Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/442118BEC60011ECBFBA5626C4F9AE02.roa
File:                     442118BEC60011ECBFBA5626C4F9AE02.roa (raw, json)
Hash identifier:          yNtztGjhXIIAGmP13kG2VVdvMBcBQbhrLpp7dnxovS8=
Subject key identifier:   9C:CF:D1:95:28:A9:D7:EB:0D:C0:DA:10:96:98:3A:49:2A:D5:59:BB
Certificate issuer:       /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Certificate serial:       791F
Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/442118BEC60011ECBFBA5626C4F9AE02.roa
Signing time:             Fri 01 Sep 2023 05:53:54 +0000
ROA not before:           Fri 01 Sep 2023 05:53:54 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     136681
IP address blocks:        103.185.106.0/23 maxlen: 24
                          2001:df0:9740::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
                          rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 03 May 2024 15:38:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 31007 (0x791f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
        Validity
            Not Before: Sep  1 05:53:54 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=64f17c72-e023
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:7e:46:87:b3:7f:bf:3c:11:bc:b1:05:ac:d5:
                    e8:ac:cc:26:c9:b3:89:d6:d0:f7:ef:2d:cc:eb:81:
                    6e:6f:de:82:ad:c1:9a:b5:96:cb:b6:f0:ea:8b:27:
                    3f:06:d6:49:8d:a1:af:6f:1c:7f:7d:52:8e:8a:e4:
                    82:c7:27:12:3b:fb:73:ea:22:25:d3:6e:f9:ce:ff:
                    97:c5:47:0a:6b:e4:77:1b:37:af:42:bd:0e:5f:a5:
                    09:25:e0:38:cf:b3:ec:ae:42:34:62:ee:75:75:80:
                    6c:d8:16:96:90:0f:aa:aa:90:de:5e:dd:f9:93:0f:
                    ab:2a:5b:69:26:ee:d2:d9:ad:4d:42:94:9f:e4:3e:
                    37:21:40:ba:5a:78:fe:49:1a:c1:93:68:77:7b:56:
                    98:d3:50:53:85:24:e7:ca:d8:a8:3a:ff:68:b2:9d:
                    21:56:d2:9a:64:21:f9:01:a8:a1:8e:5d:b3:5d:c6:
                    e9:7f:c5:c6:99:76:1c:6f:ff:cc:6b:4a:55:f7:cf:
                    9d:64:f1:07:13:2d:35:32:8f:8d:ae:1b:2d:c9:55:
                    e2:bd:29:c1:f1:53:ee:71:d7:f4:85:47:33:bb:23:
                    c3:06:3a:40:5a:6f:16:30:ff:40:5b:6d:db:14:4b:
                    7c:98:0c:04:d5:2d:cf:40:1e:20:56:44:5a:dd:fe:
                    e8:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9C:CF:D1:95:28:A9:D7:EB:0D:C0:DA:10:96:98:3A:49:2A:D5:59:BB
            X509v3 Authority Key Identifier:
                keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/442118BEC60011ECBFBA5626C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.185.106.0/23
                IPv6:
                  2001:df0:9740::/48

    Signature Algorithm: sha256WithRSAEncryption
         af:4f:5e:29:af:90:f1:e9:71:e6:7c:c0:ff:b8:2c:46:c5:b2:
         c2:43:b1:fc:aa:ae:87:7a:62:b5:11:69:82:aa:fb:ab:9b:4a:
         bc:3e:0b:83:05:f5:a8:05:10:f8:88:51:d4:7b:f6:2d:a2:66:
         70:25:2b:f6:b4:6b:52:e6:58:48:e3:2c:70:34:9f:5c:71:49:
         cc:49:ea:0f:f0:58:5c:7b:a3:25:8a:af:53:95:d0:c6:bb:e3:
         e7:a4:f2:4e:40:34:43:a9:9e:c4:09:d0:05:92:4d:c3:a5:89:
         dc:40:d9:cb:5c:53:f8:97:9c:27:85:0b:c0:40:ae:9a:b8:e4:
         c9:d8:92:e8:7f:d3:2e:cb:ad:78:37:38:73:20:55:b2:5a:d9:
         07:1c:fa:94:03:cf:20:6b:0f:4f:fb:99:91:da:93:6e:af:6d:
         c7:1e:de:92:30:c1:52:28:63:5f:29:87:f8:69:55:34:1c:4a:
         82:4a:db:aa:32:5e:54:54:51:16:b5:ef:b7:84:f7:43:8f:f7:
         58:c1:7d:2c:08:a1:f8:09:1c:84:bc:e5:02:1b:45:40:0d:69:
         de:db:4e:7f:b7:9f:94:22:b7:20:61:d2:3d:17:45:ef:6c:5b:
         96:5a:9a:2f:fb:07:3f:f7:4a:83:5d:33:23:b5:4d:83:d9:99:
         36:3d:81:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 27 10:19:30 2024 by rpki-client on console-ams.rpki-client.org