Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/0D5CF6FE10E111EEB6B51328C4F9AE02.roa
File:                     0D5CF6FE10E111EEB6B51328C4F9AE02.roa (raw, json)
Hash identifier:          UPToINdM1t6iBYcKt2AtwVEd8vBXObA2OIdbDngeqJc=
Subject key identifier:   CB:B5:75:2A:68:AF:C6:91:5E:DF:FC:9B:7D:52:98:0E:0C:CD:A2:29
Certificate issuer:       /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Certificate serial:       8A92
Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/0D5CF6FE10E111EEB6B51328C4F9AE02.roa
Signing time:             Thu 30 May 2024 16:03:34 +0000
ROA not before:           Thu 30 May 2024 16:03:34 +0000
ROA not after:            Tue 01 Jul 2025 00:00:00 +0000
asID:                     135792
IP address blocks:        103.81.12.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
                          rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 02 Dec 2024 10:54:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 35474 (0x8a92)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
        Validity
            Not Before: May 30 16:03:34 2024 GMT
            Not After : Jul  1 00:00:00 2025 GMT
        Subject: CN=6658a356-c088
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e7:6a:cf:d1:50:2c:a7:05:76:a5:05:e4:fd:4e:
                    6d:0a:bb:d0:3e:2f:87:cf:9d:7a:c1:eb:45:19:1b:
                    f3:b9:35:c0:4d:e2:58:15:2d:ba:4d:e2:47:ea:bf:
                    b8:8d:8c:69:7f:8c:6f:a5:c6:75:5e:0e:65:21:3d:
                    79:4c:ba:e7:a7:6f:99:85:be:59:5a:1b:ee:e6:e7:
                    9b:18:26:17:a1:b5:9f:3c:f0:ab:8d:78:10:a2:f4:
                    ca:79:f6:36:97:bb:0c:8c:a7:e9:21:85:df:b4:90:
                    9e:f2:b2:30:e4:d1:dc:80:e7:ff:6d:7b:15:ab:15:
                    3d:9c:89:81:40:26:ad:ad:29:4f:3e:d8:f0:dd:70:
                    5f:b1:7b:86:76:5f:76:a1:c0:78:d9:00:c8:2e:fb:
                    b4:db:cf:6d:df:8d:cd:89:83:db:a0:44:53:54:e1:
                    e5:50:69:d5:1c:e1:3b:a9:b6:24:84:e2:f4:3d:57:
                    f1:b8:23:24:d8:f0:c6:16:3e:e3:dd:4b:75:b7:88:
                    a7:ec:47:3b:ef:33:31:b9:57:d7:c8:62:44:7e:f4:
                    01:3b:ad:06:f3:78:0f:d7:51:cf:fc:9e:cd:f9:09:
                    82:89:7e:1d:ff:9f:7b:be:e7:1f:80:07:a2:86:6b:
                    a8:b8:e1:c0:12:f5:65:39:8e:58:05:44:77:f8:ba:
                    f6:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CB:B5:75:2A:68:AF:C6:91:5E:DF:FC:9B:7D:52:98:0E:0C:CD:A2:29
            X509v3 Authority Key Identifier:
                keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/0D5CF6FE10E111EEB6B51328C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.81.12.0/22

    Signature Algorithm: sha256WithRSAEncryption
         b2:70:7d:8a:28:4b:7e:d4:b1:b9:48:29:0d:48:63:e1:60:cb:
         89:46:15:40:75:6e:b2:6b:d2:33:8c:a6:4b:6a:33:99:dd:a3:
         59:60:6a:25:ba:66:b6:48:82:e1:e7:3a:85:d2:15:08:8c:d3:
         f5:8b:97:fd:60:eb:d3:48:be:af:3d:1b:dc:41:4a:57:62:22:
         b0:39:13:ed:a3:9f:46:19:49:9e:26:e1:0a:bd:5f:db:76:88:
         2f:70:79:b9:48:d5:68:20:89:4e:6d:cd:d6:bd:3b:8f:97:73:
         86:18:40:52:fc:69:eb:ad:d6:d3:0b:db:3d:41:34:e1:b7:8f:
         ec:68:ce:bb:84:07:06:37:05:14:18:10:38:f0:fe:bf:c7:5a:
         7a:9e:fc:6b:06:83:6b:d2:ea:9a:b7:c6:71:25:a0:be:9d:25:
         06:cb:4f:0b:a6:93:3b:de:67:14:e8:76:d9:f7:d8:d7:94:72:
         a7:6f:71:5d:82:ac:d2:25:61:f1:4d:ef:e2:e7:c7:26:84:18:
         ad:b1:06:60:3e:7f:4f:67:c4:b1:e1:e5:97:b8:f9:39:70:2e:
         4b:82:52:7c:45:c0:21:7a:fb:43:37:4e:8c:bd:47:95:87:22:
         67:6f:e7:68:d2:38:68:d6:6b:47:fc:8e:a9:60:1a:24:ba:c5:
         9a:61:a7:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 25 13:17:03 2024 by rpki-client on console-ams.rpki-client.org