Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/33515040B4CA11EC98A5C96CC4F9AE02.roa
File:                     33515040B4CA11EC98A5C96CC4F9AE02.roa (raw, json)
Hash identifier:          ytYToZrKJqian8SzL+3vzicl6bbMZU+nh/M1rcdy9BY=
Subject key identifier:   61:87:53:07:13:F8:D2:91:6C:E0:87:76:16:35:40:98:13:56:DC:EF
Certificate issuer:       /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Certificate serial:       705C
Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/33515040B4CA11EC98A5C96CC4F9AE02.roa
Signing time:             Wed 10 May 2023 16:43:14 +0000
ROA not before:           Wed 10 May 2023 16:43:14 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     149526
IP address blocks:        103.182.132.0/23 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
                          rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 05 May 2024 15:26:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 28764 (0x705c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
        Validity
            Not Before: May 10 16:43:14 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=645bc9a1-288c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:a6:0e:fd:6e:d4:3a:b5:97:6b:82:98:ba:e5:
                    e7:c5:0d:17:48:08:26:d8:bf:40:0b:b4:5c:e0:70:
                    7c:55:c3:e0:93:79:b8:fb:08:84:d7:99:1a:a9:a1:
                    a0:e8:4e:27:1c:e4:86:c2:46:ef:f8:88:55:c5:0b:
                    cf:eb:95:ae:b8:ed:8a:53:7c:1a:aa:98:6a:60:de:
                    d8:34:ee:97:8a:ac:3f:5b:0c:28:6e:82:6e:0d:c5:
                    b2:11:62:e1:d9:c1:bd:6a:6b:dc:31:dc:68:d4:e5:
                    8e:44:c1:ba:a0:0c:36:1c:b7:2d:88:46:ac:d9:1b:
                    ac:50:ca:27:2c:27:4f:e0:fb:b7:15:49:e8:49:4c:
                    9f:4b:b8:cd:9b:d2:bf:0e:9c:11:7e:47:6e:1b:96:
                    5e:32:4a:03:64:36:b0:87:28:bf:1b:ee:fc:a6:fc:
                    ac:5d:d7:96:95:ce:a2:89:0e:60:79:66:08:f4:f0:
                    87:b7:81:c4:52:1f:fc:43:3b:7d:84:63:5d:07:e9:
                    42:45:12:fa:55:49:18:56:03:16:f2:dd:18:72:da:
                    cb:63:a5:df:07:e8:59:78:5c:d9:eb:f0:17:dc:0f:
                    51:46:25:07:d3:fe:19:f5:be:d1:5d:ee:04:b4:80:
                    23:2d:f9:0d:7e:91:8a:14:93:e9:df:06:88:f4:4f:
                    54:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                61:87:53:07:13:F8:D2:91:6C:E0:87:76:16:35:40:98:13:56:DC:EF
            X509v3 Authority Key Identifier:
                keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/33515040B4CA11EC98A5C96CC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.182.132.0/23

    Signature Algorithm: sha256WithRSAEncryption
         5b:d8:ed:f9:e9:f1:1c:f2:cd:65:14:84:6f:04:7c:0c:59:23:
         34:c7:2b:4b:ae:80:a5:f6:c3:ff:7a:ba:50:4f:ae:e9:ce:5c:
         51:38:81:33:d2:df:8b:90:5c:d9:4d:e3:f1:82:94:2b:1c:e8:
         1a:c2:7b:7d:8b:8a:a5:f7:68:74:61:a4:92:9a:d3:8a:36:cf:
         54:d8:05:50:57:a3:e2:ca:a2:97:df:03:ce:7a:65:40:0a:ef:
         15:d9:9a:22:dd:15:e5:e5:d5:b5:66:4c:78:e8:c8:5d:bd:19:
         f0:07:31:8e:33:20:53:2e:44:18:17:71:6c:2b:8d:1b:a7:82:
         32:b8:8d:c9:b9:bb:50:d8:1b:d5:a9:f7:09:a8:f5:1a:5e:5a:
         69:bf:97:a9:94:4e:5b:24:7d:8b:cf:a4:9a:dc:f3:46:8f:1a:
         69:52:92:8f:51:0e:7e:c9:30:6a:49:8b:2e:52:62:63:4f:12:
         0b:97:d3:0c:e0:65:de:1b:a1:6d:f2:55:7a:37:a8:db:87:c1:
         da:f8:5a:d5:81:d0:9c:b7:91:4c:2f:e3:2a:d8:81:f3:05:9e:
         ab:17:fc:37:0f:76:e5:e5:90:5c:06:61:63:82:a8:66:8f:9c:
         64:6a:50:c3:13:4b:e4:3d:bd:80:b4:6b:46:fa:58:50:27:10:
         4c:73:13:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 28 16:49:16 2024 by rpki-client on console-ams.rpki-client.org