:bd:11:94:53:58:
                    a1:c2:79:43:67:07:cb:78:5d:de:9e:f0:d4:25:71:
                    19:fd:79:1e:e2:d5:52:43:b0:29:d4:21:65:c3:3c:
                    d3:79:c0:66:ce:1e:98:47:b6:79:aa:88:49:b9:c5:
                    43:91:18:87:d2:78:8d:50:8d:4b:fd:2a:8f:d0:31:
                    b5:9d:10:fe:5e:f3:60:08:ae:ff:ff:90:4c:40:e8:
                    7e:86:f8:27:30:20:c9:12:5a:6f:dd:86:65:0a:9d:
                    5f:b3:00:35:7b:cf:9b:d7:0a:68:75:20:f2:30:2b:
                    a5:35:f3:d5:be:e4:d2:d3:5b:a6:ae:03:71:2e:d6:
                    83:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F8:FA:2F:B1:A5:7B:29:4C:57:78:1A:1E:50:43:20:01:F9:5C:43:C8
            X509v3 Authority Key Identifier:
                keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/8B30CAE2A5E411ECA7FBAF1AC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.174.32.0/23
                IPv6:
                  2001:df2:4940::/48

    Signature Algorithm: sha256WithRSAEncryption
         3e:8d:b2:ce:76:c1:0c:fe:70:df:40:3f:b1:8f:c0:b2:40:62:
         46:ef:eb:2b:b9:1b:c2:4b:47:d8:47:7b:b0:5e:ba:97:4d:27:
         9c:78:71:2a:b7:95:71:3c:bd:89:7d:b0:12:b7:c9:fc:35:52:
         6d:9a:0c:60:42:bb:67:6f:89:9b:01:8f:14:36:20:8d:2c:e1:
         bb:62:df:17:fe:07:65:07:2b:86:92:0a:3d:64:3b:af:16:49:
         41:bf:af:fe:75:ee:c6:9c:a6:1e:26:82:8b:7b:89:bb:f3:a9:
         b5:15:1b:01:29:27:c7:bc:12:75:7d:ba:5f:c2:aa:8e:bd:a5:
         80:d1:f0:2f:5f:72:23:e9:5b:8d:e6:eb:b6:3d:65:f5:de:e1:
         40:da:0c:59:86:f8:84:54:0e:97:60:d5:39:df:b6:a1:51:f7:
         41:ef:46:28:3b:54:c8:20:db:69:aa:b4:5e:4a:ea:b6:5a:03:
         9a:53:ab:dd:dc:16:76:75:37:45:1f:54:2a:a8:a0:e3:ba:84:
         21:7c:e4:3d:fc:5c:bb:24:b0:d6:07:29:c1:56:96:1d:7b:8b:
         cb:d7:78:17:2a:51:6b:f8:cb:ea:c7:5b:f9:ca:bc:08:fc:06:
         55:57:70:29:b9:b8:42:6e:f7:28:d9:a0:87:33:22:c0:2f:2d:
         37:d4:06:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 28 15:51:28 2024 by rpki-client on console-fra.rpki-client.org