Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/0A782FF0BB2711ECB1CE726BC4F9AE02.roa
File:                     0A782FF0BB2711ECB1CE726BC4F9AE02.roa (raw, json)
Hash identifier:          uatit/eY/x0KaWtnojS/ttNfdVL5hDM+jmCOVoPj4Ng=
Subject key identifier:   18:9A:BF:B3:C3:CA:6A:51:1E:48:37:2A:FB:17:A7:25:47:3D:6E:3B
Certificate issuer:       /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Certificate serial:       709E
Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/0A782FF0BB2711ECB1CE726BC4F9AE02.roa
Signing time:             Wed 10 May 2023 16:44:25 +0000
ROA not before:           Wed 10 May 2023 16:44:25 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     149614
IP address blocks:        103.186.71.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
                          rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 03 May 2024 15:38:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 28830 (0x709e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
        Validity
            Not Before: May 10 16:44:25 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=645bc9e9-9d67
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:f3:41:44:64:e4:b8:22:a9:58:76:0a:20:5e:
                    87:f1:6a:7d:ed:28:9a:22:80:a7:58:7e:2f:85:a0:
                    22:10:27:36:b5:7b:07:bb:c3:28:ee:99:4c:b6:9a:
                    b9:42:bd:fd:80:c2:4b:39:20:c6:6b:0f:7b:65:9b:
                    73:8a:6a:2a:c5:76:2c:a0:47:5c:e1:b2:3e:0c:97:
                    f1:3a:a7:4b:c4:7d:ff:98:31:7e:ab:9f:c3:33:10:
                    5e:ff:6f:11:a6:48:0a:fe:3e:37:fa:23:7b:6a:97:
                    63:bf:6a:d6:26:39:23:99:b1:98:92:ee:32:19:25:
                    ba:5d:54:70:6f:06:37:10:d3:00:6c:fc:ff:b7:9f:
                    a8:ff:c3:1f:02:ad:d5:4a:80:51:ac:89:50:23:e2:
                    67:22:4b:99:7c:1b:d2:a3:21:40:ac:26:04:63:bd:
                    5c:2e:a3:93:3e:c7:82:10:6d:bd:db:0c:df:23:94:
                    61:9a:cd:97:3e:be:32:80:6d:62:f4:09:cf:b8:b2:
                    c4:4f:c4:c8:00:eb:2e:df:c1:ee:bc:56:d7:7e:4e:
                    66:5c:cc:cd:f0:ba:08:5a:70:c3:6b:27:4b:69:f9:
                    47:af:88:62:d8:48:1c:f2:4d:bf:18:ab:5a:71:18:
                    53:0c:be:19:e1:fc:fc:96:b0:64:74:1b:18:eb:98:
                    5e:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                18:9A:BF:B3:C3:CA:6A:51:1E:48:37:2A:FB:17:A7:25:47:3D:6E:3B
            X509v3 Authority Key Identifier:
                keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/0A782FF0BB2711ECB1CE726BC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.186.71.0/24

