Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/1284A5EAB8D611ED876CBD7CC4F9AE02.roa
File:                     1284A5EAB8D611ED876CBD7CC4F9AE02.roa (raw, json)
Hash identifier:          eo5QweiDi4WpP6DLnzS2I0mWBwM01kJSBOvVXD/8XRM=
Subject key identifier:   72:EB:41:7D:C7:8C:6B:05:03:48:00:F0:8A:04:E5:59:BE:67:B6:46
Certificate issuer:       /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Certificate serial:       7011
Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/1284A5EAB8D611ED876CBD7CC4F9AE02.roa
Signing time:             Wed 10 May 2023 16:41:49 +0000
ROA not before:           Wed 10 May 2023 16:41:49 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     147280
IP address blocks:        103.174.164.0/23 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
                          rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 03 May 2024 15:38:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 28689 (0x7011)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
        Validity
            Not Before: May 10 16:41:49 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=645bc94d-9a13
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:d4:ff:f0:d0:c9:f4:f9:c3:e9:63:1f:7e:59:
                    01:9e:4c:d9:ff:ba:82:34:1c:e7:0a:1c:2d:2b:3f:
                    a5:59:ae:9b:4d:4d:97:60:f7:98:80:6b:7b:3b:dc:
                    3a:1f:be:9d:6d:4b:b7:8c:cd:b4:98:59:fc:b4:54:
                    58:e6:66:c5:df:d5:3b:17:cb:dd:44:3f:76:0c:be:
                    97:c1:c8:2c:ce:7f:94:1e:f1:18:f2:99:33:81:61:
                    12:4c:9d:76:55:5b:14:56:f7:0d:ae:cd:f4:15:6f:
                    9f:45:d7:fa:f0:93:c1:45:2e:f4:44:ba:58:b0:51:
                    e1:08:db:a7:e9:b2:15:3a:c7:0c:09:57:2b:b5:9b:
                    b1:d5:09:9a:01:55:20:a0:54:09:0e:09:b2:a2:cd:
                    3a:1d:c6:5e:40:c1:d1:33:28:8e:56:7d:51:cc:ea:
                    e3:3f:f0:e3:f1:79:e9:fd:d5:4e:52:70:c0:48:32:
                    f0:e0:25:99:34:e8:20:58:ef:f0:cc:18:8d:b2:20:
                    b7:d4:2b:70:1c:c1:2f:93:bc:9b:70:59:c0:9f:1a:
                    fd:f2:6e:45:bb:08:3d:72:1f:e4:a2:d8:d9:37:98:
                    03:b9:94:bd:32:b5:e9:99:51:dd:bf:c6:59:a4:c8:
                    a9:63:89:37:ce:88:5f:1f:2e:03:ef:a7:9a:35:4c:
                    1a:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                72:EB:41:7D:C7:8C:6B:05:03:48:00:F0:8A:04:E5:59:BE:67:B6:46
            X509v3 Authority Key Identifier:
                keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/1284A5EAB8D611ED876CBD7CC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.174.164.0/23

    Signature Algorithm: sha256WithRSAEncryption
         10:36:b1:89:e3:ee:09:af:65:b1:55:e3:c1:0d:55:73:b0:0b:
         52:ee:2d:fd:35:01:fd:c2:21:b6:41:b3:7b:97:bb:20:a6:8d:
         bf:91:cd:7c:31:e8:46:57:13:78:f2:e1:40:40:20:2e:ae:db:
         e1:02:5d:a3:da:ff:d7:e1:90:fd:94:62:5e:99:90:96:30:a1:
         92:95:9c:2d:79:07:ec:af:7d:15:59:63:3e:3e:ad:ab:f1:e6:
         7b:7f:34:27:e8:56:c0:10:6b:cd:5a:a3:c0:37:22:e2:df:a2:
         36:ae:90:de:2d:23:43:82:91:9a:3c:c7:18:23:e4:cb:d8:89:
         00:c4:db:19:09:77:97:6e:d4:ad:6e:27:d4:e6:52:85:e3:a3:
         bf:f0:70:20:4a:e8:39:cf:c1:d3:4e:28:d9:61:c5:af:b6:08:
         79:76:51:2a:34:3b:33:6e:88:bf:aa:e1:14:1f:de:77:1f:cb:
         c0:36:f2:b4:2d:d1:0b:cf:09:75:aa:af:e8:1f:58:29:14:47:
         10:bf:55:75:ad:ee:bc:b8:5f:3e:f4:a2:46:1d:75:b2:96:50:
         db:ee:f0:26:34:5a:cd:a7:a7:33:f5:42:00:74:40:d6:69:6a:
         5d:b2:58:22:51:cb:7c:5c:be:7c:0b:cb:27:68:03:fe:bf:f8:
         0b:9f:0e:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 27 10:19:26 2024 by rpki-client on console-ams.rpki-client.org