Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/546405B264D611EE8436BB1AC4F9AE02.roa
File:                     546405B264D611EE8436BB1AC4F9AE02.roa (raw, json)
Hash identifier:          BioA2gzxLdXsLSlYx5viD2tvLZB7ToDbGCRO1g+Jaug=
Subject key identifier:   FF:11:15:1F:9F:2C:A7:70:A5:99:B2:A5:2D:6F:D1:32:C7:82:73:E6
Certificate issuer:       /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Certificate serial:       7B6A
Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/546405B264D611EE8436BB1AC4F9AE02.roa
Signing time:             Sat 07 Oct 2023 05:57:00 +0000
ROA not before:           Sat 07 Oct 2023 05:57:00 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     137099
IP address blocks:        103.93.94.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
                          rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 03 May 2024 15:38:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 31594 (0x7b6a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
        Validity
            Not Before: Oct  7 05:57:00 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=6520f32b-3f24
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:fd:2c:d4:84:f5:a1:32:96:aa:91:6a:9e:36:05:
                    da:96:6c:75:56:8a:8e:50:0f:54:f7:68:e5:25:58:
                    1a:a5:34:f5:60:aa:12:ba:e0:a0:ae:bb:7f:58:53:
                    ef:00:b6:e6:a5:d0:b9:fb:cd:57:82:54:a5:3c:a0:
                    e4:07:d7:bc:1b:44:8b:a1:f9:63:7e:06:72:61:e2:
                    61:7b:aa:58:54:f8:b7:0e:b1:1d:39:06:29:65:79:
                    b0:32:92:a1:2b:4d:5f:54:8a:e7:6f:db:dd:0e:57:
                    ae:6e:bf:ca:ca:b9:15:43:07:57:ec:25:44:76:b1:
                    a7:d8:fd:20:18:25:cf:dc:fd:30:77:e3:23:6e:e2:
                    c3:57:b8:be:03:ce:23:42:ae:81:68:7d:03:17:c6:
                    9d:db:26:40:06:29:cb:0e:56:a5:13:bb:cd:94:65:
                    87:26:00:37:c9:df:8f:ff:1b:79:cd:97:3b:85:48:
                    7f:7b:f9:fc:8b:e4:d8:0c:5d:05:eb:56:f5:03:6b:
                    f5:4c:29:4c:99:af:e3:2c:30:48:3f:08:d0:7e:40:
                    97:f7:c9:5c:60:c6:d7:ef:d5:b4:f2:80:8e:11:6e:
                    4e:ae:8e:70:dd:74:2e:9c:bb:09:02:5a:32:2b:77:
                    3e:ef:d7:39:8b:c3:db:08:7e:09:a3:f6:63:43:2b:
                    96:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FF:11:15:1F:9F:2C:A7:70:A5:99:B2:A5:2D:6F:D1:32:C7:82:73:E6
            X509v3 Authority Key Identifier:
                keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/546405B264D611EE8436BB1AC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.93.94.0/24

    Signature Algorithm: sha256WithRSAEncryption
         66:74:53:00:ed:d2:cc:00:59:a7:70:bc:5d:81:16:60:9a:23:
         3c:73:bd:47:11:3a:fe:29:4f:54:d3:40:34:d6:97:ca:d3:aa:
         f4:47:79:50:a5:54:f4:5d:32:1a:a9:8c:08:65:cb:f4:19:7a:
         c5:10:e5:74:33:b6:41:d5:b2:8e:8f:c7:29:32:7a:0b:8b:89:
         60:26:23:39:05:95:8d:3f:5e:66:13:b3:26:e3:34:7c:32:64:
         e4:18:2d:b8:bf:c5:62:9e:38:50:09:a1:03:3d:93:29:0a:3d:
         e1:91:7f:8c:35:98:61:53:06:4b:d4:ec:11:5b:56:b7:b1:9a:
         64:f4:53:6b:c3:cc:23:87:b3:cf:13:76:f4:4c:12:02:13:2c:
         e6:3f:9f:d2:a1:9f:2b:22:29:ef:d8:63:d3:3f:87:9f:3a:dd:
         65:aa:47:bd:61:bf:aa:76:44:de:f8:88:a9:e3:95:8c:85:00:
         ef:f7:7e:12:7c:7f:37:58:ba:80:f0:8c:ec:63:4d:06:49:59:
         4e:2c:95:2b:a6:21:bd:44:ed:26:d1:f7:fa:21:72:e8:d9:e5:
         35:e0:22:f6:30:71:25:95:84:b6:9f:df:50:6b:90:65:ce:2a:
         1d:64:82:0b:5e:e4:69:57:f0:ff:5e:ab:5e:55:a2:46:14:2e:
         ad:21:91:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 27 10:19:33 2024 by rpki-client on console-ams.rpki-client.org