Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A918AF08/B0F5376CFAC011E994D92065C4F9AE02/6E2937E456EB11EA9025542FC4F9AE02.roa
File:                     6E2937E456EB11EA9025542FC4F9AE02.roa (raw, json)
Hash identifier:          Z57Sbh4HWIN+PQjDm3HyruQP/XjN2v9fE96VdjP9ZaE=
Subject key identifier:   63:BC:AE:9C:20:EE:28:56:CF:87:14:A1:52:18:98:9D:F6:46:AF:21
Certificate issuer:       /CN=A918AF08/serialNumber=7EE0C6A28B759F72D5DC9A5895038BBAB94A8614
Certificate serial:       0B36
Authority key identifier: 7E:E0:C6:A2:8B:75:9F:72:D5:DC:9A:58:95:03:8B:BA:B9:4A:86:14
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fuDGoot1n3LV3JpYlQOLurlKhhQ.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918AF08/B0F5376CFAC011E994D92065C4F9AE02/6E2937E456EB11EA9025542FC4F9AE02.roa
Signing time:             Wed 26 Jul 2023 18:56:32 +0000
ROA not before:           Wed 26 Jul 2023 18:56:32 +0000
ROA not after:            Mon 30 Sep 2024 00:00:00 +0000
asID:                     38566
IP address blocks:        103.66.128.0/22 maxlen: 23
                          103.66.128.0/23 maxlen: 24
                          103.233.200.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918AF08/B0F5376CFAC011E994D92065C4F9AE02/fuDGoot1n3LV3JpYlQOLurlKhhQ.crl
                          rsync://rpki.apnic.net/member_repository/A918AF08/B0F5376CFAC011E994D92065C4F9AE02/fuDGoot1n3LV3JpYlQOLurlKhhQ.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fuDGoot1n3LV3JpYlQOLurlKhhQ.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 23 May 2024 19:03:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2870 (0xb36)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918AF08/serialNumber=7EE0C6A28B759F72D5DC9A5895038BBAB94A8614
        Validity
            Not Before: Jul 26 18:56:32 2023 GMT
            Not After : Sep 30 00:00:00 2024 GMT
        Subject: CN=64c16c60-a180
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:2a:94:7a:86:61:9f:d8:44:95:af:a8:38:8a:
                    21:c9:0b:16:cf:5b:76:f6:e7:26:7f:8f:06:75:96:
                    00:be:aa:98:f2:1a:4a:96:3a:40:b9:d1:dc:ef:7d:
                    d7:03:4b:a9:b7:44:5c:f9:2c:43:24:bf:ec:c4:02:
                    18:39:66:94:91:56:30:06:b5:31:5d:3f:c5:38:6c:
                    0d:cc:91:1b:0d:a4:cb:2e:b1:db:55:ed:cf:d9:3d:
                    46:c6:79:5d:0e:df:01:2a:87:b6:51:0c:2b:b0:29:
                    d9:53:84:8c:00:85:f1:7f:81:4c:37:7f:2e:8a:05:
                    bf:71:88:30:47:c9:b1:78:50:85:0d:cb:f7:70:b9:
                    6c:50:0c:e2:2b:74:ac:17:51:ca:2d:91:1d:17:83:
                    1f:f7:d8:1b:3b:e1:30:ab:dc:ff:6e:b8:dd:2a:d1:
                    3f:59:3d:4b:a9:00:60:28:09:23:e5:6d:12:14:62:
                    96:7e:7e:59:69:a5:bf:79:fc:72:a9:91:db:37:e9:
                    e5:f2:d0:88:b5:6c:ea:88:ab:d8:a3:f6:ca:84:8a:
                    30:c1:f2:d7:f6:7b:b5:bf:0d:73:13:2d:de:ce:60:
                    19:22:0c:07:24:6b:cd:38:72:9d:1a:ec:11:d2:5b:
                    e9:25:69:22:75:c6:1a:2d:25:eb:86:45:42:43:68:
                    91:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                63:BC:AE:9C:20:EE:28:56:CF:87:14:A1:52:18:98:9D:F6:46:AF:21
            X509v3 Authority Key Identifier:
                keyid:7E:E0:C6:A2:8B:75:9F:72:D5:DC:9A:58:95:03:8B:BA:B9:4A:86:14

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918AF08/B0F5376CFAC011E994D92065C4F9AE02/fuDGoot1n3LV3JpYlQOLurlKhhQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fuDGoot1n3LV3JpYlQOLurlKhhQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918AF08/B0F5376CFAC011E994D92065C4F9AE02/6E2937E456EB11EA9025542FC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.66.128.0/22
                  103.233.200.0/22

    Signature Algorithm: sha256WithRSAEncryption
         46:06:11:80:9e:94:0e:05:6f:e3:9a:96:2e:26:5a:50:89:84:
         5f:b2:1b:6d:7f:c2:cd:1a:55:b5:eb:66:0b:a6:5c:43:99:3e:
         31:31:8d:8f:0a:73:cd:fe:8e:65:f9:a4:f8:88:c0:f1:38:69:
         24:cb:51:ba:91:18:58:3d:ef:8a:b2:2c:8c:50:fa:37:e3:46:
         83:5f:3f:69:34:7c:57:3a:8b:05:e8:cf:e4:af:3a:c9:e2:0d:
         ff:97:d1:d2:ff:54:f0:14:04:7e:a3:44:79:f5:b1:f0:8c:74:
         af:65:3b:c8:a2:f6:15:53:0a:81:24:33:64:fa:e5:2d:cf:4c:
         27:71:14:14:31:ef:be:81:85:18:7a:77:ed:80:80:f6:ee:6d:
         04:e8:f2:de:89:45:ef:7a:61:93:13:00:7f:62:f4:1b:28:8f:
         41:8e:62:1f:a1:0b:0b:08:3f:06:31:2e:7e:63:54:f1:44:0b:
         58:34:e1:a8:04:4e:23:16:1b:5d:6e:54:d8:22:8d:88:80:2d:
         32:3d:79:bf:74:27:ce:87:fb:72:7b:ae:e2:4b:90:a6:3f:07:
         f9:20:9a:25:5c:85:ca:ba:e9:1c:dd:2d:1e:f1:5d:22:1d:af:
         da:8b:96:85:a8:3d:bd:57:c1:38:f5:7f:2c:8d:09:5c:16:6d:
         48:fa:2a:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 16 19:49:59 2024 by rpki-client on console-fra.rpki-client.org