Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/3060D2AE37E111ECA9843980C4F9AE02.roa
File:                     3060D2AE37E111ECA9843980C4F9AE02.roa (raw, json)
Hash identifier:          g1hsst76QtpSP2vQljSVjGc3GDsTL5mPV9hKia65baA=
Subject key identifier:   3F:65:D6:2E:27:93:8A:2D:45:93:AE:FA:97:81:9F:3A:BC:79:40:8E
Certificate issuer:       /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Certificate serial:       6D2B
Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/3060D2AE37E111ECA9843980C4F9AE02.roa
Signing time:             Wed 10 May 2023 16:28:00 +0000
ROA not before:           Wed 10 May 2023 16:28:00 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     137631
IP address blocks:        103.114.152.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
                          rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 03 May 2024 15:38:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 27947 (0x6d2b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
        Validity
            Not Before: May 10 16:28:00 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=645bc60f-c948
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:46:f9:0c:90:88:03:3a:68:95:1f:8e:6a:df:
                    44:52:b7:f2:0d:31:bb:d3:1e:e7:76:f9:bc:a5:d7:
                    65:00:93:cd:27:25:36:92:58:f4:bb:9a:53:7a:f7:
                    8c:75:c6:f6:59:2e:5e:15:b6:28:71:6d:c2:e6:57:
                    e5:4c:f5:d3:92:1f:f0:ff:dc:dc:65:d1:84:eb:46:
                    0c:f4:24:1f:46:84:0d:f9:d4:c6:02:de:bb:a9:0d:
                    6b:30:7b:42:ca:86:35:7e:d7:94:65:a6:7c:57:2e:
                    ec:84:96:d7:67:f8:9d:1e:f8:53:ce:70:11:67:98:
                    27:d0:87:18:b7:49:26:21:f0:13:31:dc:33:d6:c4:
                    3f:bf:25:b3:6a:2a:aa:c2:b1:9c:19:6d:18:c1:96:
                    1b:ea:0e:71:8d:78:47:1f:8f:04:d6:0e:ff:60:d2:
                    b8:53:0f:94:36:26:0e:03:a7:e0:42:7b:97:e8:db:
                    19:e1:db:34:10:c8:9d:b1:7c:91:df:b6:13:98:38:
                    9b:d2:ef:b4:f9:d0:21:d8:24:35:3e:00:2f:89:5c:
                    51:0f:88:d0:42:e4:9c:6e:aa:4d:67:66:20:e9:ff:
                    a4:88:3b:b7:c2:10:68:d4:a8:10:f1:bf:60:ef:7d:
                    cf:db:cd:8c:e7:5c:f5:fb:2f:b3:ca:ca:7a:ba:f2:
                    aa:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3F:65:D6:2E:27:93:8A:2D:45:93:AE:FA:97:81:9F:3A:BC:79:40:8E
            X509v3 Authority Key Identifier:
                keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/3060D2AE37E111ECA9843980C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.114.152.0/22

    Signature Algorithm: sha256WithRSAEncryption
         69:4c:7d:6b:00:b6:83:14:2b:7a:4e:98:33:a0:e9:d2:71:16:
         0a:16:b8:e9:34:ef:f2:53:79:67:c9:98:17:82:d8:d1:1d:33:
         a3:97:a0:46:c4:d6:86:79:bc:50:45:3e:51:4b:86:78:8d:da:
         4d:26:d8:3c:de:23:78:e6:40:4c:ef:e3:fc:bc:27:80:fb:cc:
         a7:33:33:87:8e:35:0a:22:76:59:2c:93:18:6b:18:30:a9:ae:
         3e:71:d4:7b:03:6a:f1:9c:c4:15:37:e7:01:89:08:75:63:5a:
         fe:ff:7f:d0:df:d5:8e:28:a3:e5:26:5d:d2:9b:e0:78:c1:69:
         38:b0:49:16:4e:17:28:c9:e7:86:4a:9c:3d:eb:b4:dc:06:23:
         23:a7:32:f8:c0:04:fd:37:d3:f4:1a:a9:27:37:f1:b5:8d:df:
         83:95:b5:dc:8d:81:a2:68:0a:0b:05:4c:87:4f:19:ad:2a:e3:
         7d:b6:5f:a5:11:bc:63:76:43:e7:12:88:ae:2a:ef:8b:8e:32:
         32:0e:47:95:59:2e:7e:7d:8b:73:fe:9a:f3:d3:30:d0:6c:3f:
         ac:37:3f:41:b5:bf:ff:f4:c5:2f:14:38:c9:32:c6:56:31:b9:
         96:a6:08:39:2c:36:9d:a0:9e:a0:18:c2:89:1c:77:70:9b:af:
         e9:4f:28:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 27 10:19:29 2024 by rpki-client on console-ams.rpki-client.org