Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/56B03810A3AF11EDB0DF814CC4F9AE02.roa
File:                     56B03810A3AF11EDB0DF814CC4F9AE02.roa (raw, json)
Hash identifier:          lVY1+0hVu/9SK0Vp2m9otfAoraiZHMvwgE0Sedbbtp4=
Subject key identifier:   FA:C4:13:09:39:EE:9B:34:75:8A:D9:DD:E7:13:04:FA:AF:6B:13:A1
Certificate issuer:       /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Certificate serial:       6D04
Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/56B03810A3AF11EDB0DF814CC4F9AE02.roa
Signing time:             Wed 10 May 2023 16:27:17 +0000
ROA not before:           Wed 10 May 2023 16:27:17 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     137168
IP address blocks:        103.187.132.0/23 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
                          rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 03 May 2024 15:38:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 27908 (0x6d04)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
        Validity
            Not Before: May 10 16:27:17 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=645bc5e5-cf12
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:5d:09:30:22:eb:3a:97:75:96:96:1d:54:5a:
                    f4:4e:fe:15:84:87:ed:63:3b:d9:2b:38:d0:bf:c7:
                    80:0c:0d:88:ab:65:fb:2f:e4:d6:ad:e8:28:75:fb:
                    49:c6:dc:06:6f:19:29:41:eb:36:41:43:c8:2d:09:
                    37:fc:d4:39:b6:c4:26:eb:d6:15:08:36:cc:be:29:
                    85:65:02:bc:94:d3:c9:e6:d5:ca:d2:a0:f1:d8:67:
                    4f:65:d0:44:ed:2f:5c:2d:31:cb:da:a0:da:32:9d:
                    31:10:14:97:da:84:71:29:71:d2:2a:f8:20:84:ac:
                    bb:a3:20:f2:4c:3e:35:a3:77:b2:75:c0:89:0f:42:
                    88:5e:ac:6b:28:c6:f3:5d:fe:1e:ad:9c:95:f7:a3:
                    59:1d:d7:ee:48:e3:23:dc:f7:d8:c7:99:d3:99:90:
                    d7:21:df:11:1c:2a:ba:b1:20:3f:b6:1c:b2:76:03:
                    aa:9b:eb:81:4a:64:7d:48:8f:69:66:f4:31:04:11:
                    b6:8f:7d:18:0c:d4:f0:d6:59:18:a3:75:6c:fb:2f:
                    45:5e:b1:5f:22:ec:00:e2:4a:4a:e3:c3:77:d0:c0:
                    4e:6a:16:4c:39:a3:c2:23:5c:fd:d6:58:c3:9c:68:
                    59:e6:f1:fa:a6:a5:a4:a6:01:11:b2:f4:7e:cb:4a:
                    86:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FA:C4:13:09:39:EE:9B:34:75:8A:D9:DD:E7:13:04:FA:AF:6B:13:A1
            X509v3 Authority Key Identifier:
                keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/56B03810A3AF11EDB0DF814CC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.187.132.0/23

    Signature Algorithm: sha256WithRSAEncryption
         48:da:16:e2:c8:d4:f9:c0:09:20:c2:1b:bb:0a:4c:c8:6c:9c:
         51:70:56:f3:33:0d:00:ae:d9:9e:ac:2b:c7:2f:bd:33:65:67:
         ea:df:a8:e2:a2:0c:50:1b:af:de:37:f7:d1:10:f8:8b:6a:7a:
         d4:3e:9d:e7:61:03:37:9f:6a:f1:f8:8e:20:7b:99:00:c5:48:
         89:80:6d:0b:29:1e:4c:5a:91:03:6a:7a:93:71:75:06:8d:d0:
         b0:ce:d9:96:d3:b7:0b:6c:30:4d:5e:73:6a:bb:1e:73:36:8f:
         34:ba:85:be:32:a8:6a:38:c3:0c:41:1d:99:ce:76:57:e0:54:
         14:e7:57:3b:af:15:4b:a8:c9:ec:b5:e5:5d:54:34:1e:36:7a:
         6f:a3:a5:60:08:41:53:98:64:fb:80:3a:d9:f8:4f:8a:30:26:
         52:1d:30:96:ea:7b:21:6a:36:fd:4c:f3:d1:86:64:6b:51:87:
         7a:0f:05:d2:9d:fc:9a:65:ab:23:e5:34:98:33:12:d5:fa:d3:
         e3:54:be:a3:03:f4:b8:48:f0:34:e9:19:df:82:b1:f0:e5:c3:
         86:e0:5f:de:6e:be:78:cc:70:23:a4:4c:8d:58:3f:c0:58:8b:
         62:63:20:8e:1f:4d:a3:3a:ad:e6:2b:74:c6:af:a8:05:60:2a:
         a2:e8:69:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 27 10:19:33 2024 by rpki-client on console-ams.rpki-client.org