Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/2219B3D249F611ED86C3FE46C4F9AE02.roa
File:                     2219B3D249F611ED86C3FE46C4F9AE02.roa (raw, json)
Hash identifier:          qN58zaJfa2J6JKXHqpLH9lM4d0mbwO06FAysVhtjzmQ=
Subject key identifier:   6B:0B:8B:81:76:1D:4C:1F:79:C9:1F:05:32:50:C4:7A:84:CB:B9:0D
Certificate issuer:       /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Certificate serial:       6E96
Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/2219B3D249F611ED86C3FE46C4F9AE02.roa
Signing time:             Wed 10 May 2023 16:34:44 +0000
ROA not before:           Wed 10 May 2023 16:34:44 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     141321
IP address blocks:        103.157.222.0/23 maxlen: 24
                          103.187.64.0/23 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
                          rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 03 May 2024 15:38:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 28310 (0x6e96)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
        Validity
            Not Before: May 10 16:34:44 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=645bc7a4-b0f5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:10:cf:93:28:d1:f6:0d:dc:f1:f9:20:ab:e2:
                    23:8d:2a:1f:1f:7c:2d:15:68:9f:2b:8b:eb:b6:76:
                    b4:3f:f8:e8:fe:2a:63:84:de:e6:6a:c7:ee:47:cd:
                    72:5a:b4:dc:65:12:75:0a:88:60:54:9e:4c:a9:03:
                    49:d8:52:e5:79:e3:a4:33:89:4e:a6:3f:2c:b0:05:
                    ed:c2:0f:9e:1d:31:88:25:ee:a3:7b:25:b3:62:28:
                    a6:bc:8b:23:23:79:71:1f:9b:3b:1d:eb:eb:77:4b:
                    ab:d5:49:03:df:df:c7:19:22:e8:48:81:a8:cd:04:
                    d2:c1:16:eb:37:58:81:d7:c6:84:8a:2c:8b:8a:16:
                    0e:3d:4d:e1:a4:c7:a8:62:a9:5a:ef:7b:d1:70:d3:
                    4b:3e:06:17:ac:9d:73:53:dc:64:76:05:6a:0e:b5:
                    af:ef:f7:15:a1:b6:b7:73:a4:88:fe:45:fb:21:22:
                    5f:be:de:69:e2:cd:96:e4:de:4d:92:c4:6e:8b:6c:
                    d2:83:90:12:b3:a6:14:20:16:f1:28:d2:7d:3c:ba:
                    f5:f3:35:b6:f8:57:8c:68:80:fe:e2:bf:12:7c:be:
                    e0:62:3e:6d:78:f5:90:4d:cf:63:62:20:e1:c9:16:
                    2c:ff:a7:ef:a5:2b:39:50:0b:b4:2e:35:f5:51:ef:
                    53:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6B:0B:8B:81:76:1D:4C:1F:79:C9:1F:05:32:50:C4:7A:84:CB:B9:0D
            X509v3 Authority Key Identifier:
                keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/2219B3D249F611ED86C3FE46C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.157.222.0/23
                  103.187.64.0/23

    Signature Algorithm: sha256WithRSAEncryption
         66:72:d9:51:0c:ed:c1:7d:97:fe:ce:f4:24:a6:72:cc:13:f9:
         b5:1b:d1:fc:69:f6:82:52:97:63:ab:7d:b4:ed:b6:27:c5:c4:
         26:8e:5a:88:d4:24:67:9b:03:1e:e4:5d:7c:30:1c:1b:e4:3f:
         ea:d4:22:ad:a5:4a:a0:e9:44:b2:6e:ec:f6:83:c5:ec:99:d7:
         93:e5:a4:63:31:1a:2b:2c:41:21:2a:d8:af:69:d2:81:e5:aa:
         ca:ae:d5:11:13:48:b9:18:bf:35:6f:7b:b9:c5:fc:db:78:82:
         02:52:68:7f:d4:82:a3:ef:09:65:50:18:83:59:12:a8:a7:bc:
         d8:a2:d4:9f:29:ce:fc:19:2a:34:6d:fd:4d:d8:14:53:16:5e:
         93:b3:4b:8e:ef:0e:4e:17:1e:e9:c8:d3:4b:84:6e:ba:c6:2f:
         68:bf:61:17:10:14:ee:ee:70:77:ac:e3:6e:f9:4c:9b:3f:48:
         a4:4d:6e:5c:f8:e3:47:dd:00:af:c9:4a:79:7e:e3:cf:ba:fe:
         8b:5d:71:d4:5a:90:a2:fb:94:a7:9f:54:91:62:1b:52:7f:12:
         92:2b:de:07:20:5f:92:22:6c:46:6a:4e:0a:a7:f3:d8:dc:1a:
         15:1f:0d:19:bb:01:ed:0e:8c:37:cb:a5:fd:75:4d:4e:00:31:
         40:a2:34:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 27 10:19:28 2024 by rpki-client on console-ams.rpki-client.org