Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/F3E57888177B11EB93538337C4F9AE02.roa
File:                     F3E57888177B11EB93538337C4F9AE02.roa (raw, json)
Hash identifier:          jj9HYXmkpuYSEKhoWLnnhp6n2esCtVR7VPJsh6M65rE=
Subject key identifier:   D3:1F:07:35:EA:24:EA:98:62:78:12:72:F8:A3:E6:B6:58:33:40:11
Certificate issuer:       /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Certificate serial:       8D40
Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/F3E57888177B11EB93538337C4F9AE02.roa
Signing time:             Thu 30 May 2024 16:14:50 +0000
ROA not before:           Thu 30 May 2024 16:14:50 +0000
ROA not after:            Tue 01 Jul 2025 00:00:00 +0000
asID:                     141325
IP address blocks:        103.157.176.0/23 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
                          rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 29 Nov 2024 06:14:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 36160 (0x8d40)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
        Validity
            Not Before: May 30 16:14:50 2024 GMT
            Not After : Jul  1 00:00:00 2025 GMT
        Subject: CN=6658a5fa-7ec2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:8a:28:f8:91:fd:64:1e:ed:ad:5f:73:7b:83:
                    0b:0a:b1:37:f8:dc:ef:b1:a1:9e:05:41:24:ba:10:
                    31:e8:32:00:a1:bc:bb:6d:88:0d:78:0c:3c:d0:04:
                    7d:a4:bc:91:2d:f0:a8:76:0e:42:af:d6:7e:19:85:
                    ac:33:f5:0f:c2:3b:90:5f:ce:ea:0e:31:8a:ba:61:
                    b6:4c:06:41:b9:cd:14:9f:44:be:1e:eb:e2:db:b0:
                    c3:ce:b9:0b:d9:96:50:34:cb:a1:b9:15:55:90:b6:
                    b3:92:b0:1c:be:08:b7:f7:3c:b3:8a:cc:15:b4:2b:
                    ea:1e:29:4a:cb:9a:ee:3b:d8:a6:f4:e3:e4:18:bd:
                    60:90:f7:d1:c1:2d:e5:63:1d:c9:0e:7d:2b:db:d0:
                    89:bf:b4:2a:b8:70:aa:54:fa:11:c5:34:a9:af:20:
                    36:c1:64:e0:79:34:03:f6:70:43:8c:2f:92:b7:33:
                    45:67:e1:39:f1:35:dc:43:75:43:7f:56:07:22:99:
                    b6:8f:5d:18:c1:78:ee:cc:4c:b2:d9:6d:40:ac:37:
                    07:d2:14:94:02:ac:3c:41:35:9a:cc:3f:58:44:3a:
                    5c:02:aa:3f:21:47:5f:52:6d:4a:4c:0b:8a:dc:23:
                    6b:49:af:fd:33:08:e5:27:ec:91:3b:c3:1c:1d:ce:
                    09:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D3:1F:07:35:EA:24:EA:98:62:78:12:72:F8:A3:E6:B6:58:33:40:11
            X509v3 Authority Key Identifier:
                keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/F3E57888177B11EB93538337C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.157.176.0/23

    Signature Algorithm: sha256WithRSAEncryption
         1c:70:b9:1a:f0:b5:9d:e6:c8:25:c5:67:6c:78:7f:8f:8d:4c:
         46:ab:d2:61:ac:d7:b5:f2:eb:0c:04:6e:49:e7:a8:6e:9e:c9:
         6f:0d:e5:2f:33:85:0e:a9:5f:6a:a9:eb:63:5c:99:26:a0:a5:
         6c:8a:1b:87:dc:91:72:48:93:e9:31:3d:65:47:f1:64:90:79:
         86:ed:be:9e:c0:cd:9d:52:bb:b1:37:11:40:ce:af:60:2d:19:
         77:a2:a6:60:14:4e:0d:8a:2d:6e:df:74:d3:09:53:ef:4a:de:
         bc:30:af:0d:e6:78:08:55:08:80:9d:00:7c:98:d2:4c:95:0e:
         08:fd:49:6c:07:80:a3:e3:74:e5:1b:b4:0c:0b:44:bc:8e:0c:
         bf:5d:70:1c:ee:22:ec:f9:d2:68:96:fc:88:60:91:5d:0b:99:
         ab:15:f7:dc:c0:3b:cc:91:84:15:6f:d0:51:94:ad:ce:03:68:
         e2:6c:41:fa:91:f5:3a:07:62:58:f3:17:f9:2e:dd:14:ad:f0:
         86:4b:65:49:97:97:ff:0c:dd:e8:51:44:dc:77:46:9b:96:0a:
         9d:bd:32:40:4b:72:51:ed:6a:4c:6f:46:11:c6:28:24:6d:f3:
         bb:ff:f7:02:e9:87:ab:ff:43:77:ba:25:5d:32:cd:69:5d:a8:
         85:dd:5e:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 11:48:06 2024 by rpki-client on console-ams.rpki-client.org