Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/5934ABA23C6911EB9B310366C4F9AE02.roa
File:                     5934ABA23C6911EB9B310366C4F9AE02.roa (raw, json)
Hash identifier:          yJXpwxzSIn9AJSllNg73KSbjGnJFACkZa4XJiSciA1Q=
Subject key identifier:   DE:67:C8:3F:05:CF:FF:CF:0C:AE:0C:E6:FE:D7:8B:05:EF:81:9E:CC
Certificate issuer:       /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Certificate serial:       6E9D
Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/5934ABA23C6911EB9B310366C4F9AE02.roa
Signing time:             Wed 10 May 2023 16:34:52 +0000
ROA not before:           Wed 10 May 2023 16:34:52 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     141330
IP address blocks:        103.159.147.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
                          rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 03 May 2024 15:38:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 28317 (0x6e9d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
        Validity
            Not Before: May 10 16:34:52 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=645bc7ab-d00f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:62:24:6a:ba:5f:54:dc:d2:34:ae:a6:11:3b:
                    ae:6d:71:82:98:58:ec:ab:13:50:d2:0b:2b:a7:80:
                    b0:08:61:aa:f4:4b:7f:b3:0f:91:ce:77:b7:2a:05:
                    f2:3f:c7:38:1e:c7:6a:02:3c:cd:f3:17:e4:e2:cd:
                    d0:36:bb:29:61:1a:58:cd:6d:e0:6c:dd:14:51:70:
                    dd:59:ab:1d:7d:3d:61:4f:db:70:83:dd:77:90:db:
                    3f:a4:e8:57:9f:44:37:5b:8b:86:9d:52:9e:f1:8d:
                    2b:ca:73:39:d1:be:5a:dc:5a:42:fc:02:87:c0:2c:
                    70:0e:fd:73:6f:f8:68:b8:f9:3f:90:81:19:1f:70:
                    8c:26:ed:96:3c:e3:9f:74:50:9b:cc:f0:20:90:f0:
                    45:80:93:6c:24:d1:4c:0c:21:1f:7a:21:da:da:59:
                    cb:7a:2a:ab:11:b6:bb:b6:15:50:11:e7:4a:3b:b6:
                    1e:58:a8:da:96:1c:98:54:48:a0:b9:ce:88:9a:a7:
                    45:4e:c3:fb:82:d1:59:8b:65:ba:cd:0a:21:12:01:
                    69:38:2b:c7:60:03:d5:a8:ef:8c:56:ea:78:f2:35:
                    a9:5a:c5:c5:2b:8c:86:5a:59:49:47:ce:18:c6:32:
                    1d:d2:4b:ab:8b:98:34:79:8b:11:09:5b:63:11:c8:
                    0a:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DE:67:C8:3F:05:CF:FF:CF:0C:AE:0C:E6:FE:D7:8B:05:EF:81:9E:CC
            X509v3 Authority Key Identifier:
                keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/5934ABA23C6911EB9B310366C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.159.147.0/24

    Signature Algorithm: sha256WithRSAEncryption
         4c:4c:76:b0:bf:38:75:99:1e:20:5b:1d:09:72:4d:d8:21:59:
         00:d6:96:e8:36:c1:7d:36:8c:bb:af:4f:44:db:99:c6:c1:64:
         3b:1a:fd:65:f7:97:19:7e:f6:8b:63:11:63:72:f8:f0:85:7a:
         d2:b8:95:c9:85:2e:1b:9b:f9:07:1f:cd:3d:64:ab:61:99:e5:
         44:82:57:0a:1b:ce:6f:bd:04:3c:f4:c0:ec:72:d0:2e:cb:f9:
         61:18:66:b1:41:0b:ed:16:bc:cf:1f:2c:01:b9:b0:39:c2:35:
         aa:22:42:03:df:cc:4a:d7:6c:73:1a:0b:84:49:ad:2d:3f:4b:
         82:d1:86:cc:e2:6f:0f:70:3a:da:7d:de:a9:e2:27:19:0c:bc:
         60:10:47:98:a8:96:8c:14:42:42:2d:b9:36:eb:f2:fd:47:8f:
         1b:96:81:e5:68:5b:c2:86:35:e0:51:4c:e6:4e:cd:77:35:b9:
         52:7d:75:b8:96:1e:f0:f7:38:93:6a:64:e9:ae:5b:91:96:2c:
         94:11:d6:2d:44:ab:ba:bd:9a:2b:65:21:b2:e8:48:69:12:b4:
         db:3d:b3:89:3d:77:5e:d0:8e:bf:07:fa:19:ac:6d:4d:da:6d:
         e9:0b:86:70:63:30:07:15:61:22:9b:6c:c2:76:87:bc:1c:99:
         5d:20:6b:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 27 10:19:33 2024 by rpki-client on console-ams.rpki-client.org