Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/3C272C4E067811EDBBC7F133C4F9AE02.roa
File:                     3C272C4E067811EDBBC7F133C4F9AE02.roa (raw, json)
Hash identifier:          4sD/XkgFBts1DNj6S4F7LXGdhachHQvmAtE/1UXf3T8=
Subject key identifier:   44:C1:3B:A8:06:07:20:CD:EB:01:A9:88:2F:9F:D6:45:7C:AC:8D:F7
Certificate issuer:       /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Certificate serial:       6B31
Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/3C272C4E067811EDBBC7F133C4F9AE02.roa
Signing time:             Wed 10 May 2023 16:18:27 +0000
ROA not before:           Wed 10 May 2023 16:18:27 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     134332
IP address blocks:        103.54.237.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
                          rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 03 May 2024 15:38:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 27441 (0x6b31)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
        Validity
            Not Before: May 10 16:18:27 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=645bc3d3-ae52
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:af:51:fd:25:84:14:1c:98:78:42:32:9a:0a:
                    a6:a6:83:eb:0e:09:6f:52:2e:b4:c8:fd:c5:6f:1e:
                    19:b3:ef:7b:c0:f5:89:58:6f:cb:c3:c2:8b:f5:28:
                    e0:ae:67:03:5f:1d:d8:30:54:2b:f3:1d:7b:2c:42:
                    e0:14:0c:04:02:44:73:9d:f5:1c:cb:70:19:1d:9f:
                    d0:ed:ca:da:2e:8c:b5:42:e0:98:cd:e0:b7:6a:11:
                    e0:e7:63:6b:53:a2:e5:0d:55:cb:53:0b:15:08:84:
                    96:90:70:68:fa:83:65:7d:f7:a2:ed:44:44:31:5a:
                    02:01:2f:44:c1:ae:20:84:b9:9c:c1:f9:ea:da:3b:
                    01:72:d1:67:80:c5:67:19:76:01:e6:52:9d:38:d8:
                    34:1f:95:d5:7d:f6:a3:bc:62:b6:00:c1:12:8c:04:
                    de:3f:81:ea:70:fd:83:3d:51:ac:e8:c8:3e:3d:fa:
                    fd:1a:1d:10:60:d5:87:25:27:9c:f8:ab:25:1b:f6:
                    81:29:41:a3:ce:0e:53:ee:0b:d6:0a:f9:b9:fb:ca:
                    cb:91:55:c8:4e:7a:7c:22:5c:41:ef:32:59:2e:3e:
                    ed:0d:90:2d:95:8d:78:76:6c:49:c9:b4:2a:60:aa:
                    0d:f6:38:fe:c6:44:f9:e2:b9:16:22:c4:84:99:14:
                    4a:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                44:C1:3B:A8:06:07:20:CD:EB:01:A9:88:2F:9F:D6:45:7C:AC:8D:F7
            X509v3 Authority Key Identifier:
                keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/3C272C4E067811EDBBC7F133C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.54.237.0/24

    Signature Algorithm: sha256WithRSAEncryption
         29:f2:79:5c:d9:02:42:2c:c0:7b:3d:e1:95:e4:7e:d4:b3:9a:
         3f:7e:a4:5c:1e:ef:09:de:6a:9e:56:9b:9f:a4:19:10:aa:ad:
         67:ec:12:1a:69:b0:2b:4d:8c:c0:07:55:a5:87:24:0f:39:74:
         f6:be:0b:72:40:b8:bc:30:2d:36:ab:50:f8:61:71:75:fe:61:
         39:7a:e4:07:88:76:b8:0a:7b:4c:e3:d2:21:20:e6:b6:c8:35:
         33:b6:94:87:55:01:55:81:0d:4d:0b:00:dd:08:31:2b:78:2b:
         12:a8:59:f2:d7:58:b7:4a:bd:06:c2:3e:94:24:a6:18:68:d6:
         5f:8f:e4:fb:17:4b:f2:84:dd:cd:88:11:61:d3:d4:50:7c:9e:
         e5:10:a1:11:03:6b:7c:63:ff:ab:4c:d3:5c:d5:de:aa:5d:31:
         5d:44:0e:75:5a:06:9f:66:33:1a:eb:04:6f:79:87:b8:47:13:
         30:1c:3c:82:13:76:6c:bd:2a:a1:2e:92:72:fa:ce:91:4f:ed:
         62:c4:d2:6d:a6:63:c6:20:d7:6e:7c:d5:88:8a:19:86:99:b1:
         6e:b2:a1:72:a3:03:6b:30:15:84:1b:02:7b:32:37:a3:50:97:
         18:8c:79:5e:2e:22:b6:a5:3f:a4:36:14:c3:a7:f8:b9:9e:02:
         2d:96:91:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 27 10:19:30 2024 by rpki-client on console-ams.rpki-client.org