Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/1A99217063E111ECB11B2C79C4F9AE02.roa
File:                     1A99217063E111ECB11B2C79C4F9AE02.roa (raw, json)
Hash identifier:          6X2fA+RtRwafRISp9IkW4mzbgFGb2A8c1Gnhjb7ytdQ=
Subject key identifier:   67:6D:32:66:BC:B2:27:89:B1:9D:3B:83:7C:53:B2:3C:B8:BA:74:E4
Certificate issuer:       /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Certificate serial:       6F97
Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/1A99217063E111ECB11B2C79C4F9AE02.roa
Signing time:             Wed 10 May 2023 16:39:31 +0000
ROA not before:           Wed 10 May 2023 16:39:31 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     146853
IP address blocks:        103.172.54.0/23 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
                          rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 03 May 2024 15:38:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 28567 (0x6f97)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
        Validity
            Not Before: May 10 16:39:31 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=645bc8c2-8fe3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:16:7b:d3:95:a4:d0:64:b2:c3:ff:0c:8e:d3:
                    a1:b4:2f:be:f1:98:12:b3:6c:0b:b4:8a:e2:f0:db:
                    e7:9f:a4:ab:47:d7:39:50:1d:59:a0:1c:dc:1e:1c:
                    7b:c7:8e:85:c7:89:a1:c3:29:f0:79:95:bf:b9:70:
                    4b:fb:1a:23:ed:91:0b:06:d6:f7:a4:75:2d:af:b8:
                    6d:b0:f8:1a:60:ea:6b:3a:9c:c4:7f:eb:06:11:3f:
                    94:11:03:10:30:ae:54:01:99:1b:41:cd:35:b3:af:
                    52:af:40:df:8f:e7:ef:6c:e6:df:d8:ff:7f:15:eb:
                    29:06:5b:1b:c6:6a:d4:59:e4:14:33:aa:83:fb:fe:
                    2b:7f:a3:34:dd:6d:e0:5c:01:20:16:08:3e:07:02:
                    af:37:c5:76:d0:ba:98:7e:67:f0:bd:82:e3:df:e2:
                    19:29:41:a6:54:8d:64:16:f5:83:87:ca:84:66:7d:
                    35:a8:ac:80:23:c7:18:2a:bb:ed:99:91:ca:98:b5:
                    b0:cd:7a:e4:9c:6f:f9:af:d5:c3:7d:77:c9:4e:53:
                    ec:74:a3:a5:79:47:56:cf:2d:d2:3d:07:7f:65:3a:
                    eb:1a:a6:45:bd:28:30:e4:93:c7:6e:7b:47:a7:49:
                    2f:fd:12:9d:3d:b6:86:b2:e4:f2:07:8d:c6:e6:74:
                    92:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                67:6D:32:66:BC:B2:27:89:B1:9D:3B:83:7C:53:B2:3C:B8:BA:74:E4
            X509v3 Authority Key Identifier:
                keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/1A99217063E111ECB11B2C79C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.172.54.0/23

    Signature Algorithm: sha256WithRSAEncryption
         08:6e:a3:28:3b:d4:c8:eb:fd:60:6e:13:40:69:3e:0d:e6:e4:
         7e:d9:fd:c1:37:f0:b5:42:2d:34:28:62:21:20:dc:48:fd:9d:
         f1:32:4d:9b:96:2c:45:b7:63:95:f9:b5:eb:0e:32:89:17:3c:
         62:e1:db:30:1a:f8:67:fe:97:dd:a7:a6:85:a3:31:d3:3b:f6:
         56:f4:df:24:2a:32:41:f8:e1:7a:a9:48:4f:c0:fb:cb:f6:f5:
         ca:b5:43:f1:80:cf:25:d4:af:2c:b4:ea:0c:5a:f1:ab:6f:5e:
         c4:4f:aa:92:83:38:2b:8f:26:21:4a:af:39:e6:6a:2b:64:08:
         4d:ea:4e:ff:9a:d2:9b:56:70:19:2b:30:fd:b2:19:55:b6:4d:
         fb:65:20:4e:81:7e:6f:ac:84:fe:63:11:33:dc:b2:1f:7b:e5:
         90:44:1e:b1:e4:f4:fb:a3:92:b4:a3:6e:0a:bd:43:2a:31:5b:
         1c:54:7c:93:ef:bd:95:5c:67:56:ef:cf:6a:b0:d9:fc:44:9f:
         a9:db:f9:40:48:c6:e2:31:4e:fb:17:f9:d4:93:da:cf:8e:dd:
         37:05:49:f4:23:db:34:a6:1f:de:c6:99:92:a1:81:42:99:01:
         48:db:ab:55:3f:e4:ce:8d:f8:0f:9d:12:67:f6:0b:8b:cd:68:
         68:64:45:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 27 10:19:27 2024 by rpki-client on console-ams.rpki-client.org