Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/45274ECE8B0D11EB944D2D33C4F9AE02.roa
File:                     45274ECE8B0D11EB944D2D33C4F9AE02.roa (raw, json)
Hash identifier:          3NhZgRIk6UbQ96fjDKpHUf5Olwi53bK79it0LlKLhWY=
Subject key identifier:   F4:A5:8C:69:97:FC:26:92:4F:CB:72:94:CB:5C:3A:C3:E9:80:AB:3B
Certificate issuer:       /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Certificate serial:       6EF9
Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/45274ECE8B0D11EB944D2D33C4F9AE02.roa
Signing time:             Wed 10 May 2023 16:36:34 +0000
ROA not before:           Wed 10 May 2023 16:36:34 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     141788
IP address blocks:        103.163.198.0/23 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
                          rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 03 May 2024 15:38:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 28409 (0x6ef9)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
        Validity
            Not Before: May 10 16:36:34 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=645bc812-ae6f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:94:20:c0:41:f6:d8:21:b5:2c:cf:12:bb:83:
                    f3:5e:56:bb:18:71:29:7d:5c:70:15:50:91:b2:3c:
                    02:86:07:a6:74:e0:40:5f:ad:09:c9:94:6c:a8:96:
                    f0:69:0a:0c:92:a5:fd:f5:ba:35:20:37:94:e8:89:
                    d2:37:64:fa:76:19:0a:c9:18:9b:1a:1e:88:4f:dd:
                    ec:01:61:f0:a8:9c:ba:fa:4f:f0:c2:50:c5:73:91:
                    bc:08:26:3f:da:c6:1c:46:6a:16:14:af:6d:d4:de:
                    ba:09:1e:44:8f:76:02:7c:15:f3:5f:7f:09:02:27:
                    99:c1:41:57:be:8a:6c:0a:d1:d1:70:10:6c:d3:1a:
                    06:0f:61:39:61:43:42:ed:2a:e3:ae:68:2d:fb:93:
                    94:51:4d:18:bf:98:0f:d7:fb:3b:22:d1:37:c8:1c:
                    cd:5a:c9:80:b1:72:ef:62:2e:9e:95:bf:39:e5:4e:
                    fb:bb:12:cf:5e:ba:db:4c:40:9c:26:75:c6:30:1e:
                    5c:6e:2e:32:2f:2e:0e:13:01:eb:f6:b7:52:9a:0d:
                    18:fc:8f:52:3e:de:b1:4d:66:b2:c8:16:b2:81:ea:
                    10:4b:c0:04:ff:e5:5f:62:f7:d8:4a:c0:0f:ed:37:
                    b2:0c:44:7a:09:15:f5:98:8a:3f:80:8e:49:5a:42:
                    36:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F4:A5:8C:69:97:FC:26:92:4F:CB:72:94:CB:5C:3A:C3:E9:80:AB:3B
            X509v3 Authority Key Identifier:
                keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/45274ECE8B0D11EB944D2D33C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.163.198.0/23

    Signature Algorithm: sha256WithRSAEncryption
         9b:b6:bd:45:dc:25:2f:99:95:77:11:0e:0e:aa:21:5e:eb:1b:
         4e:93:b8:b9:b3:34:6a:11:18:35:48:9e:5c:70:83:60:5f:4d:
         b2:fb:2a:0a:b7:18:5a:e9:e8:28:16:6c:ac:04:b7:43:96:8b:
         59:9c:ee:73:66:8f:b1:c7:26:3b:8d:ad:3b:0c:2c:df:46:1a:
         14:7e:2a:33:63:ee:21:3d:7c:72:d3:0d:84:db:81:06:04:31:
         f1:20:67:e7:3a:58:99:e6:06:6e:6b:2e:f8:90:d4:c9:3b:73:
         a6:22:fc:86:84:35:2b:b7:78:0c:b2:99:1d:f1:07:b1:ad:ce:
         d5:4a:e3:6c:c7:cd:cf:c1:37:bc:fe:17:ff:c6:a4:e0:a8:26:
         5c:33:60:07:7d:3e:ab:ef:af:19:76:a4:2e:20:8d:37:1c:30:
         41:da:d4:6e:54:26:12:37:0f:04:a1:b6:27:0d:b5:28:b5:47:
         0d:9a:7a:b9:31:e8:37:7b:c8:db:1c:04:e7:87:ee:ed:fb:43:
         c6:88:99:73:d6:5f:de:d6:82:44:33:09:ab:9f:22:83:d4:01:
         4d:59:b5:df:b0:89:46:33:2d:8e:32:43:58:0d:e0:58:fb:97:
         41:95:0d:be:4f:f4:ca:12:71:67:c3:7c:51:ac:95:f0:b0:e0:
         ce:72:7e:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 27 10:19:30 2024 by rpki-client on console-ams.rpki-client.org