Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/166882100E5111EDA3B5962BC4F9AE02.roa
File:                     166882100E5111EDA3B5962BC4F9AE02.roa (raw, json)
Hash identifier:          p52XuUkWM0gFJ/c5VssLz2TdQN49ajyITYU9QN/g9KM=
Subject key identifier:   79:B7:32:6D:DD:D9:A8:34:D0:B6:90:3F:48:88:86:2A:F8:6C:79:9A
Certificate issuer:       /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Certificate serial:       6A97
Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/166882100E5111EDA3B5962BC4F9AE02.roa
Signing time:             Wed 10 May 2023 16:15:31 +0000
ROA not before:           Wed 10 May 2023 16:15:31 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     133656
IP address blocks:        103.191.100.0/23 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
                          rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 03 May 2024 15:38:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 27287 (0x6a97)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
        Validity
            Not Before: May 10 16:15:31 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=645bc322-978f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:f8:19:c3:5c:1b:1e:0d:a9:f8:89:d4:b5:52:
                    5d:39:3b:f8:3a:c0:8f:fa:e8:3c:32:4d:b6:d3:35:
                    54:d9:0f:e9:6b:4d:73:11:9e:7a:e9:60:b0:7a:2e:
                    b0:c5:f9:69:c4:81:1c:2f:59:b2:14:8c:8d:b7:d3:
                    cc:5c:95:2c:41:cb:1c:64:38:64:f6:62:38:58:84:
                    90:68:b4:4f:2d:aa:de:58:18:22:e4:2b:11:39:4b:
                    d8:62:b0:53:df:7f:ae:47:7c:56:8b:c0:a2:83:c5:
                    01:98:c1:be:2e:7b:fa:12:08:d4:cc:17:44:62:3d:
                    96:0d:f9:9c:3f:2b:d6:8f:66:a5:c2:3c:0c:e1:2e:
                    5d:ed:ca:bf:ab:12:d8:c0:84:30:fc:d1:23:48:fe:
                    e2:46:fa:8f:87:b9:b4:41:fc:b4:69:58:67:20:8c:
                    b0:ec:4f:a1:b4:80:b8:f9:5f:8a:1a:bc:36:21:56:
                    7d:93:f1:5c:a3:20:cb:ba:54:90:7a:d8:b2:66:97:
                    46:c1:60:08:d8:f0:0c:4c:ca:b6:b6:46:2b:8b:49:
                    34:f5:ea:92:d5:9f:fd:ea:fb:be:43:d3:e4:0b:a1:
                    67:02:27:04:28:cc:5a:d0:de:cb:b6:07:2b:bb:5e:
                    cf:69:9f:e4:ce:8e:84:8c:89:6e:64:ac:ad:fc:11:
                    90:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                79:B7:32:6D:DD:D9:A8:34:D0:B6:90:3F:48:88:86:2A:F8:6C:79:9A
            X509v3 Authority Key Identifier:
                keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/166882100E5111EDA3B5962BC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.191.100.0/23

    Signature Algorithm: sha256WithRSAEncryption
         80:3c:82:8e:2a:c0:94:a5:21:6d:91:21:47:9a:8d:68:e6:44:
         e4:0d:80:0b:05:5c:cd:11:73:d0:16:38:f5:6b:61:a7:3b:43:
         f6:7c:09:25:b9:96:49:1c:41:a9:3a:22:3e:dd:6f:0d:64:38:
         8b:99:3d:0c:31:87:49:0b:e7:93:da:7c:7a:e1:59:73:84:ed:
         b7:50:d8:19:ed:84:cf:d2:52:d0:5b:c1:79:8d:9b:42:92:54:
         6f:de:15:67:02:bf:ba:11:ae:66:3a:e9:4c:9f:34:f1:44:b2:
         b7:12:62:7a:59:99:36:78:85:b9:4e:a2:40:d5:33:9f:2f:ed:
         52:ad:33:5b:0b:d5:ec:b2:ea:47:a1:6d:bc:9d:3d:56:a5:fd:
         72:43:d3:9d:c5:b2:08:3a:a4:26:57:35:41:ae:63:bb:1c:4d:
         c8:36:f8:a8:d1:2a:04:6e:ef:65:b0:05:75:f1:b1:d2:c6:86:
         b3:8e:ed:ec:09:fe:48:5c:91:06:7e:ae:a7:ff:7f:5a:f3:db:
         b5:11:06:91:f9:4f:fb:7e:7d:66:ad:25:38:1f:95:a6:34:c5:
         5b:60:7a:a0:b2:d6:cb:35:cc:99:d8:4f:33:c5:97:09:41:de:
         6c:02:93:c7:b8:4d:af:7f:9e:e9:34:23:80:6c:b9:1f:a3:32:
         d5:86:20:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 27 10:19:27 2024 by rpki-client on console-ams.rpki-client.org