Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/2D4538140CB911EDB97A510AC4F9AE02.roa
File:                     2D4538140CB911EDB97A510AC4F9AE02.roa (raw, json)
Hash identifier:          +MGE8OagoYxYNQHKJebZ+syq66xXXjWBLTxZFKljs4A=
Subject key identifier:   EE:77:21:49:6C:FC:79:29:AA:F8:21:CB:B6:18:B0:82:F5:48:D7:83
Certificate issuer:       /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Certificate serial:       702C
Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/2D4538140CB911EDB97A510AC4F9AE02.roa
Signing time:             Wed 10 May 2023 16:42:19 +0000
ROA not before:           Wed 10 May 2023 16:42:19 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     149206
IP address blocks:        103.178.192.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
                          rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 03 May 2024 15:38:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 28716 (0x702c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
        Validity
            Not Before: May 10 16:42:19 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=645bc96a-5f30
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:b6:61:55:e5:7d:29:23:61:d2:28:bc:95:87:
                    1b:14:aa:4d:ab:62:bf:0d:be:bd:19:2b:17:05:d6:
                    2f:c3:57:f4:b7:88:0c:18:65:00:61:b1:74:8c:d5:
                    b1:b3:9d:7d:d3:a5:4d:87:29:17:8e:8c:2c:82:d4:
                    12:ea:eb:c7:b4:3a:d2:55:a3:9e:a7:88:6f:3a:1d:
                    36:46:2d:0d:92:c8:64:19:b6:e5:9e:fe:8b:f1:69:
                    1d:bc:46:cf:1d:fc:56:cc:c8:9b:b3:c7:d1:f2:45:
                    4d:42:4e:59:36:ea:a5:85:b4:ed:1e:25:09:88:b5:
                    09:d2:eb:6b:f7:95:45:ea:f4:ba:05:1f:01:80:25:
                    5a:1b:7f:bd:2f:78:7b:9a:2e:76:ee:0f:e1:49:25:
                    87:e2:86:e9:28:54:d3:9e:cc:16:5d:7e:30:8b:45:
                    18:89:43:cf:0a:a9:39:ac:d3:3b:db:17:e9:10:17:
                    23:70:81:07:9a:ca:8b:37:84:3c:95:c2:ac:3a:e3:
                    3f:9b:5b:4a:a4:06:00:ba:fa:33:7e:44:e4:dc:9b:
                    04:85:92:93:61:61:2b:9b:02:ee:6b:e9:ce:7c:19:
                    c6:2e:98:ee:94:0b:5e:31:9d:d6:4f:34:a9:bd:6d:
                    d8:d6:b1:5e:a3:89:1d:04:4f:46:b6:3a:e8:9f:d1:
                    7f:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EE:77:21:49:6C:FC:79:29:AA:F8:21:CB:B6:18:B0:82:F5:48:D7:83
            X509v3 Authority Key Identifier:
                keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/2D4538140CB911EDB97A510AC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.178.192.0/24

    Signature Algorithm: sha256WithRSAEncryption
         71:e0:fa:89:8e:f0:86:b8:8c:11:cc:d9:fc:e4:d6:a2:85:73:
         1c:ea:7a:ee:87:eb:62:c7:7b:1d:24:25:a3:a0:38:20:a1:22:
         11:3b:70:fd:5a:59:31:a0:87:12:58:12:94:31:2a:e2:d3:be:
         e3:1b:d5:bb:b0:26:ac:58:d3:a1:00:ed:72:2f:8b:23:61:71:
         67:b3:c7:a6:71:8d:18:8b:b4:26:b1:f2:51:c8:1f:ef:1c:35:
         3b:4d:09:6d:e6:34:fc:f6:91:ea:39:9e:eb:c7:34:6e:fd:80:
         cb:dc:c6:de:31:f2:ad:f4:16:f2:e4:c7:24:22:5d:fb:37:96:
         f9:c8:fa:51:6b:0c:30:90:f3:5f:2e:27:f4:9f:d2:94:3f:6f:
         5d:c1:d3:43:8d:36:38:16:5c:c0:c6:a6:47:95:0d:81:2f:66:
         36:9e:9b:72:3d:27:53:ed:b4:9e:99:35:b2:84:35:ca:95:6a:
         d6:10:b7:92:6d:14:54:d7:10:b2:d7:07:5e:73:90:8a:ef:44:
         42:a6:70:c4:90:30:7d:f7:53:7b:63:5f:07:13:71:c9:fc:c1:
         13:fb:a9:98:b5:30:89:27:b3:74:30:c7:04:f3:1b:03:b4:d7:
         6b:37:0e:1c:3d:eb:c4:6e:49:55:c8:d6:74:f6:49:0b:96:3f:
         34:05:7e:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 27 10:19:29 2024 by rpki-client on console-ams.rpki-client.org