Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/1E2F10CE123C11EDA5012021C4F9AE02.roa
File:                     1E2F10CE123C11EDA5012021C4F9AE02.roa (raw, json)
Hash identifier:          CpMAN6HQn56VpWgYBMeleGnfPPF1GNQdsf+OHkknQqM=
Subject key identifier:   3F:53:9B:E9:89:1C:88:F8:41:F1:6C:24:30:AF:9B:90:7A:00:37:F9
Certificate issuer:       /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Certificate serial:       7A7C
Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/1E2F10CE123C11EDA5012021C4F9AE02.roa
Signing time:             Thu 21 Sep 2023 05:12:31 +0000
ROA not before:           Thu 21 Sep 2023 05:12:31 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     150075
IP address blocks:        103.169.86.0/23 maxlen: 24
                          103.174.130.0/23 maxlen: 23

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
                          rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 03 May 2024 15:38:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 31356 (0x7a7c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
        Validity
            Not Before: Sep 21 05:12:31 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=650bd0bf-c7c5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:72:d7:08:9b:93:0b:7c:44:0e:15:61:fd:94:
                    11:83:35:0b:b2:99:9d:ec:60:1b:0b:88:09:9f:52:
                    72:a6:ab:2e:c5:76:89:5a:e3:1c:37:27:c8:42:a0:
                    3b:3a:c7:2b:aa:08:59:a8:f5:76:68:af:84:10:19:
                    55:b4:ee:3b:d7:a0:7f:77:58:de:bf:d4:a4:5e:8e:
                    f6:bf:9f:3e:d4:b9:4c:bf:57:f6:1c:58:9d:48:f0:
                    36:a1:50:e6:be:4a:ad:4c:23:e9:c2:9f:19:e0:f3:
                    9e:78:45:f2:96:69:71:87:1b:e9:92:32:76:4a:04:
                    69:90:c9:cd:39:c0:88:61:db:29:8f:4d:e4:ef:6b:
                    67:f3:00:ed:55:43:7e:f1:bc:67:5e:31:ce:3b:b8:
                    09:8f:df:ab:c3:12:da:7e:ed:3a:50:b5:2b:94:0e:
                    31:55:a8:a5:bb:7e:3f:a0:1f:ec:37:c7:32:3a:66:
                    41:4d:e2:c2:33:fe:5f:8e:85:39:76:32:ad:7a:2b:
                    3c:47:ce:0c:c8:4b:0d:ca:30:fa:f9:89:11:4a:d4:
                    86:e5:c8:5e:3d:ca:cd:7f:b7:8e:bd:a5:62:70:14:
                    52:28:65:56:47:37:af:7e:fe:53:1d:98:83:8a:6c:
                    30:c9:53:e3:16:dc:90:b8:b0:73:72:06:74:f7:c4:
                    fc:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3F:53:9B:E9:89:1C:88:F8:41:F1:6C:24:30:AF:9B:90:7A:00:37:F9
            X509v3 Authority Key Identifier:
                keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/1E2F10CE123C11EDA5012021C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.169.86.0/23
                  103.174.130.0/23

    Signature Algorithm: sha256WithRSAEncryption
         2f:41:60:e0:f2:23:00:bb:97:a6:f2:7a:b8:14:ec:0c:ef:b1:
         c9:45:df:7e:a8:e4:0d:ef:52:63:ae:d1:9d:73:1c:1e:b0:01:
         36:06:57:5f:96:b2:1b:c9:f4:53:9d:14:96:9c:8a:c9:a8:51:
         4d:38:aa:36:95:27:c5:f2:42:73:3c:cb:27:76:f8:9d:95:cd:
         92:6f:c9:16:35:0c:ea:4c:21:18:c8:f6:d6:c9:6d:26:fe:90:
         bc:cf:e2:ed:b5:cb:a2:d4:d3:fb:42:8f:c4:78:cf:8f:86:af:
         dc:e6:c8:93:bb:90:9e:84:78:47:f2:3d:3e:f5:de:b6:0b:af:
         d8:4f:63:99:c5:58:b7:08:39:07:13:c0:75:6f:fc:6a:b7:55:
         3f:ac:82:64:1b:7d:98:73:5c:c4:61:e6:d8:61:1b:30:f0:ae:
         4f:79:79:a5:58:c3:53:81:66:2d:b0:88:96:ae:b4:0b:a3:25:
         5b:22:20:05:c1:82:a9:6f:84:86:be:56:a8:74:aa:28:0d:23:
         bd:6c:7e:64:e5:b1:49:90:7f:90:33:2d:09:ff:55:3e:45:ba:
         1f:e5:6d:78:31:c5:20:cd:88:0b:a5:05:93:6b:50:66:55:aa:
         d8:28:fd:4b:af:85:43:9a:88:b0:39:4d:cb:e3:0b:8b:c1:36:
         70:d6:1b:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 27 10:19:27 2024 by rpki-client on console-ams.rpki-client.org