Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/19F8385E766711EB96740950C4F9AE02.roa
File:                     19F8385E766711EB96740950C4F9AE02.roa (raw, json)
Hash identifier:          muzWbPgI/ExZfiflAk/zCt6M/x9wXpsdFc5yP/2i17g=
Subject key identifier:   56:3C:6D:FB:46:56:13:AD:5D:3F:7F:08:E1:E3:50:EC:90:68:8B:1B
Certificate issuer:       /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Certificate serial:       6EBA
Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/19F8385E766711EB96740950C4F9AE02.roa
Signing time:             Wed 10 May 2023 16:35:24 +0000
ROA not before:           Wed 10 May 2023 16:35:24 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     141507
IP address blocks:        103.162.73.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
                          rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 03 May 2024 15:38:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 28346 (0x6eba)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
        Validity
            Not Before: May 10 16:35:24 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=645bc7cb-c7c3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:83:87:59:df:50:07:16:6d:fe:a3:33:98:6c:
                    91:af:72:29:31:98:8e:d8:e1:98:bd:9f:84:8e:96:
                    d1:a9:77:49:ac:9e:60:09:2b:30:bb:ff:66:28:44:
                    69:9c:2a:3f:1c:0b:0c:6f:27:ae:91:d8:16:50:06:
                    82:b9:74:4a:7e:e9:d0:dc:3c:5a:76:1c:33:01:7d:
                    34:4d:8c:b1:69:7c:96:ff:96:21:92:e8:a0:9a:97:
                    0e:2a:25:af:f4:ee:f8:fa:ca:3d:69:6a:53:df:f8:
                    27:a9:48:cb:55:82:60:20:2c:35:f3:ad:86:7e:14:
                    e0:e0:88:a9:24:fa:c8:86:8d:a7:c2:9d:90:3b:24:
                    3d:dd:41:35:8f:3b:79:30:72:5d:56:ed:1c:48:61:
                    32:42:bf:72:3a:28:bc:be:a6:80:51:5f:f6:0f:94:
                    75:86:ec:7b:d8:0d:11:01:8a:2b:58:de:0b:24:cd:
                    64:3d:b8:42:0b:d1:59:1a:91:fb:9a:ff:e5:20:56:
                    2e:df:c1:b4:bf:56:a6:52:c1:37:96:c3:58:a4:58:
                    7e:f1:07:47:ae:e3:fa:5b:c5:74:ab:97:a0:64:32:
                    00:0c:c7:53:1a:59:1e:7f:ad:d8:43:5c:a8:11:9b:
                    6f:f6:d9:c4:7c:9d:c4:0d:e7:ed:0c:3d:dd:81:28:
                    2b:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                56:3C:6D:FB:46:56:13:AD:5D:3F:7F:08:E1:E3:50:EC:90:68:8B:1B
            X509v3 Authority Key Identifier:
                keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/19F8385E766711EB96740950C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.162.73.0/24

    Signature Algorithm: sha256WithRSAEncryption
         16:aa:83:84:01:91:21:08:e7:47:09:7f:82:46:cd:27:db:5a:
         be:21:49:49:7b:91:29:94:aa:31:13:ec:d7:9e:ca:f9:6e:8f:
         27:34:3b:d6:19:d5:27:2d:c7:53:d5:00:88:8e:3c:b2:11:7e:
         fc:64:32:e7:34:93:fe:54:7f:86:a8:1d:67:f1:03:07:96:f7:
         d7:b6:d1:9a:92:4d:0d:d3:73:39:5d:f9:5e:70:63:b7:59:af:
         e3:d7:2a:39:e9:13:ac:1f:37:f3:d4:0a:75:fe:d0:e3:47:49:
         42:82:59:3f:32:a0:9b:6b:c3:77:23:a5:09:b9:40:d7:81:c8:
         61:96:75:a2:db:2f:12:89:17:88:07:49:50:a8:0a:59:a1:01:
         91:c0:2d:bc:b4:a7:57:de:3f:ba:cd:e4:30:b5:f8:ad:8c:ab:
         8b:3d:8a:1d:78:db:1d:05:dd:3d:fc:9f:89:2f:d6:30:63:03:
         ef:45:56:58:a3:c1:ca:31:34:9f:4f:16:62:56:8c:31:ba:95:
         36:88:f1:44:1a:67:6a:3c:09:cd:a4:a3:cb:bf:9b:58:6d:aa:
         c7:58:70:f8:1e:a2:cf:b5:36:30:79:c4:ff:cb:4a:1d:44:5d:
         74:a6:2c:78:6b:f4:3f:9b:f3:06:cd:56:6a:71:fc:2d:30:2a:
         ec:7f:0e:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 27 10:19:27 2024 by rpki-client on console-ams.rpki-client.org