Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/5878F740672C11EEA565DE10C4F9AE02.roa
File:                     5878F740672C11EEA565DE10C4F9AE02.roa (raw, json)
Hash identifier:          RRhYHZWmLtT75YT0GG+0H8ymfofoku2xBJzMJUu/hIw=
Subject key identifier:   B2:EB:DC:BE:0D:73:ED:2B:1E:8A:AA:4D:BE:1E:32:02:38:F6:C4:80
Certificate issuer:       /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Certificate serial:       7B8A
Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/5878F740672C11EEA565DE10C4F9AE02.roa
Signing time:             Tue 10 Oct 2023 05:17:46 +0000
ROA not before:           Tue 10 Oct 2023 05:17:46 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     151773
IP address blocks:        103.241.196.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
                          rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 03 May 2024 15:38:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 31626 (0x7b8a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
        Validity
            Not Before: Oct 10 05:17:46 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=6524de79-6c12
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:61:a4:99:98:d2:ad:c3:34:24:da:5b:a9:3c:
                    ad:5b:94:dd:95:87:11:65:d2:6a:2f:92:e8:e6:34:
                    4a:42:70:f2:fb:67:ce:85:45:a9:2b:62:26:14:1a:
                    bf:e6:6a:bf:5b:14:56:33:c1:32:4b:b3:81:42:33:
                    56:93:f5:4f:1c:0f:38:68:93:11:b9:7e:7d:cb:2b:
                    b1:ff:3d:64:d4:fd:ea:a1:8a:fc:a3:00:f2:18:1f:
                    ad:cb:b3:9b:bc:b7:09:6c:27:5d:65:80:83:1f:bb:
                    0c:95:b8:71:fc:1c:66:64:a5:0f:6e:58:2c:50:c8:
                    1b:fe:c7:4a:33:6a:af:28:fa:63:30:ab:de:a6:ac:
                    0a:2a:eb:7c:0b:e1:d3:ad:24:b7:16:5e:59:be:b9:
                    93:2b:99:d9:9e:1b:b5:83:bb:bc:c2:51:39:ec:1a:
                    0c:8b:a7:1e:da:97:d0:73:06:c0:18:03:27:74:17:
                    ab:47:87:30:27:cc:72:f0:23:aa:90:ad:00:d2:15:
                    a1:b0:44:25:11:0b:d3:c0:0b:8a:5f:00:64:9e:87:
                    12:31:2f:b2:6b:86:4e:ad:b2:0a:cc:37:d9:30:63:
                    3d:ad:e4:24:18:ab:b4:70:68:d2:ee:f1:64:d0:6c:
                    99:27:1a:00:53:d3:0d:05:43:2c:50:c7:44:5d:c4:
                    c9:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B2:EB:DC:BE:0D:73:ED:2B:1E:8A:AA:4D:BE:1E:32:02:38:F6:C4:80
            X509v3 Authority Key Identifier:
                keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/5878F740672C11EEA565DE10C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.241.196.0/24

    Signature Algorithm: sha256WithRSAEncryption
         6c:b3:6f:33:ae:06:d9:4d:5a:bd:62:ea:e8:6d:33:cb:29:0d:
         a1:ce:8c:c4:2a:df:01:87:79:60:4f:95:bb:be:47:7d:4b:50:
         02:98:06:b1:76:a0:1e:6f:a3:17:c4:2c:f8:f9:74:ff:2c:b0:
         db:27:1d:ba:cb:93:26:ba:30:d9:dd:4f:00:a7:c7:3f:f4:ef:
         46:c5:9d:d1:18:bd:d9:69:4f:22:08:29:c8:e5:f0:29:54:90:
         60:59:d5:d1:ed:6e:f5:d4:33:86:43:f1:6e:95:7c:62:05:59:
         cd:b0:97:68:c9:1e:39:82:a2:54:34:56:b5:44:2c:ed:4b:62:
         53:48:c3:bd:a2:e4:cc:00:d6:95:f9:c1:02:64:6e:8e:67:32:
         b7:99:99:c6:fd:89:29:1c:5c:78:88:61:78:2a:39:e3:6b:b1:
         75:20:3b:97:71:91:a6:d7:f9:da:a2:a4:c4:3e:90:a7:09:a5:
         3f:3c:ca:63:5c:e6:35:88:51:da:0b:98:cf:8a:bc:53:49:c0:
         6f:7e:ac:69:1b:9f:bf:e0:5a:a8:6a:4b:b1:3a:bb:69:76:9b:
         49:94:4c:40:b0:22:59:b5:5d:78:48:77:ba:c4:62:29:f8:59:
         0b:83:e5:3d:bf:1b:43:6c:dd:57:84:8d:83:d7:0e:71:5d:00:
         b1:74:e9:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 27 10:19:33 2024 by rpki-client on console-ams.rpki-client.org