Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/B7999AFA33C111EB8E31BA36C4F9AE02.roa
File:                     B7999AFA33C111EB8E31BA36C4F9AE02.roa (raw, json)
Hash identifier:          e90HvPaw4dG1e8ykztNiO1yz4uPnlLf+3IcGJ6/c7Ck=
Subject key identifier:   4B:BD:FB:1A:3A:9D:4F:0F:A4:FC:AC:32:AC:CE:1B:BD:38:8B:86:05
Certificate issuer:       /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Certificate serial:       777C
Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/B7999AFA33C111EB8E31BA36C4F9AE02.roa
Signing time:             Wed 16 Aug 2023 04:38:11 +0000
ROA not before:           Wed 16 Aug 2023 04:38:11 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     396982
IP address blocks:        103.56.211.0/24 maxlen: 24
                          103.181.194.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
                          rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 03 May 2024 07:49:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 30588 (0x777c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
        Validity
            Not Before: Aug 16 04:38:11 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=64dc52b3-1e5e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:a8:f2:b8:d9:18:6c:89:b2:e5:6f:ab:28:72:
                    06:50:7d:3a:d0:75:77:04:62:21:63:e8:04:42:85:
                    c6:c6:fe:3b:00:ee:47:2c:2d:0b:ef:94:11:12:2e:
                    20:41:0d:8b:23:8a:82:e2:51:3c:30:a4:b9:74:82:
                    38:38:91:d6:89:c9:06:19:b3:b9:f0:9c:05:11:08:
                    fa:51:6f:d5:ba:2d:77:94:05:54:f4:fd:de:ed:20:
                    b4:c7:5a:3c:d0:f7:cf:ad:84:22:b7:a5:7d:42:6c:
                    7f:3e:d8:5d:a8:94:ce:6e:9b:d5:2a:db:b5:14:39:
                    5b:91:95:a7:ec:c3:00:f1:9c:fa:05:ea:c2:32:74:
                    d9:50:23:ae:59:ce:94:b9:e9:34:ac:89:9e:18:2c:
                    d8:5a:39:26:d4:0a:17:6f:d1:6d:38:6c:66:92:7d:
                    2c:3f:ff:82:5b:61:04:68:2d:8a:1f:11:62:14:b4:
                    91:05:2b:0c:3a:02:6b:44:5d:f3:ea:9b:69:37:a8:
                    80:21:6c:c2:bc:f5:d5:0c:0d:00:0a:0b:a1:2a:44:
                    43:93:72:a1:52:aa:2d:49:f0:eb:f4:35:0f:d9:23:
                    a4:c9:88:e2:cb:97:59:68:20:f2:ff:e9:76:bc:26:
                    97:98:de:f2:8f:65:1b:39:96:32:65:e3:da:5d:d6:
                    a9:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4B:BD:FB:1A:3A:9D:4F:0F:A4:FC:AC:32:AC:CE:1B:BD:38:8B:86:05
            X509v3 Authority Key Identifier:
                keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/B7999AFA33C111EB8E31BA36C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.56.211.0/24
                  103.181.194.0/24

    Signature Algorithm: sha256WithRSAEncryption
         b5:e7:46:eb:3b:db:61:6b:ce:4d:3a:0a:f0:07:1f:bf:4e:c2:
         e4:06:ab:3e:aa:3e:4c:ab:ad:bd:ac:93:fb:ac:0a:aa:18:49:
         79:ed:f8:28:f0:56:23:ab:a6:26:72:92:5f:d3:e0:8f:6a:08:
         59:14:57:55:38:1c:e5:26:29:e0:60:05:18:7f:3e:4e:6f:e9:
         c7:00:7c:b0:b1:cd:d5:d1:da:85:9d:19:3c:90:d7:57:f5:e9:
         97:de:89:b1:d8:76:44:84:e6:85:41:fe:01:a5:68:f1:55:7c:
         52:2f:3f:2a:a7:f1:11:68:00:2d:ea:56:7c:fd:3c:40:f3:b2:
         8c:26:4c:5e:7d:80:e7:6d:f3:ac:a1:dc:7f:9c:9b:bc:73:28:
         5a:69:80:36:03:85:d7:dc:0c:eb:85:01:0f:94:e1:4c:3f:fb:
         e1:35:48:ee:ff:bf:a8:1b:ef:4a:84:81:72:b3:57:95:b4:7a:
         74:0d:44:8b:91:9a:d6:a3:bb:e8:d3:57:12:64:6d:f4:06:c6:
         8e:87:09:1f:4f:94:63:6a:82:05:75:fc:16:3e:5b:72:f2:bf:
         c4:d7:a2:2a:6d:a9:0d:54:02:0c:dc:d5:ce:9c:bd:4c:3a:6b:
         04:c7:77:5a:60:0f:9c:3e:1c:bc:53:a8:60:77:41:e5:ae:88:
         81:25:f9:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 26 13:36:35 2024 by rpki-client on console-ams.rpki-client.org