Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/BAD74ACAF19811EAA6DC5569C4F9AE02.roa
File:                     BAD74ACAF19811EAA6DC5569C4F9AE02.roa (raw, json)
Hash identifier:          yHB0QwN6FwSA5WxwT/A6UH6m0WK0yYgAZNbR+8ScZ1o=
Subject key identifier:   1E:17:CC:3E:9E:28:6C:8D:04:D8:EF:C0:8E:B0:3C:D9:5C:A1:4B:86
Certificate issuer:       /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Certificate serial:       6D54
Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/BAD74ACAF19811EAA6DC5569C4F9AE02.roa
Signing time:             Wed 10 May 2023 16:28:47 +0000
ROA not before:           Wed 10 May 2023 16:28:47 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     138230
IP address blocks:        103.155.74.0/23 maxlen: 24
                          2001:df1:28c0::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
                          rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 03 May 2024 15:38:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 27988 (0x6d54)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
        Validity
            Not Before: May 10 16:28:47 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=645bc63f-1267
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:12:bc:a3:f9:c7:21:e3:e3:ec:33:4a:32:88:
                    fc:86:94:bc:c6:c7:f3:63:5b:73:8c:d4:ed:80:fc:
                    e1:2a:6a:99:9c:93:43:ad:eb:aa:5d:76:0d:34:04:
                    c2:6b:81:51:8d:8b:e7:cd:d1:87:11:4a:c5:cc:8c:
                    c4:9b:04:4b:68:e2:32:db:26:a3:f0:ca:64:0b:b9:
                    19:a4:b2:d1:36:a8:3e:b7:d8:22:19:42:2e:f3:b4:
                    87:5b:e3:8a:03:b9:21:09:8f:5b:36:f6:ba:0b:31:
                    5d:fd:cd:a8:07:aa:ec:da:86:2a:5e:02:87:1b:cf:
                    d3:53:11:67:6a:b0:75:05:4b:ed:59:57:71:10:2e:
                    d3:d3:27:4d:bc:a9:df:23:be:1e:7f:4e:73:a7:a2:
                    08:76:62:ba:da:3a:5f:c6:da:44:f6:5f:79:af:59:
                    7c:9d:75:e0:72:41:ed:35:27:15:7a:03:a2:76:42:
                    6d:4c:4e:13:9e:c6:66:2a:42:f9:23:48:6e:0e:4d:
                    b0:39:87:c5:27:4e:aa:73:6c:c7:24:e7:c7:e1:81:
                    1b:f1:2f:a5:bd:50:7a:2e:22:44:bc:25:89:c9:fc:
                    0e:c6:29:7b:84:f4:40:8f:ab:87:00:a8:03:6d:7e:
                    cb:2a:67:ed:11:7e:cb:29:ee:3a:cd:dd:a0:90:d2:
                    f7:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1E:17:CC:3E:9E:28:6C:8D:04:D8:EF:C0:8E:B0:3C:D9:5C:A1:4B:86
            X509v3 Authority Key Identifier:
                keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/BAD74ACAF19811EAA6DC5569C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.155.74.0/23
                IPv6:
                  2001:df1:28c0::/48

    Signature Algorithm: sha256WithRSAEncryption
         a6:17:cf:ff:fb:bf:6f:a5:89:59:18:c9:7e:47:0e:3f:d7:d6:
         45:df:02:9a:64:c4:94:e5:e2:78:6b:2c:b9:54:4a:51:f0:3e:
         3a:74:d9:a1:94:67:78:c5:13:16:97:78:54:40:b4:3b:49:6a:
         8f:6e:ba:87:67:75:59:1d:9a:42:e2:9f:1c:ed:67:3e:c8:9d:
         4e:46:ad:cb:91:8e:1e:f1:15:0e:67:68:01:ba:16:c6:d8:9b:
         56:e4:e2:a1:b2:e1:44:83:b5:b7:7c:46:07:88:96:c5:bd:0e:
         42:7b:40:f0:e0:ad:7d:73:9e:74:79:3c:82:44:4a:39:b6:16:
         9b:c3:32:0a:a6:b5:29:58:f8:ba:3c:85:ec:a2:25:ff:96:70:
         d3:52:02:ae:aa:45:44:2b:65:44:1d:40:81:db:39:ab:3c:d1:
         e3:8b:58:26:bd:2b:20:29:79:10:82:5f:5f:23:d2:21:11:15:
         4c:03:3f:44:1f:dc:50:58:0d:99:77:4a:de:2e:21:ed:5f:0e:
         ff:bc:77:37:5b:a9:ec:34:9a:45:7b:f1:3d:28:eb:13:c3:a6:
         df:53:ca:47:99:2d:a8:68:32:13:ab:e6:ef:32:19:1a:88:f2:
         ea:e8:6a:bd:64:ef:d7:cc:1a:0b:df:6b:36:37:fb:43:2a:b4:
         9a:5b:c5:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 27 10:19:44 2024 by rpki-client on console-ams.rpki-client.org