Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/8D90F810074C11ED99CF6642C4F9AE02.roa
File:                     8D90F810074C11ED99CF6642C4F9AE02.roa (raw, json)
Hash identifier:          s/Jpqg1qz7hbK0O8TZLGK5rpiZagSttZ183w1oWJfqI=
Subject key identifier:   61:89:91:F2:88:27:BD:8D:8F:8B:B0:1D:96:33:20:FD:F1:44:FB:D8
Certificate issuer:       /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Certificate serial:       6BE2
Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/8D90F810074C11ED99CF6642C4F9AE02.roa
Signing time:             Wed 10 May 2023 16:21:52 +0000
ROA not before:           Wed 10 May 2023 16:21:52 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     135729
IP address blocks:        103.60.186.0/24 maxlen: 24
                          103.60.187.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
                          rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 03 May 2024 15:38:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 27618 (0x6be2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
        Validity
            Not Before: May 10 16:21:52 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=645bc49f-e178
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:ac:ad:c0:ed:f3:b7:c1:19:ce:e8:bc:92:31:
                    61:a2:57:f9:86:89:f4:64:aa:98:88:ea:02:fe:97:
                    cc:d6:f1:46:4d:ad:c5:c3:5d:9d:6d:32:dc:3a:dc:
                    68:1d:f3:16:b6:fe:7b:cd:1c:2c:37:8a:f2:2b:7a:
                    64:58:88:2f:12:60:6a:f5:b5:d9:1a:93:22:d7:2a:
                    14:15:b4:76:43:ab:5c:41:47:b6:bf:c7:66:81:4b:
                    22:d7:09:aa:67:11:bd:ee:8f:e3:12:7d:3a:29:aa:
                    d7:97:ea:63:73:a8:f8:a7:da:63:41:27:c3:95:de:
                    d8:86:6f:6b:a0:0f:08:87:d2:78:4a:65:5f:77:2e:
                    bb:37:fa:cd:c6:2c:af:d9:39:f2:c0:a8:e1:00:b9:
                    72:23:6e:28:87:ce:4f:02:65:cd:98:f0:99:f8:ec:
                    47:4b:19:61:79:b3:d3:8a:7b:97:ac:57:c6:14:cd:
                    80:1b:0a:d8:ce:25:49:b2:75:05:8c:97:4f:9d:8a:
                    2f:dd:26:37:62:42:fd:d9:7b:76:8b:a0:85:39:42:
                    da:11:84:db:ad:64:e6:51:b8:a0:b7:0e:b8:0a:8f:
                    7e:fd:e0:6d:6d:e2:62:4b:19:70:06:74:ca:be:20:
                    77:8f:7f:36:21:ff:ee:05:d5:c1:58:c3:a4:df:39:
                    b6:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                61:89:91:F2:88:27:BD:8D:8F:8B:B0:1D:96:33:20:FD:F1:44:FB:D8
            X509v3 Authority Key Identifier:
                keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/8D90F810074C11ED99CF6642C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.60.186.0/23

    Signature Algorithm: sha256WithRSAEncryption
         53:db:d2:0f:58:6e:69:f3:84:7f:c5:06:74:cf:61:b0:91:27:
         0f:06:ac:2f:e4:a0:7e:a7:6e:78:ef:1a:b0:a6:17:18:4a:0e:
         2c:13:28:31:df:31:46:57:d7:a7:1c:01:93:75:d1:22:32:2d:
         18:fe:51:48:e9:e1:22:85:45:f7:c2:b4:f9:2e:bf:8c:65:95:
         98:78:bb:cc:37:2e:6f:86:d2:bf:26:1e:48:51:23:6b:cd:ac:
         47:19:b5:1b:51:7b:4c:e6:31:58:ab:10:8c:31:88:cb:e1:1d:
         0c:0b:fc:05:63:1e:44:db:1d:40:4d:8e:f7:70:ad:5b:bf:7a:
         64:b1:74:37:b8:01:5d:b4:b8:55:42:67:ba:80:ed:6e:2a:af:
         6a:d1:9b:47:fc:c1:01:03:47:08:60:47:ef:e8:de:a5:ec:3d:
         e0:70:53:d8:4b:d6:11:bc:a0:ea:40:87:1c:f5:47:73:d5:bb:
         07:d2:4f:2f:f0:d3:f5:15:67:7e:f1:af:6c:62:5d:f6:62:41:
         93:cf:d2:7d:72:d6:4e:fe:5a:68:15:99:5f:0f:6f:33:c8:71:
         7c:67:c7:67:d4:93:e7:a5:20:3a:df:0d:2a:db:de:d8:61:f7:
         61:6c:b1:bf:13:5b:70:48:56:4a:e8:8c:a4:07:d3:b2:db:8e:
         05:fb:d1:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 27 10:19:39 2024 by rpki-client on console-ams.rpki-client.org