Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/2071F5466E5111EE86A34C5AC4F9AE02.roa
File:                     2071F5466E5111EE86A34C5AC4F9AE02.roa (raw, json)
Hash identifier:          p1WLsQ4RAe0xzGU7ioJQsrIGSItbJJlGPXXdp+rmMzI=
Subject key identifier:   CD:6A:00:22:0E:6A:88:5E:FF:CE:85:13:4A:90:92:96:D5:CA:17:E2
Certificate issuer:       /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Certificate serial:       7C43
Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/2071F5466E5111EE86A34C5AC4F9AE02.roa
Signing time:             Thu 19 Oct 2023 07:28:41 +0000
ROA not before:           Thu 19 Oct 2023 07:28:41 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     131302
IP address blocks:        103.74.4.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
                          rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 03 May 2024 15:38:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 31811 (0x7c43)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
        Validity
            Not Before: Oct 19 07:28:41 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=6530daa9-5e6a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f9:c4:48:fc:25:81:08:3f:5d:a7:eb:79:51:c5:
                    a4:76:da:e1:c3:00:ce:7a:58:80:85:3c:0e:ec:8c:
                    91:90:af:23:04:0d:65:15:cf:6c:6a:8d:f1:4c:fe:
                    d3:ed:9f:54:ca:26:55:18:93:7d:08:35:bb:e4:3e:
                    5f:c7:98:4d:5e:d3:ca:6e:20:3a:f6:a0:6d:75:cb:
                    be:4a:a2:55:2c:94:55:e5:c5:cf:bf:d7:a1:ec:e8:
                    cb:14:4a:fa:2d:cd:1b:97:f2:cf:5d:ae:86:39:41:
                    47:37:68:40:5c:23:9b:32:e3:d1:61:84:76:45:bd:
                    bf:50:5e:07:25:45:2b:91:54:2e:aa:24:79:e4:16:
                    ae:83:03:03:79:23:2b:9f:c5:6c:d4:19:d1:89:45:
                    3b:af:ca:82:58:6f:09:d6:4b:9b:5b:4b:a6:e3:97:
                    d4:ce:0d:a1:9c:ba:f5:18:21:41:bb:5d:e7:c7:a1:
                    72:41:26:49:2d:e6:10:5b:f4:d4:22:31:07:7a:3d:
                    70:53:6d:99:01:8c:41:4a:30:b9:b9:85:6f:95:53:
                    dc:ed:fe:d6:18:ea:06:73:a8:8d:87:01:e9:f0:01:
                    2d:66:a7:65:1f:cd:a6:f0:72:fc:b8:be:1d:08:55:
                    10:87:3e:9d:d7:f5:63:da:23:06:48:3a:39:1f:1d:
                    02:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CD:6A:00:22:0E:6A:88:5E:FF:CE:85:13:4A:90:92:96:D5:CA:17:E2
            X509v3 Authority Key Identifier:
                keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/2071F5466E5111EE86A34C5AC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.74.4.0/24

    Signature Algorithm: sha256WithRSAEncryption
         a0:8e:21:8d:b1:b6:83:87:ba:25:b8:79:f6:1d:dd:e6:9f:6c:
         60:ba:3f:5d:ce:66:da:6b:c9:a5:9a:46:69:cb:14:85:85:59:
         3b:c6:38:0d:ff:de:b3:09:ab:28:38:11:f7:7d:2a:d4:6b:36:
         60:0c:3e:b1:14:70:c8:cd:90:76:b6:fa:a3:59:2f:5f:f8:c1:
         b1:13:ce:f4:10:39:24:99:6d:02:58:16:4b:6c:75:38:65:06:
         73:cf:00:a3:f1:3c:d2:54:af:4a:25:f3:ca:74:8b:8e:38:dd:
         d5:a8:1d:1d:3b:68:66:99:a9:da:25:02:bb:8e:20:cd:af:67:
         6b:81:9e:02:28:9d:f0:2c:1f:a4:cc:f3:08:06:03:5a:dd:d1:
         f6:b6:d7:33:85:b8:72:ff:5e:03:f6:39:8e:62:59:21:72:7b:
         98:57:ef:47:49:ee:5f:52:2f:d5:85:88:df:76:c9:ec:2a:9e:
         81:8e:97:09:35:12:0c:41:dc:f7:65:13:68:8b:05:3d:b0:bc:
         e0:e4:18:dc:c0:38:9e:8b:64:8c:b7:8a:f5:30:b7:09:fb:53:
         0a:78:55:6d:56:b5:ea:a8:30:0d:f6:03:1e:a9:6a:df:de:cd:
         42:ae:bd:bf:e5:6c:b7:48:cc:e1:3d:50:c4:62:96:43:66:a2:
         39:47:ef:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 27 10:19:28 2024 by rpki-client on console-ams.rpki-client.org