Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/444F0E48BFED11EE984DE054C4F9AE02.roa
File:                     444F0E48BFED11EE984DE054C4F9AE02.roa (raw, json)
Hash identifier:          xxSN2ciGVkITDqVFZWXQ4fFuDev0Cuk3ldUdrMutut0=
Subject key identifier:   9C:C0:14:3E:F2:E4:46:09:29:27:9A:D5:3E:76:3B:76:E4:69:7A:C8
Certificate issuer:       /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Certificate serial:       823C
Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/444F0E48BFED11EE984DE054C4F9AE02.roa
Signing time:             Wed 31 Jan 2024 04:00:27 +0000
ROA not before:           Wed 31 Jan 2024 04:00:27 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     19905
IP address blocks:        103.187.183.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
                          rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 03 May 2024 15:38:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 33340 (0x823c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
        Validity
            Not Before: Jan 31 04:00:27 2024 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=65b9c5db-65a7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:13:59:7c:37:a6:f2:62:f1:da:fc:f5:8c:40:
                    69:bb:37:98:23:5b:1f:15:f2:14:f9:7a:53:52:22:
                    94:e7:34:4f:8b:dd:7c:e5:2b:a2:e7:32:0b:d8:3d:
                    d6:f8:5b:ec:a4:be:35:58:06:dd:4e:db:b1:a9:41:
                    98:a9:24:6f:39:b8:29:2f:21:09:53:9e:ff:de:e3:
                    17:2b:a7:cf:4e:0f:b1:55:7c:f5:c6:50:85:3f:b5:
                    fd:5a:2f:48:d2:31:c4:74:99:6a:26:e3:b8:a1:ba:
                    d3:82:fa:e5:27:c7:3e:dc:1f:4d:f4:ba:0e:4e:ff:
                    e3:fa:58:37:85:b7:6a:00:57:57:a0:0a:53:bc:0c:
                    af:88:6a:0f:70:68:c9:f0:26:60:fd:0d:19:22:b5:
                    9c:9f:e5:12:bb:aa:58:f0:35:79:0b:e3:dd:c9:69:
                    b7:c5:bf:70:d2:a4:50:4c:ab:87:a1:23:aa:75:d3:
                    64:06:9f:8b:fe:04:e1:78:5a:51:0e:c7:d9:6d:ae:
                    a4:97:64:33:b5:73:2d:6a:ca:88:0e:8e:de:8c:21:
                    18:84:d1:4f:f5:71:26:32:3d:d5:8c:bd:34:9b:94:
                    19:f0:97:f8:b1:85:d7:5a:e8:03:26:50:38:9b:f3:
                    e1:83:12:fd:b8:6d:1b:13:55:d3:14:b1:aa:63:b7:
                    f3:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9C:C0:14:3E:F2:E4:46:09:29:27:9A:D5:3E:76:3B:76:E4:69:7A:C8
            X509v3 Authority Key Identifier:
                keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/444F0E48BFED11EE984DE054C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.187.183.0/24

    Signature Algorithm: sha256WithRSAEncryption
         b9:b1:73:cd:16:37:27:db:20:41:39:57:b1:8e:c5:e5:20:e8:
         8e:18:57:d6:a7:d5:7a:15:4c:57:f6:5c:36:db:d2:4c:40:78:
         d5:4d:20:31:ae:22:8d:98:d5:0c:bc:86:61:8a:6e:21:a0:47:
         c4:6f:71:23:e8:82:45:4e:ad:81:1f:b2:b4:17:d5:27:92:fb:
         12:b2:ec:58:5b:66:5d:b0:74:b8:7b:3d:db:b2:f4:c6:2e:cb:
         47:cf:74:60:62:90:d5:37:ac:ef:7c:00:13:64:ad:85:46:8e:
         f7:2f:77:69:41:03:7b:dc:33:12:f0:e9:17:f3:b7:d9:64:ba:
         da:a0:1e:78:60:7c:9e:ff:57:e0:a1:8c:58:d3:a6:fc:9a:39:
         83:23:84:74:1a:05:ba:f1:07:cd:40:35:6d:75:90:8f:2c:7d:
         2b:fd:66:6d:42:31:3a:e6:dc:60:86:28:ef:cd:de:36:b3:a0:
         55:0f:27:15:7d:98:0c:83:90:94:72:7f:31:a3:67:96:b2:43:
         f0:c7:29:bf:cd:56:e8:2a:ef:3c:f8:4e:d1:0d:1f:d7:b4:41:
         aa:24:48:84:c3:43:96:6c:dd:66:07:b8:d3:cf:20:f4:60:59:
         b7:c5:09:7f:8e:80:bb:f2:93:ed:b1:68:bb:5b:78:47:0a:56:
         95:8b:53:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 27 10:19:30 2024 by rpki-client on console-ams.rpki-client.org