Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/EF49A91049C711EB917F581DC4F9AE02.roa
File:                     EF49A91049C711EB917F581DC4F9AE02.roa (raw, json)
Hash identifier:          IZTE41fZRJQD/qSHNDBqie07TcRO0jDnBTcIJXXebpc=
Subject key identifier:   5B:01:DD:DB:0F:D7:FF:B4:9E:E8:56:37:75:A2:6C:63:27:21:0B:34
Certificate issuer:       /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Certificate serial:       6B8B
Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/EF49A91049C711EB917F581DC4F9AE02.roa
Signing time:             Wed 10 May 2023 16:20:12 +0000
ROA not before:           Wed 10 May 2023 16:20:12 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     135182
IP address blocks:        103.160.206.0/23 maxlen: 24
                          103.217.78.0/23 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
                          rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 03 May 2024 15:38:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 27531 (0x6b8b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
        Validity
            Not Before: May 10 16:20:12 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=645bc43c-8400
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:ac:fc:de:76:03:d3:fb:82:76:10:4d:41:b4:
                    a6:93:33:d9:54:5c:f1:b5:29:6c:f9:ad:85:a6:b8:
                    8f:d4:70:55:4a:6b:50:1d:b4:0b:12:ef:e2:7d:40:
                    52:b4:bc:51:2d:9b:bf:54:a9:f2:3b:28:82:1c:49:
                    f5:a4:7d:de:0d:ac:84:db:35:9c:88:a1:d8:07:3b:
                    7c:00:b2:29:78:1c:b2:e9:bc:66:10:ea:6d:ea:85:
                    c4:66:aa:7f:62:27:fe:91:9f:c6:66:b1:5d:61:89:
                    3c:74:92:43:ab:4a:ed:99:8b:9d:b7:3a:b4:54:20:
                    6c:7e:62:d1:c9:d0:98:1a:c7:16:3a:02:91:aa:17:
                    b9:03:c8:ac:15:23:a0:84:57:2e:3d:bc:1f:6f:4c:
                    14:93:aa:c8:f1:ed:8c:09:10:e7:1e:30:bc:13:07:
                    43:a0:bc:4c:29:a7:4c:6c:78:6e:10:a8:7c:7c:03:
                    13:63:df:44:8d:8a:fe:fb:cb:19:d8:c7:33:d9:12:
                    c8:d5:fa:28:00:ac:19:47:e9:7e:46:1e:8a:ee:ef:
                    9d:11:ff:6e:89:9a:8a:16:8a:97:5e:23:72:a0:19:
                    af:5d:15:cd:a3:bb:99:43:2e:0b:3c:8d:4a:07:1e:
                    d5:77:f7:eb:f1:ed:82:44:52:10:35:ff:4c:9d:c6:
                    c2:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5B:01:DD:DB:0F:D7:FF:B4:9E:E8:56:37:75:A2:6C:63:27:21:0B:34
            X509v3 Authority Key Identifier:
                keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/EF49A91049C711EB917F581DC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.160.206.0/23
                  103.217.78.0/23

    Signature Algorithm: sha256WithRSAEncryption
         62:d4:f7:29:3e:e4:4e:f1:c6:e9:79:21:4a:bf:f1:db:1a:52:
         1f:c9:ad:af:68:d1:d1:77:f7:27:3a:91:04:b7:00:90:ab:89:
         72:45:e4:7a:64:b1:61:aa:e3:02:f4:25:e7:fc:75:73:72:ca:
         5e:fd:6c:36:8b:bc:31:2a:33:6d:ae:45:28:44:2b:9b:4a:ab:
         3d:0c:fa:87:db:0e:bc:2a:37:17:9f:45:df:9f:7e:f2:5d:3d:
         10:c3:a4:62:fb:66:05:94:91:dd:28:fb:b1:52:ce:60:c2:bf:
         9c:eb:de:eb:93:69:7a:22:fc:0e:87:b6:5a:17:69:cb:b9:42:
         da:75:c3:1e:df:33:5e:2e:7e:47:9e:84:6c:eb:87:69:d2:49:
         0e:f6:ea:e8:66:73:ac:7f:68:15:10:f5:e9:ec:be:fe:cf:8c:
         34:a6:fe:bd:73:2d:6a:98:7c:e1:b4:1f:31:d5:0d:02:58:97:
         09:24:83:2b:0c:ab:a5:c3:53:bf:59:1e:a3:80:f1:0d:b0:90:
         74:f2:4b:90:96:5b:3f:dc:ef:8b:9a:10:dd:89:5c:73:5f:5c:
         55:96:01:da:a6:a6:e5:52:97:f7:d0:4d:f1:75:6d:a4:12:28:
         3d:20:ec:a4:f7:8b:c5:05:3e:be:82:ce:8b:73:c0:73:c5:0a:
         9a:9e:2a:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 27 10:19:49 2024 by rpki-client on console-ams.rpki-client.org