Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/13621CC8C7C211ECA4512A29C4F9AE02.roa
File:                     13621CC8C7C211ECA4512A29C4F9AE02.roa (raw, json)
Hash identifier:          6te0HYpYNx2QofmRBKtHsC3k7An200BTW7I4VQJGVhg=
Subject key identifier:   A3:B7:05:18:02:37:4B:56:0C:24:1A:AB:51:B0:FD:41:F5:E2:B1:06
Certificate issuer:       /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Certificate serial:       700D
Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/13621CC8C7C211ECA4512A29C4F9AE02.roa
Signing time:             Wed 10 May 2023 16:41:44 +0000
ROA not before:           Wed 10 May 2023 16:41:44 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     147276
IP address blocks:        103.175.104.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
                          rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 03 May 2024 15:38:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 28685 (0x700d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
        Validity
            Not Before: May 10 16:41:44 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=645bc948-594a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:49:ac:1e:62:d3:9f:4e:b8:c6:91:25:9a:2a:
                    d6:e2:89:94:3a:4b:21:df:aa:c8:86:4e:a3:de:15:
                    87:66:f9:24:1f:70:6e:e2:c7:ad:f8:1e:fb:0e:b2:
                    21:22:b5:bf:2b:ad:a3:e3:b5:bd:54:fa:8f:e5:96:
                    3c:60:06:29:12:d3:85:2b:9c:8b:81:e3:4b:1d:e1:
                    7e:57:80:27:af:53:be:bf:5d:55:5e:e0:8d:e4:20:
                    90:e1:e6:bd:cf:d1:c8:2a:c4:3c:cd:6f:07:61:15:
                    2b:63:84:6d:59:9d:4c:c2:f4:49:55:64:30:d0:ad:
                    1a:53:36:44:ad:bc:c5:79:1e:4a:ab:bd:1a:cf:5d:
                    1a:d0:cd:ca:37:a9:c6:dc:02:07:97:81:47:0b:08:
                    31:75:47:ed:8e:43:c4:da:a8:08:2c:5a:a4:1d:ea:
                    e2:c2:6f:c1:0b:3e:4c:94:f4:3e:08:4d:ef:1c:e3:
                    c2:16:51:a7:15:07:35:9e:8b:b3:f7:44:e1:47:05:
                    88:81:bb:9e:a9:95:34:cc:dd:03:07:3c:ad:17:0c:
                    19:6c:1c:95:0d:09:79:63:82:a0:b7:2b:85:2a:51:
                    96:bc:49:df:00:6a:e5:6e:02:8a:eb:5e:84:17:b0:
                    ae:a8:45:5e:da:ef:2e:2f:c4:8e:b8:0d:db:19:b3:
                    ad:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A3:B7:05:18:02:37:4B:56:0C:24:1A:AB:51:B0:FD:41:F5:E2:B1:06
            X509v3 Authority Key Identifier:
                keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/13621CC8C7C211ECA4512A29C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.175.104.0/24

    Signature Algorithm: sha256WithRSAEncryption
         1c:d4:a9:97:08:e2:5b:74:19:73:b5:29:51:4d:92:ba:1b:3f:
         03:c5:39:d8:0d:32:7a:fc:1d:9e:43:72:66:6e:9a:9a:69:77:
         d8:3e:b3:c9:30:7d:87:f0:ba:21:96:fd:f8:1a:ce:53:02:db:
         9c:9d:e6:7f:66:b3:0c:03:40:d9:95:42:a8:c3:af:cd:ff:17:
         e4:a0:03:6c:c8:aa:01:cb:2f:56:d7:e0:96:be:b6:c4:54:5b:
         e5:3a:d6:ea:91:86:36:8d:0e:be:7b:5f:74:7b:0c:d9:a1:c8:
         34:10:46:66:5e:2d:7d:94:e8:82:3c:dc:01:4d:84:cc:7e:1c:
         6d:f3:ce:33:06:01:b4:60:14:eb:a6:10:a5:87:e6:f2:d0:f1:
         71:d6:8c:2b:53:a7:78:3b:80:ee:f9:5a:dc:75:a0:16:d2:9a:
         97:3f:cf:99:20:d2:c2:b1:4e:b0:d7:87:5c:00:89:af:d3:08:
         e1:90:61:7b:52:33:1c:a5:da:4b:71:f3:3b:42:3c:46:88:fb:
         29:87:af:f4:46:08:d3:7b:c7:ae:b3:cc:91:10:a4:db:be:48:
         92:c0:73:97:0b:ee:29:49:83:f1:49:89:0c:85:78:1f:98:cc:
         78:58:c5:5a:78:41:27:27:c5:35:cd:cf:15:bf:f6:ae:f4:9f:
         5b:37:f9:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 27 10:19:26 2024 by rpki-client on console-ams.rpki-client.org