Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A918CDEC/7F9D9842BAB511EB8E7A3726C4F9AE02/7EC2F352BAB711EB8648EE28C4F9AE02.roa
File:                     7EC2F352BAB711EB8648EE28C4F9AE02.roa (raw, json)
Hash identifier:          OAimnt8ZZgQlJ7vQdOdcaTxcOwaW1n4H+FyHEmWqyl0=
Subject key identifier:   CF:62:9B:2F:3B:EB:4D:4D:BD:26:2B:1D:4C:7E:56:D3:3E:01:2B:54
Certificate issuer:       /CN=A918CDEC/serialNumber=EB56994352EB01E40E60C78A43B957AE290EF745
Certificate serial:       0466
Authority key identifier: EB:56:99:43:52:EB:01:E4:0E:60:C7:8A:43:B9:57:AE:29:0E:F7:45
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/61aZQ1LrAeQOYMeKQ7lXrikO90U.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918CDEC/7F9D9842BAB511EB8E7A3726C4F9AE02/7EC2F352BAB711EB8648EE28C4F9AE02.roa
Signing time:             Fri 09 Jun 2023 02:39:17 +0000
ROA not before:           Fri 09 Jun 2023 02:39:17 +0000
ROA not after:            Sat 31 Aug 2024 00:00:00 +0000
asID:                     140627
IP address blocks:        103.151.64.0/23 maxlen: 24
                          2406:1540::/32 maxlen: 32

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918CDEC/7F9D9842BAB511EB8E7A3726C4F9AE02/61aZQ1LrAeQOYMeKQ7lXrikO90U.crl
                          rsync://rpki.apnic.net/member_repository/A918CDEC/7F9D9842BAB511EB8E7A3726C4F9AE02/61aZQ1LrAeQOYMeKQ7lXrikO90U.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/61aZQ1LrAeQOYMeKQ7lXrikO90U.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 14 May 2024 01:06:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1126 (0x466)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918CDEC/serialNumber=EB56994352EB01E40E60C78A43B957AE290EF745
        Validity
            Not Before: Jun  9 02:39:17 2023 GMT
            Not After : Aug 31 00:00:00 2024 GMT
        Subject: CN=648290d5-5094
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:2b:c8:95:78:2c:e6:b9:27:86:8c:33:43:4a:
                    49:03:66:c9:98:ce:75:15:a0:09:15:ef:62:32:5b:
                    e9:c1:92:2b:63:8c:f1:6d:40:59:2a:d0:4b:c8:fe:
                    be:bd:b5:df:09:fe:6c:00:03:0e:e9:c5:c1:c6:71:
                    eb:ce:e2:49:dd:83:a5:d0:06:44:0f:eb:34:41:2c:
                    bd:a1:ab:0e:94:73:f3:3a:f9:3b:f3:91:b0:18:d0:
                    80:65:31:81:64:55:2f:37:51:9e:5d:4b:2d:3b:e5:
                    5f:8f:17:a8:fc:1e:42:fe:6d:7d:12:b6:40:3f:ab:
                    47:54:a8:cc:92:dc:d1:59:ac:0c:d8:21:7b:72:29:
                    82:79:98:6d:ea:30:db:f6:62:cc:18:94:fd:de:85:
                    e1:93:20:11:7a:76:c6:1e:b5:9f:89:29:4b:45:99:
                    f1:b1:b0:70:60:a6:8a:fb:97:0b:eb:f6:ff:8d:32:
                    eb:af:66:e2:3e:36:ce:97:ff:d5:9c:7f:9d:27:26:
                    65:2a:09:17:a2:d6:0a:8a:78:fe:65:98:ea:b1:4d:
                    bc:19:d3:96:a8:b0:42:ba:c0:91:2c:9b:f2:be:27:
                    6c:58:9f:07:fe:da:1b:ca:f4:52:84:69:a8:64:02:
                    1f:91:9a:c2:85:bb:a1:d1:a6:db:00:5a:c9:02:0f:
                    ad:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CF:62:9B:2F:3B:EB:4D:4D:BD:26:2B:1D:4C:7E:56:D3:3E:01:2B:54
            X509v3 Authority Key Identifier:
                keyid:EB:56:99:43:52:EB:01:E4:0E:60:C7:8A:43:B9:57:AE:29:0E:F7:45

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918CDEC/7F9D9842BAB511EB8E7A3726C4F9AE02/61aZQ1LrAeQOYMeKQ7lXrikO90U.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/61aZQ1LrAeQOYMeKQ7lXrikO90U.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918CDEC/7F9D9842BAB511EB8E7A3726C4F9AE02/7EC2F352BAB711EB8648EE28C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.151.64.0/23
                IPv6:
                  2406:1540::/32

    Signature Algorithm: sha256WithRSAEncryption
         4a:a3:b9:05:aa:52:27:5d:7c:b2:c4:13:ea:70:74:8a:a1:41:
         79:44:11:fd:36:86:03:43:aa:85:b0:e4:f2:eb:8b:ed:31:00:
         d1:12:0d:03:e4:ed:54:72:b5:00:12:50:21:c0:a2:51:36:bf:
         2e:78:4d:1f:71:c8:af:79:e3:e5:fc:67:6c:16:ad:c0:de:e8:
         ec:a4:51:bb:11:bd:6b:6e:81:eb:3c:e3:e4:96:7e:71:30:3a:
         31:f0:e6:a8:39:2d:6d:34:c7:c0:6a:14:bc:91:f8:06:f6:8e:
         3c:6f:12:3e:64:1d:c8:34:40:c1:ed:06:d9:26:b8:61:37:65:
         d0:0f:80:49:3e:9d:60:71:53:6f:17:38:56:3a:4b:cb:92:0b:
         57:b1:08:28:73:9e:b9:7e:4c:c0:ff:2f:b0:cb:48:77:2a:a8:
         dd:30:50:d1:cc:b4:39:1c:50:0c:f0:38:8f:dc:8f:fd:67:07:
         f2:10:c7:a5:d1:d6:e4:ff:c0:f7:f8:91:0f:43:98:a4:bd:11:
         55:40:14:93:fb:12:97:7b:17:3c:6a:8b:45:3a:be:e7:32:68:
         fe:ed:1d:c2:37:ec:a8:fb:c6:7d:a7:3b:e3:6e:0e:f3:d0:ba:
         0d:db:fb:08:b6:2e:52:d5:1a:24:d9:9b:73:bb:dc:12:ca:1f:
         65:1f:e4:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 7 02:01:01 2024 by rpki-client on console-ams.rpki-client.org