Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/51D04AF27CFD11ED8F07F863C4F9AE02.roa
File:                     51D04AF27CFD11ED8F07F863C4F9AE02.roa (raw, json)
Hash identifier:          oA7qNyas4L/9O4oluMh/lwe54rP48VyGDzgSA/nJE0k=
Subject key identifier:   F1:F6:87:1A:54:FC:CB:B1:63:76:2F:9D:C8:72:64:0A:23:9F:3E:2B
Certificate issuer:       /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Certificate serial:       7105
Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/51D04AF27CFD11ED8F07F863C4F9AE02.roa
Signing time:             Wed 10 May 2023 16:46:15 +0000
ROA not before:           Wed 10 May 2023 16:46:15 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     150579
IP address blocks:        103.181.22.0/23 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
                          rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 03 May 2024 15:38:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 28933 (0x7105)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
        Validity
            Not Before: May 10 16:46:15 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=645bca57-ab07
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:ba:ee:aa:76:37:39:d4:1a:cb:ec:02:ba:f1:
                    4a:8c:b3:1e:55:d8:5a:4a:25:a9:a3:f9:15:58:2e:
                    3c:83:24:e8:0c:af:01:76:d5:97:a2:2b:f8:9f:ae:
                    c5:21:02:c3:b9:21:16:03:58:f6:2e:5b:7f:4c:fe:
                    a3:c0:d7:c3:ca:23:a1:de:d8:00:a9:31:35:2c:c5:
                    2b:88:4e:21:4d:55:51:80:07:a3:50:40:3b:44:56:
                    29:c7:e8:43:01:7c:0f:71:c8:ae:2e:cb:7b:e9:b8:
                    41:59:02:9b:f5:67:9e:48:16:22:ac:8d:ba:6c:3f:
                    9b:26:45:da:c6:29:f6:57:76:4c:f6:99:d1:da:50:
                    85:99:21:be:43:17:42:d6:d9:3e:23:34:43:34:bb:
                    b5:54:8d:b5:02:20:03:b0:6e:b3:b7:e6:ff:cf:16:
                    97:33:ce:c7:63:ee:99:74:69:32:80:ef:ee:ea:73:
                    e4:80:a0:4f:2b:1d:58:26:a6:23:e7:0e:e8:cf:21:
                    14:b5:9a:93:db:1f:e3:22:65:19:af:ec:50:39:ca:
                    ab:8b:57:1c:fd:67:5f:0d:43:06:55:94:25:ac:0a:
                    8d:87:b4:64:f7:28:f5:47:2f:fa:94:4a:4a:d1:56:
                    fa:f8:9f:61:98:7c:e4:6b:8e:bd:56:f7:7d:d9:92:
                    b7:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F1:F6:87:1A:54:FC:CB:B1:63:76:2F:9D:C8:72:64:0A:23:9F:3E:2B
            X509v3 Authority Key Identifier:
                keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/51D04AF27CFD11ED8F07F863C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.181.22.0/23

