Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/5845933C7CD311EB98250761C4F9AE02.roa
File:                     5845933C7CD311EB98250761C4F9AE02.roa (raw, json)
Hash identifier:          4C3CCdZwQ10H21Ol5F8ouOqmOegt16qp5+lzJL/O8W8=
Subject key identifier:   35:23:D0:98:38:20:6F:9A:BF:0F:A0:C1:F2:64:F9:EF:47:92:91:59
Certificate issuer:       /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Certificate serial:       6EDC
Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/5845933C7CD311EB98250761C4F9AE02.roa
Signing time:             Wed 10 May 2023 16:36:02 +0000
ROA not before:           Wed 10 May 2023 16:36:02 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     141547
IP address blocks:        103.163.58.0/24 maxlen: 24
                          103.164.67.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
                          rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 03 May 2024 15:38:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 28380 (0x6edc)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
        Validity
            Not Before: May 10 16:36:02 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=645bc7f2-da2b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:62:ca:95:2e:d8:e7:9d:a3:2e:4c:b6:cf:73:
                    0f:66:d9:08:82:95:1d:08:4e:ee:29:4c:6d:9b:9f:
                    fc:f0:e5:a2:d8:3b:b9:72:0b:5b:76:bc:79:42:b8:
                    c1:77:6a:06:3d:2c:f9:5c:c1:29:7f:48:77:da:c9:
                    16:1f:0f:8d:dd:da:b4:f6:f1:80:37:09:5f:02:d3:
                    26:90:74:d6:39:3a:e3:00:4f:32:97:48:0b:45:4c:
                    d2:8f:4f:6f:f8:71:f1:38:3e:b1:5d:93:95:2d:82:
                    a0:fb:be:29:8a:d4:83:a2:6a:30:10:41:34:12:b8:
                    73:b9:76:6b:31:63:86:2d:e9:37:9a:1c:5d:56:4b:
                    84:3e:20:88:76:9f:7c:d6:e2:f0:94:3d:b5:96:18:
                    67:3b:b8:8c:39:97:e9:c7:25:31:4c:da:7d:fa:90:
                    ca:9f:00:1e:16:d4:b6:85:4f:12:5f:8e:13:9c:d8:
                    8a:39:ba:2c:e0:2e:4e:99:bc:ca:2e:9a:5e:fe:99:
                    7c:c2:21:b5:41:35:f7:d1:23:81:a6:fc:0e:a7:00:
                    09:66:7e:6c:22:6d:fa:be:88:73:bf:ef:fd:f2:44:
                    d4:46:7f:ab:01:c1:84:99:8c:4e:e8:f2:ef:7b:13:
                    15:60:16:16:eb:1a:ce:35:bf:96:7f:d1:39:fd:1e:
                    a7:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                35:23:D0:98:38:20:6F:9A:BF:0F:A0:C1:F2:64:F9:EF:47:92:91:59
            X509v3 Authority Key Identifier:
                keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/5845933C7CD311EB98250761C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.163.58.0/24
