Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/1CE9182292E411ECB4DF4B4EC4F9AE02.roa
File:                     1CE9182292E411ECB4DF4B4EC4F9AE02.roa (raw, json)
Hash identifier:          gseLPpF0e3fg1WAoztbrIgc5yw4EJaNZUxrBtZzowF8=
Subject key identifier:   6A:8D:46:99:22:C3:94:5B:17:30:DE:A1:BF:D1:6A:26:3F:80:78:82
Certificate issuer:       /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Certificate serial:       6FE2
Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/1CE9182292E411ECB4DF4B4EC4F9AE02.roa
Signing time:             Wed 10 May 2023 16:40:56 +0000
ROA not before:           Wed 10 May 2023 16:40:56 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     147213
IP address blocks:        103.176.208.0/23 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
                          rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 03 May 2024 15:38:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 28642 (0x6fe2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
        Validity
            Not Before: May 10 16:40:56 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=645bc917-2701
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:d7:03:53:82:93:18:da:d8:9a:ec:4d:da:af:
                    4f:8a:1b:72:fc:a3:7a:e9:f9:68:a1:72:92:26:a9:
                    56:3c:dc:c0:00:2f:55:84:47:6d:77:4e:66:ce:d8:
                    38:ba:ac:3a:aa:4e:ef:a5:2d:1f:fe:f8:6f:16:8e:
                    b3:f6:5c:36:4d:ce:e8:43:a4:55:84:41:f7:f5:06:
                    77:77:96:04:94:e7:0a:17:10:f1:b7:14:66:b9:91:
                    d0:6e:29:c8:35:55:66:61:32:18:e1:ee:4a:57:ca:
                    34:b4:87:98:fe:db:87:60:46:f1:a9:47:03:a0:22:
                    ed:e9:05:f7:2e:24:c5:7f:bd:fb:2c:3b:d1:05:9a:
                    63:56:7f:18:cf:11:97:52:75:7f:6e:bf:3e:86:e1:
                    8c:26:e9:44:8f:74:4b:5b:ef:b3:7e:4c:ae:a1:1e:
                    92:69:ae:47:c7:e1:8f:04:57:ae:04:f4:9e:ac:a8:
                    e4:d9:34:73:fd:3d:37:4a:34:50:03:6c:60:19:55:
                    da:dc:32:96:3a:b9:c9:91:e7:47:f2:64:f4:1b:48:
                    fb:87:56:14:40:27:a7:35:c5:88:15:5e:d1:84:ed:
                    23:18:80:8e:27:0c:ed:ac:e6:41:fc:73:50:04:0c:
                    d7:b8:8a:a2:31:ad:ae:11:f1:ef:69:9b:f9:07:6e:
                    50:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6A:8D:46:99:22:C3:94:5B:17:30:DE:A1:BF:D1:6A:26:3F:80:78:82
            X509v3 Authority Key Identifier:
                keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/1CE9182292E411ECB4DF4B4EC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.176.208.0/23

    Signature Algorithm: sha256WithRSAEncryption
         6e:f3:42:af:fe:ad:61:26:85:1f:f4:87:7b:fe:9a:7d:9b:5a:
         41:1a:bd:75:17:66:17:45:24:19:56:0d:9d:c7:1e:5c:29:f3:
         99:0a:15:65:b1:ad:a6:f2:60:36:95:5b:bc:38:77:18:52:2d:
         89:6f:9b:1c:22:33:c1:74:23:bf:e6:79:87:01:f9:28:a1:6a:
         00:3a:2e:43:5e:83:73:6f:2b:a7:7e:ce:cf:95:a7:7a:24:94:
         53:87:f0:99:3b:73:8c:14:20:25:9d:f5:27:92:e7:a7:80:a3:
         dc:09:33:02:e5:e1:31:b9:37:1e:60:97:6c:95:59:5c:eb:0c:
         88:3f:21:b3:30:de:5a:8e:42:4c:3d:8e:dc:8d:90:8a:bd:a8:
         1c:c0:30:c1:54:23:ed:15:35:5f:52:6d:c7:87:8d:5f:0c:48:
         b7:e5:d5:a0:f2:91:07:a1:c6:a2:66:2d:08:5a:dd:b8:68:8f:
         19:fb:bc:79:d5:63:e0:18:22:1b:1d:90:ee:00:9c:cd:de:47:
         e4:70:f0:90:b6:dc:71:44:9c:fa:3b:bd:01:a1:b9:f1:60:dc:
         63:35:a6:f3:fc:4d:fb:6a:20:c8:19:5c:cf:df:72:f1:43:09:
         ea:1a:60:ad:a5:23:ab:e6:19:1f:19:bd:3a:18:22:bd:35:72:
         39:a1:f0:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 27 10:19:27 2024 by rpki-client on console-ams.rpki-client.org