Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/6C0D29164D7211EFACDB6736C4F9AE02.roa
File:                     6C0D29164D7211EFACDB6736C4F9AE02.roa (raw, json)
Hash identifier:          2JaGM6A7tGt2QYfH9eEL+D4sMr1Rl5t2m4iozcAVAI8=
Subject key identifier:   FD:97:9C:66:44:9C:AB:6F:20:D4:AB:B7:13:D2:06:75:C2:21:02:59
Certificate issuer:       /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Certificate serial:       9562
Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/6C0D29164D7211EFACDB6736C4F9AE02.roa
Signing time:             Mon 29 Jul 2024 06:18:50 +0000
ROA not before:           Mon 29 Jul 2024 06:18:50 +0000
ROA not after:            Tue 01 Jul 2025 00:00:00 +0000
asID:                     136698
IP address blocks:        103.83.8.0/22 maxlen: 24
                          2001:df4:12c0::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
                          rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 29 Nov 2024 06:14:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 38242 (0x9562)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
        Validity
            Not Before: Jul 29 06:18:50 2024 GMT
            Not After : Jul  1 00:00:00 2025 GMT
        Subject: CN=66a7344a-0705
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:1b:0a:97:e0:c2:ac:ab:7c:e6:81:b0:ab:0d:
                    4e:7b:04:a3:67:cc:9b:43:08:5b:a9:22:ac:5d:3a:
                    45:ae:c2:97:15:b3:d0:9c:a3:b1:e2:c3:e2:59:32:
                    c1:20:03:47:d5:09:ef:eb:03:61:0b:f0:93:7a:5f:
                    b5:8d:35:ef:84:c9:78:1e:60:48:75:49:06:9b:d3:
                    24:ff:0d:0f:35:24:bc:a4:cc:fe:92:15:ed:2d:13:
                    d6:b8:6c:0c:28:79:f0:91:58:49:4d:da:84:8b:31:
                    50:5f:4d:17:a6:c9:d2:1c:68:c0:3c:7e:39:b3:27:
                    e0:f3:59:e1:47:4e:84:8a:19:96:96:36:89:7d:d7:
                    f4:cd:bb:ee:6d:1a:6e:4c:1f:8f:7c:b2:b4:c1:8c:
                    48:c2:92:97:92:e1:4c:3e:63:63:ce:3e:d4:d8:a5:
                    a5:75:78:e2:aa:fb:94:97:8f:47:56:79:c4:f5:3d:
                    dd:05:3a:b8:2b:9c:0a:11:e4:91:31:05:ad:f9:9c:
                    ac:fb:f5:16:4c:34:7f:65:c6:1f:63:d6:44:99:9d:
                    b8:1a:f5:b4:4d:71:7d:d5:94:6c:69:c6:99:91:d4:
                    9c:6a:5d:ef:c0:79:f8:c2:af:2d:84:9b:d4:30:d3:
                    37:a5:ad:63:f3:d2:19:91:dd:bf:13:62:4d:63:93:
                    b8:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FD:97:9C:66:44:9C:AB:6F:20:D4:AB:B7:13:D2:06:75:C2:21:02:59
            X509v3 Authority Key Identifier:
                keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/6C0D29164D7211EFACDB6736C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.83.8.0/22
                IPv6:
                  2001:df4:12c0::/48

    Signature Algorithm: sha256WithRSAEncryption
         3b:12:1b:56:3c:98:91:ce:57:7f:74:60:ad:0a:47:54:e8:c2:
         1e:a5:6b:0f:f1:2f:e4:c1:94:84:07:b5:b5:7f:05:b4:4d:ec:
         43:1e:88:94:54:f8:dd:ca:b3:8d:c9:ae:ad:33:6f:12:67:ad:
         f0:7e:54:e0:54:11:7b:50:52:a2:25:c4:46:5a:87:f3:bf:aa:
         44:17:62:a7:f4:00:19:3d:fd:46:ad:1c:34:09:88:da:f2:51:
         85:3e:31:f4:6b:81:e9:fa:02:b1:93:a9:60:8c:ac:2a:f1:9a:
         3e:18:59:2d:d8:0c:cc:7e:ff:0c:35:71:f3:6b:5d:c0:78:f9:
         4f:01:0d:5b:a8:1d:5e:d5:1f:c8:87:e9:9f:b8:ac:ba:57:4a:
         49:c6:58:d8:f2:9f:25:19:0b:e5:7e:e4:5b:f5:79:f5:20:c4:
         35:8b:2a:da:29:57:8a:28:92:96:77:f8:8a:70:f2:1f:c0:55:
         ea:2a:c8:52:46:d9:14:7e:46:17:3c:fd:a6:fb:01:9e:18:2e:
         0f:32:62:e0:69:95:0c:55:5c:67:b4:50:d9:d6:8b:6e:fd:8d:
         85:ff:ae:c4:d4:4f:80:a0:19:26:62:36:33:2b:7d:42:b2:db:
         d1:da:b1:ac:62:5b:4e:f7:3f:1f:16:75:e2:ff:c7:24:54:48:
         42:29:50:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 11:17:42 2024 by rpki-client on console-fra.rpki-client.org