Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/46B36E32000411ECBC94043FC4F9AE02.roa
File:                     46B36E32000411ECBC94043FC4F9AE02.roa (raw, json)
Hash identifier:          cA/JGFqz8DkFXFZpP8hCM54D+2U85wwjZjaBTn7nacg=
Subject key identifier:   E5:CA:C4:56:3F:40:91:4D:42:D0:54:75:51:BD:ED:BA:C7:F4:FF:8B
Certificate issuer:       /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Certificate serial:       8E04
Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/46B36E32000411ECBC94043FC4F9AE02.roa
Signing time:             Thu 30 May 2024 16:17:57 +0000
ROA not before:           Thu 30 May 2024 16:17:57 +0000
ROA not after:            Tue 01 Jul 2025 00:00:00 +0000
asID:                     142473
IP address blocks:        103.170.110.0/23 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
                          rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 29 Nov 2024 06:14:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 36356 (0x8e04)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
        Validity
            Not Before: May 30 16:17:57 2024 GMT
            Not After : Jul  1 00:00:00 2025 GMT
        Subject: CN=6658a6b5-f4bd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:ce:85:86:4c:f0:fa:cb:63:25:71:78:67:b3:
                    45:75:32:c0:3b:58:83:c8:81:74:b0:1d:d2:84:d4:
                    f8:60:a3:2f:5d:69:d2:12:ce:62:c3:bf:5f:78:4a:
                    54:d3:f1:00:c8:b6:19:38:02:43:0d:d5:47:ad:a9:
                    66:81:03:77:49:4d:5e:48:a5:a6:c4:b7:64:ee:75:
                    a1:7d:94:c2:86:69:15:e0:7b:31:13:ae:6b:17:b0:
                    32:fc:4b:f0:2c:cd:74:ba:4f:bb:ca:49:62:19:2e:
                    ce:21:55:76:0b:69:fd:eb:d3:b0:49:38:6c:77:b3:
                    cc:c9:4f:c7:d1:c7:f6:15:d1:68:27:5c:68:a2:25:
                    d0:07:b1:09:26:4b:4d:4b:b2:a7:e0:a1:33:0d:46:
                    af:44:b9:ab:26:fb:5a:8e:aa:4b:df:1c:27:ef:6d:
                    32:70:0f:ed:71:0a:ba:32:26:0f:ac:39:35:ae:c3:
                    7a:2b:50:3a:cb:c0:fa:67:db:5d:1c:30:1c:97:83:
                    53:e9:37:81:c4:72:30:2b:47:19:29:7b:2f:e7:79:
                    f0:27:f9:55:17:a8:69:98:a7:f8:db:a4:cb:54:6b:
                    23:58:27:8f:d3:85:da:1e:fe:bd:d0:0f:2e:8f:a4:
                    5a:2a:ae:58:8f:88:fa:e5:05:14:ad:a4:25:7a:c6:
                    d0:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E5:CA:C4:56:3F:40:91:4D:42:D0:54:75:51:BD:ED:BA:C7:F4:FF:8B
            X509v3 Authority Key Identifier:
                keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/46B36E32000411ECBC94043FC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.170.110.0/23

    Signature Algorithm: sha256WithRSAEncryption
         43:99:ed:25:d2:0c:c2:11:35:04:47:7b:1d:a2:ed:62:94:10:
         6b:5b:08:f6:15:76:4d:95:22:7d:34:c9:e6:ce:d9:78:f9:1a:
         6e:1b:a1:b2:f6:03:65:16:80:73:c9:bc:9f:0a:79:fb:72:f2:
         39:7b:1e:e7:50:82:ef:92:75:ab:4e:e7:7d:89:99:50:49:0b:
         13:9d:66:71:f6:28:1a:be:f4:3f:e9:64:17:30:3c:25:89:0c:
         14:86:fe:d0:32:49:41:a8:aa:e4:52:9c:75:e5:ac:82:cd:e6:
         b6:45:4c:5b:cf:e3:8f:a8:77:36:e0:a2:82:c2:50:e6:03:a5:
         65:b0:70:e8:1d:58:5e:91:cd:4e:de:f9:3a:ef:3b:b7:df:4f:
         38:54:02:93:f4:c4:db:7a:8f:5f:66:74:35:8f:89:f5:83:b4:
         99:a6:c2:91:73:8d:0e:82:40:c5:c1:06:f1:06:28:b9:3c:61:
         a9:a0:ae:35:33:cf:07:05:35:59:ce:01:3d:47:ba:83:1a:1c:
         50:81:29:8c:c6:4b:ba:25:e8:63:30:0e:c5:33:3f:e2:c8:77:
         05:cb:ad:3e:29:f9:8a:bd:89:6d:7c:c8:c2:fe:54:10:a1:04:
         1d:83:c8:01:db:4e:63:92:e6:86:26:1c:b2:87:77:3e:0f:a0:
         46:c3:90:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 11:17:36 2024 by rpki-client on console-fra.rpki-client.org