    Signature Algorithm: sha256WithRSAEncryption
         92:8b:b3:0a:32:ac:e8:8c:71:dc:7a:ab:80:32:52:d4:96:43:
         de:8c:00:85:b9:8f:c3:12:7e:50:31:bc:9a:da:e4:cb:15:6f:
         c1:79:c3:07:9d:88:d8:76:9f:21:c6:04:57:f5:1d:8b:bd:84:
         cc:a6:31:3a:39:03:75:5d:1c:ec:97:21:e5:29:52:47:49:e5:
         cc:81:55:87:8e:ba:1c:8b:cb:e5:5a:cc:23:28:14:28:fd:88:
         ed:c1:60:4c:d9:6c:e1:9b:2a:06:90:aa:82:91:1e:12:df:c0:
         22:74:be:8d:5f:74:0b:7e:d2:21:63:19:9c:b5:29:a3:8b:22:
         9b:dc:0c:ba:1d:25:52:f7:6a:8b:ef:4e:8e:16:fb:58:20:2c:
         13:67:49:ec:a7:76:9b:e3:de:3b:a6:05:d8:88:26:f7:76:61:
         b7:9f:95:c4:7e:a0:23:38:8f:ce:5c:86:af:e6:10:30:6c:de:
         8d:71:46:9f:32:44:9a:44:fd:8a:49:03:49:cf:2f:64:84:f5:
         4c:99:e9:b7:bb:fc:80:05:fd:3c:79:16:07:84:c6:36:8e:29:
         71:31:20:2c:fa:c1:8a:f2:59:2e:bd:1a:13:96:94:0b:d9:1e:
         85:65:0a:98:2d:ae:09:71:6c:4c:03:97:42:27:7d:00:6c:ce:
         4c:5a:46:d7
-----BEGIN CERTIFICATE-----
MIIFcTCCBFmgAwIBAgICcJ4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
OEVEQjIxMTAvBgNVBAUTKDI5NkVEQjY0RjNBRjZFOUQ5ODA5MzJFODE2Rjk1OTgz
RTNBQkM4MjMwHhcNMjMwNTEwMTY0NDI1WhcNMjQwNzAxMDAwMDAwWjAYMRYwFAYD
VQQDEw02NDViYzllOS05ZDY3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAzPNBRGTkuCKpWHYKIF6H8Wp97SiaIoCnWH4vhaAiECc2tXsHu8Mo7plMtpq5
Qr39gMJLOSDGaw97ZZtzimoqxXYsoEdc4bI+DJfxOqdLxH3/mDF+q5/DMxBe/28R
pkgK/j43+iN7apdjv2rWJjkjmbGYku4yGSW6XVRwbwY3ENMAbPz/t5+o/8MfAq3V
SoBRrIlQI+JnIkuZfBvSoyFArCYEY71cLqOTPseCEG292wzfI5Rhms2XPr4ygG1i
9AnPuLLET8TIAOsu38HuvFbXfk5mXMzN8LoIWnDDaydLaflHr4hi2Egc8k2/GKta
cRhTDL4Z4fz8lrBkdBsY65heJQIDAQABo4IClTCCApEwHQYDVR0OBBYEFBiav7PD
ympRHkg3KvsXpyVHPW47MB8GA1UdIwQYMBaAFClu22Tzr26dmAky6Bb5WYPjq8gj
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4RURCMi8yQTQzRTMwQzcw
RTkxMUUyQjM2RDRCNkIyOTc5QkIyMC9LVzdiWlBPdmJwMllDVExvRnZsWmctT3J5
Q00uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0tXN2JaUE92YnAyWUNUTG9GdmxaZy1PcnlDTS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
OEVEQjIvMkE0M0UzMEM3MEU5MTFFMkIzNkQ0QjZCMjk3OUJCMjAvMEE3ODJGRjBC
QjI3MTFFQ0IxQ0U3MjZCQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E
EDAOMAwEAgABMAYDBABnukcwDQYJKoZIhvcNAQELBQADggEBAJKLswoyrOiMcdx6
q4AyUtSWQ96MAIW5j8MSflAxvJra5MsVb8F5wwediNh2nyHGBFf1HYu9hMymMTo5
A3VdHOyXIeUpUkdJ5cyBVYeOuhyLy+VazCMoFCj9iO3BYEzZbOGbKgaQqoKRHhLf
wCJ0vo1fdAt+0iFjGZy1KaOLIpvcDLodJVL3aovvTo4W+1ggLBNnSeyndpvj3jum
BdiIJvd2YbeflcR+oCM4j85chq/mEDBs3o1xRp8yRJpE/YpJA0nPL2SE9UyZ6be7
/IAF/Tx5FgeExjaOKXExICz6wYryWS69GhOWlAvZHoVlCpgtrglxbEwDl0InfQBs
zkxaRtc=
-----END CERTIFICATE-----
Generated at Sat Apr 27 10:19:26 2024 by rpki-client on console-ams.rpki-client.org