                  103.164.67.0/24

    Signature Algorithm: sha256WithRSAEncryption
         12:2b:da:57:ac:c0:d2:e9:ee:f0:2a:04:ae:3a:b9:2f:4d:78:
         20:9d:db:3d:c2:d9:c9:87:94:b7:08:6d:24:48:38:02:30:ef:
         74:e0:79:00:83:0b:ee:29:fd:18:68:76:b6:f7:96:37:fc:77:
         e0:83:30:c6:73:d8:e2:9c:1a:2e:fe:2c:b8:06:b6:7d:61:9d:
         18:db:22:91:a4:b0:99:87:2d:80:0d:c8:c3:fd:12:66:8d:c8:
         a8:dc:ed:80:d8:8e:5b:5c:56:b7:af:12:29:12:06:76:ce:c3:
         22:35:7f:6d:9f:55:70:99:bc:94:9b:ef:61:2f:83:18:65:0a:
         f4:c1:9d:4c:b5:97:07:bd:51:27:6e:d9:fa:ac:6c:d3:16:ac:
         7f:f3:8b:cb:3d:d7:5c:ec:36:cd:ed:7a:a7:71:aa:d3:41:bf:
         55:30:7b:57:09:db:c7:e4:32:20:f6:bb:ce:93:2d:fe:79:62:
         25:9d:b3:34:d3:df:8f:8f:ac:2d:d9:d8:f0:25:0c:f1:eb:ca:
         8a:8d:2d:5b:ef:0f:51:55:99:c4:59:21:ac:29:4c:43:6d:cc:
         59:ca:18:be:27:03:3c:ee:4b:fc:82:9a:3b:a1:c9:3a:de:21:
         9f:c0:46:88:26:f8:77:28:c2:50:e3:2f:e8:7e:fb:34:95:cd:
         96:75:ac:fd
-----BEGIN CERTIFICATE-----
MIIFdzCCBF+gAwIBAgICbtwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
OEVEQjIxMTAvBgNVBAUTKDI5NkVEQjY0RjNBRjZFOUQ5ODA5MzJFODE2Rjk1OTgz
RTNBQkM4MjMwHhcNMjMwNTEwMTYzNjAyWhcNMjQwNzAxMDAwMDAwWjAYMRYwFAYD
VQQDEw02NDViYzdmMi1kYTJiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAxmLKlS7Y552jLky2z3MPZtkIgpUdCE7uKUxtm5/88OWi2Du5cgtbdrx5QrjB
d2oGPSz5XMEpf0h32skWHw+N3dq09vGANwlfAtMmkHTWOTrjAE8yl0gLRUzSj09v
+HHxOD6xXZOVLYKg+74pitSDomowEEE0ErhzuXZrMWOGLek3mhxdVkuEPiCIdp98
1uLwlD21lhhnO7iMOZfpxyUxTNp9+pDKnwAeFtS2hU8SX44TnNiKObos4C5OmbzK
Lppe/pl8wiG1QTX30SOBpvwOpwAJZn5sIm36vohzv+/98kTURn+rAcGEmYxO6PLv
exMVYBYW6xrONb+Wf9E5/R6nbwIDAQABo4ICmzCCApcwHQYDVR0OBBYEFDUj0Jg4
IG+avw+gwfJk+e9HkpFZMB8GA1UdIwQYMBaAFClu22Tzr26dmAky6Bb5WYPjq8gj
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4RURCMi8yQTQzRTMwQzcw
RTkxMUUyQjM2RDRCNkIyOTc5QkIyMC9LVzdiWlBPdmJwMllDVExvRnZsWmctT3J5
Q00uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0tXN2JaUE92YnAyWUNUTG9GdmxaZy1PcnlDTS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
OEVEQjIvMkE0M0UzMEM3MEU5MTFFMkIzNkQ0QjZCMjk3OUJCMjAvNTg0NTkzM0M3
Q0QzMTFFQjk4MjUwNzYxQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwJQYIKwYBBQUHAQcBAf8E
FjAUMBIEAgABMAwDBABnozoDBABnpEMwDQYJKoZIhvcNAQELBQADggEBABIr2les
wNLp7vAqBK46uS9NeCCd2z3C2cmHlLcIbSRIOAIw73TgeQCDC+4p/Rhodrb3ljf8
d+CDMMZz2OKcGi7+LLgGtn1hnRjbIpGksJmHLYANyMP9EmaNyKjc7YDYjltcVrev
EikSBnbOwyI1f22fVXCZvJSb72EvgxhlCvTBnUy1lwe9USdu2fqsbNMWrH/zi8s9
11zsNs3teqdxqtNBv1Uwe1cJ28fkMiD2u86TLf55YiWdszTT34+PrC3Z2PAlDPHr
yoqNLVvvD1FVmcRZIawpTENtzFnKGL4nAzzuS/yCmjuhyTreIZ/ARogm+HcowlDj
L+h++zSVzZZ1rP0=
-----END CERTIFICATE-----
Generated at Sat Apr 27 10:19:33 2024 by rpki-client on console-ams.rpki-client.org