Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/1493F91C619711ED9437B344C4F9AE02.roa
File:                     1493F91C619711ED9437B344C4F9AE02.roa (raw, json)
Hash identifier:          Sl7tibQgbQEfUgtesrKMb1k7jrrn6n/454ABxzVSVEE=
Subject key identifier:   E7:F3:10:01:5C:5C:6D:83:4B:F5:15:E7:9A:58:23:08:C4:2F:65:C0
Certificate issuer:       /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Certificate serial:       708E
Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/1493F91C619711ED9437B344C4F9AE02.roa
Signing time:             Wed 10 May 2023 16:44:08 +0000
ROA not before:           Wed 10 May 2023 16:44:08 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     149593
IP address blocks:        103.189.178.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
                          rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 03 May 2024 15:38:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 28814 (0x708e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
        Validity
            Not Before: May 10 16:44:08 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=645bc9d8-1ae6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:fb:5e:3a:c5:65:98:19:10:82:b6:b2:b4:66:
                    dc:4b:a0:ee:71:3b:63:f6:55:7b:5c:c1:4c:ae:f1:
                    80:7d:b3:29:a0:dd:48:f5:0c:13:bd:77:18:7e:92:
                    74:d8:e5:8c:28:61:40:fd:99:15:c2:bd:8d:83:f9:
                    e1:49:95:f8:f4:de:5e:7d:a0:65:22:8a:fb:ce:58:
                    93:4d:52:da:11:23:2e:2c:e0:4e:b2:30:e6:27:ad:
                    39:6b:40:0f:93:76:b8:9c:c8:9d:6e:6a:fe:f5:9e:
                    51:85:8f:70:ad:90:ec:d8:d2:08:c5:e7:ef:dd:a0:
                    df:7e:95:f8:09:7f:00:42:bc:ba:cb:bf:66:67:8e:
                    a4:68:8c:4d:39:04:ba:3c:4d:b0:03:d8:92:f3:69:
                    07:be:0b:00:69:ff:d4:0f:5e:9b:cd:f0:b8:f3:f4:
                    18:ef:eb:bd:76:ef:14:69:6c:42:08:f5:d4:57:75:
                    55:ce:6c:48:20:65:7f:0b:1d:32:d4:c7:9b:37:65:
                    e2:17:bc:56:c2:af:db:54:73:d5:47:1a:14:30:91:
                    07:12:d6:00:f0:2a:10:8f:0c:65:54:98:51:45:e0:
                    25:4e:50:36:0d:59:49:b6:a5:1b:8f:4e:da:1a:c1:
                    2f:22:bb:f5:fc:1e:bd:0f:14:9a:af:54:d6:64:87:
                    9d:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E7:F3:10:01:5C:5C:6D:83:4B:F5:15:E7:9A:58:23:08:C4:2F:65:C0
            X509v3 Authority Key Identifier:
                keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/1493F91C619711ED9437B344C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.189.178.0/24

    Signature Algorithm: sha256WithRSAEncryption
         26:28:6b:8f:cf:ae:64:6e:b3:b0:aa:a9:46:5b:aa:94:57:bb:
         fb:0d:0e:ca:b6:1c:ff:0c:1f:e6:6e:84:2f:01:5a:5d:fc:83:
         b4:f8:d4:87:d2:37:0e:a5:4e:63:b5:b4:75:72:1d:ae:1d:1b:
         cc:2f:73:21:22:ac:3b:4c:7c:fa:44:e2:d8:8b:23:92:20:6a:
         6e:bc:d0:11:1d:95:72:9d:85:b4:c7:51:d8:63:16:38:a3:81:
         75:40:0b:33:fb:c6:b1:f9:c4:e9:7d:23:9e:29:58:14:74:ab:
         26:08:e7:28:1a:b6:c3:e4:d8:91:4d:66:60:cc:dc:a3:a1:7e:
         f4:35:50:55:0c:4f:75:50:3f:6d:5d:ed:7b:35:dd:e4:19:43:
         60:81:59:92:d0:3b:93:59:a0:6e:be:46:6f:8b:ce:1e:c1:d3:
         91:c8:1c:7e:75:93:e8:13:78:f7:37:ac:5c:d5:66:15:05:61:
         56:f6:3d:97:51:26:15:af:32:9f:7c:c2:78:e0:1c:8c:f3:04:
         aa:23:5a:93:d4:59:33:c7:b2:5b:c9:97:cb:f1:6f:d2:e1:ab:
         5e:c8:32:73:ff:f1:40:a2:4d:03:93:a9:89:35:8d:e1:77:8c:
         50:17:11:56:55:f2:4d:8a:f7:09:55:ae:da:8d:6d:2d:ad:b2:
         07:62:7a:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 27 10:19:27 2024 by rpki-client on console-ams.rpki-client.org