Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/A604490A8A8811ED9DF2425AC4F9AE02.roa
File:                     A604490A8A8811ED9DF2425AC4F9AE02.roa (raw, json)
Hash identifier:          zvP1qqzDX6tQewQ57VqpofLKFt6wY8ES9mNTKTSiwwk=
Subject key identifier:   20:E0:72:12:4C:1B:CF:9E:C9:0E:15:47:0D:A4:D6:55:20:EC:12:0D
Certificate issuer:       /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Certificate serial:       7033
Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/A604490A8A8811ED9DF2425AC4F9AE02.roa
Signing time:             Wed 10 May 2023 16:42:27 +0000
ROA not before:           Wed 10 May 2023 16:42:27 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     149219
IP address blocks:        103.179.164.0/23 maxlen: 24
                          2001:df0:5040::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
                          rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 03 May 2024 15:38:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 28723 (0x7033)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
        Validity
            Not Before: May 10 16:42:27 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=645bc973-d5af
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:bd:15:f1:45:88:8c:36:6d:41:01:02:c2:a1:
                    c6:54:6b:93:f7:5a:1d:f3:ef:38:57:1b:90:e7:7f:
                    dc:79:7f:84:45:eb:67:c3:da:f1:f0:49:46:fa:1e:
                    56:bd:e6:f0:38:d4:49:a8:67:c8:ab:e0:a5:64:19:
                    53:07:47:49:11:75:f3:e1:73:fe:e4:0a:c7:54:a7:
                    92:7e:dd:a9:6b:cc:df:1d:cf:18:a5:a3:a0:f9:46:
                    2c:e4:3c:69:81:5b:55:41:1a:07:90:82:dc:f0:75:
                    09:6d:30:e4:c4:5e:be:2c:b0:4f:b3:f7:77:9a:97:
                    47:29:a8:96:a3:af:28:98:3e:63:64:60:86:20:db:
                    08:1c:04:e9:60:93:4b:f2:d8:05:ac:5c:03:b9:da:
                    dd:0e:39:82:5f:38:e9:b9:c6:18:c9:b4:ad:c0:27:
                    f4:0f:62:98:c8:ad:0c:9e:0d:69:c8:b9:79:aa:48:
                    c0:41:2a:d9:0b:df:98:15:47:80:46:81:21:cc:35:
                    92:d9:10:6d:be:a2:fa:df:d7:41:41:7d:d7:da:3e:
                    d1:c8:10:03:57:3c:21:f4:8b:16:5c:65:c3:9b:c0:
                    81:23:1d:f1:7c:88:a9:bd:93:43:94:34:5b:f4:f6:
                    25:71:ae:38:60:f1:dc:47:36:49:b0:b4:d8:77:fe:
                    dc:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                20:E0:72:12:4C:1B:CF:9E:C9:0E:15:47:0D:A4:D6:55:20:EC:12:0D
            X509v3 Authority Key Identifier:
                keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/A604490A8A8811ED9DF2425AC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.179.164.0/23
                IPv6:
                  2001:df0:5040::/48

    Signature Algorithm: sha256WithRSAEncryption
         71:68:72:65:94:3a:78:d9:a3:e6:56:f9:54:ce:3c:e2:b5:93:
         e9:56:8a:d2:22:12:92:d6:56:62:8d:6f:4b:69:9d:30:08:df:
         3a:a3:df:b4:4e:62:63:31:df:cc:d6:78:6f:21:1a:ba:1a:70:
         86:cd:39:1c:37:d3:11:f2:ea:c5:14:4f:89:bc:e8:51:84:d1:
         b5:68:d5:a9:cb:10:2b:da:ad:c1:f5:3a:20:db:9e:bb:78:a9:
         53:d6:b6:b7:c5:99:f6:f8:33:8b:67:8e:a2:70:5a:b6:b6:47:
         61:0d:21:b7:d1:01:1f:9f:65:03:4d:e0:95:60:eb:41:96:07:
         4e:86:02:5e:76:08:e4:de:6e:65:30:04:87:09:da:cd:e5:4c:
         5e:50:28:5a:f7:00:0f:f8:eb:10:11:62:91:69:3e:c3:52:1d:
         aa:00:6c:f5:27:ae:c6:57:67:e4:00:92:c6:f9:53:72:09:09:
         ed:b0:44:9f:6f:51:ce:89:6f:86:26:21:47:d9:d0:d5:a2:d2:
         6f:dc:fa:5c:d8:96:78:22:df:d6:ba:37:40:43:03:d2:67:02:
         6f:7f:a2:18:9c:3f:db:af:03:4f:8b:32:e5:a4:bb:61:fa:71:
         6d:0c:0a:44:10:b1:16:d4:d1:83:4a:c7:1f:05:e6:83:2d:ff:
         63:fc:fc:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 27 10:19:41 2024 by rpki-client on console-ams.rpki-client.org