Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/051DAA705B6311EE8BCD3C2AC4F9AE02.roa
File:                     051DAA705B6311EE8BCD3C2AC4F9AE02.roa (raw, json)
Hash identifier:          0eoH3KrY3dEXwEY+N8RUW9Tk0aydf3hah529JxiEE+M=
Subject key identifier:   E5:93:FA:71:B3:84:44:C2:12:F4:61:85:F5:B2:07:6A:66:3E:A8:A4
Certificate issuer:       /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Certificate serial:       7AA6
Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/051DAA705B6311EE8BCD3C2AC4F9AE02.roa
Signing time:             Mon 25 Sep 2023 05:18:54 +0000
ROA not before:           Mon 25 Sep 2023 05:18:54 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     151751
IP address blocks:        103.38.222.0/23 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
                          rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 03 May 2024 15:38:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 31398 (0x7aa6)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
        Validity
            Not Before: Sep 25 05:18:54 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=6511183e-3217
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:12:b5:18:4d:90:d4:bd:2f:0e:e4:d5:eb:7c:
                    19:ca:a9:18:3c:63:13:e1:72:8e:6d:d6:55:5f:77:
                    4d:79:05:de:e6:46:6c:61:3c:85:e6:a9:c8:0a:9d:
                    da:87:c0:b0:63:20:2e:0c:a2:b8:cc:7f:b5:f0:93:
                    0e:82:72:ca:95:9f:18:db:50:e4:18:ed:9a:66:39:
                    5a:d5:79:49:aa:d8:32:82:da:12:47:2a:e6:af:06:
                    eb:09:6c:60:1e:a4:17:10:05:13:2a:38:3a:8d:81:
                    85:94:72:9e:c9:60:e3:3a:3c:11:3c:d3:73:fd:8b:
                    f6:80:12:23:46:47:40:1c:fe:3f:89:06:71:00:4f:
                    9e:2c:72:34:bd:cb:57:40:95:8c:86:44:eb:a0:8d:
                    59:b6:97:ea:78:4b:8e:5e:cb:a8:5a:93:c9:7e:85:
                    ac:d9:7c:0f:88:7e:fe:9a:fa:37:a1:02:ad:9c:1e:
                    14:83:5e:e7:47:9b:ea:42:9d:19:70:de:3c:47:17:
                    b8:55:4d:36:f5:e9:80:40:4a:4e:b2:70:24:91:5e:
                    31:96:2f:24:ed:c7:f0:93:a6:ca:90:2b:d7:43:ef:
                    17:16:0d:3d:f4:b8:b2:96:9a:7c:c9:e2:60:5e:8a:
                    af:2f:96:62:88:c0:a1:6d:8b:b1:6b:81:66:51:7f:
                    7d:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E5:93:FA:71:B3:84:44:C2:12:F4:61:85:F5:B2:07:6A:66:3E:A8:A4
            X509v3 Authority Key Identifier:
                keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/051DAA705B6311EE8BCD3C2AC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.38.222.0/23

    Signature Algorithm: sha256WithRSAEncryption
         6a:c8:8d:04:6e:83:e4:1e:35:c4:93:40:4e:95:62:d2:ce:66:
         5a:f0:b2:10:52:5f:27:be:aa:04:08:73:bd:6a:fd:68:ef:63:
         6c:d6:99:87:dc:af:bf:38:7c:89:d6:07:35:41:cb:49:d2:81:
         e2:6a:c2:81:06:be:fa:65:33:ee:46:5c:dc:ea:7c:87:ee:66:
         68:7a:96:fe:19:b0:a6:96:a5:b4:9b:bc:5e:bc:d7:c6:92:80:
         fc:cc:5b:6d:e3:89:ec:40:7a:18:17:82:0d:8a:aa:dd:70:b3:
         47:01:86:e9:e4:39:3d:f8:83:1c:f8:9c:c1:ce:c5:12:07:9d:
         6f:9a:83:80:61:5f:d9:76:a8:f7:f9:41:74:9f:05:11:bd:3d:
         46:2b:97:d1:31:f7:a2:98:82:cb:50:88:1a:5f:a1:ee:b1:69:
         98:24:4f:4d:df:c0:2d:47:9b:20:6a:3a:f2:83:cc:eb:32:0d:
         ef:b5:35:9f:d3:3f:7d:46:38:8a:5d:d2:33:f4:57:d4:7d:79:
         d6:c4:cf:eb:fd:87:66:66:4f:1a:48:b9:d6:9d:c4:9f:62:6e:
         ba:7e:9c:f5:69:6e:2b:fb:9a:0a:a1:0a:67:70:bc:49:00:c2:
         c2:9c:c7:2b:5e:91:02:25:bc:01:18:4b:8d:fb:93:19:ca:a0:
         32:eb:a4:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 27 10:19:25 2024 by rpki-client on console-ams.rpki-client.org