    Signature Algorithm: sha256WithRSAEncryption
         b3:5f:6e:8b:a6:c7:7e:90:ab:37:26:9a:8e:bf:30:b8:60:ef:
         a6:e1:8f:a8:71:13:5e:74:52:7b:20:c9:eb:b9:1e:89:2e:04:
         a5:d0:00:76:9e:cd:ca:2d:8a:09:2c:e9:b7:fa:d2:e1:d5:ca:
         74:f1:18:df:7b:81:d2:3f:44:07:cb:52:b1:0d:d5:6e:de:f4:
         68:dd:fb:e5:74:28:92:b4:ab:37:4d:6a:5c:44:4d:be:6d:6d:
         16:56:2f:57:29:70:b5:fb:80:d2:98:69:13:66:70:dd:61:26:
         da:1e:eb:a3:6f:4c:48:e0:4f:ec:d2:7f:7f:76:87:1a:f7:68:
         17:8a:0e:bb:d7:c3:5c:1f:05:b3:c3:d4:7f:1d:63:19:5a:67:
         0b:16:41:43:61:9e:20:fe:ba:12:16:ff:dc:71:bd:d7:af:ec:
         6c:62:27:46:d1:1f:dd:5d:b6:ab:d8:3a:7d:2f:b7:f5:f0:91:
         61:9c:e5:0e:73:18:47:c2:b7:fe:72:ad:eb:17:aa:54:e1:01:
         21:2e:b6:24:c4:96:bb:66:cd:a9:2f:7b:9d:ae:cc:a9:5d:9f:
         ff:77:90:cf:99:4c:7e:48:64:96:ca:98:83:46:14:a4:6e:15:
         4c:54:28:c0:06:68:02:a3:26:5a:2a:ad:b7:59:66:a7:75:c1:
         0b:c8:38:33
-----BEGIN CERTIFICATE-----
MIIFcTCCBFmgAwIBAgICcQUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
OEVEQjIxMTAvBgNVBAUTKDI5NkVEQjY0RjNBRjZFOUQ5ODA5MzJFODE2Rjk1OTgz
RTNBQkM4MjMwHhcNMjMwNTEwMTY0NjE1WhcNMjQwNzAxMDAwMDAwWjAYMRYwFAYD
VQQDEw02NDViY2E1Ny1hYjA3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA0bruqnY3OdQay+wCuvFKjLMeVdhaSiWpo/kVWC48gyToDK8BdtWXoiv4n67F
IQLDuSEWA1j2Llt/TP6jwNfDyiOh3tgAqTE1LMUriE4hTVVRgAejUEA7RFYpx+hD
AXwPcciuLst76bhBWQKb9WeeSBYirI26bD+bJkXaxin2V3ZM9pnR2lCFmSG+QxdC
1tk+IzRDNLu1VI21AiADsG6zt+b/zxaXM87HY+6ZdGkygO/u6nPkgKBPKx1YJqYj
5w7ozyEUtZqT2x/jImUZr+xQOcqri1cc/WdfDUMGVZQlrAqNh7Rk9yj1Ry/6lEpK
0Vb6+J9hmHzka469Vvd92ZK3owIDAQABo4IClTCCApEwHQYDVR0OBBYEFPH2hxpU
/MuxY3YvnchyZAojnz4rMB8GA1UdIwQYMBaAFClu22Tzr26dmAky6Bb5WYPjq8gj
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4RURCMi8yQTQzRTMwQzcw
RTkxMUUyQjM2RDRCNkIyOTc5QkIyMC9LVzdiWlBPdmJwMllDVExvRnZsWmctT3J5
Q00uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0tXN2JaUE92YnAyWUNUTG9GdmxaZy1PcnlDTS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
OEVEQjIvMkE0M0UzMEM3MEU5MTFFMkIzNkQ0QjZCMjk3OUJCMjAvNTFEMDRBRjI3
Q0ZEMTFFRDhGMDdGODYzQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E
EDAOMAwEAgABMAYDBAFntRYwDQYJKoZIhvcNAQELBQADggEBALNfboumx36Qqzcm
mo6/MLhg76bhj6hxE150Unsgyeu5HokuBKXQAHaezcotigks6bf60uHVynTxGN97
gdI/RAfLUrEN1W7e9Gjd++V0KJK0qzdNalxETb5tbRZWL1cpcLX7gNKYaRNmcN1h
Jtoe66NvTEjgT+zSf392hxr3aBeKDrvXw1wfBbPD1H8dYxlaZwsWQUNhniD+uhIW
/9xxvdev7GxiJ0bRH91dtqvYOn0vt/XwkWGc5Q5zGEfCt/5yresXqlThASEutiTE
lrtmzakve52uzKldn/93kM+ZTH5IZJbKmINGFKRuFUxUKMAGaAKjJloqrbdZZqd1
wQvIODM=
-----END CERTIFICATE-----
Generated at Sun Apr 28 15:51:21 2024 by rpki-client on console-fra.rpki-client.org