Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/59A53DCEBA0211EB86714D52C4F9AE02.roa
File:                     59A53DCEBA0211EB86714D52C4F9AE02.roa (raw, json)
Hash identifier:          C/rwOjXOzhOozlqtWT1CVVyz/O6dzWPAIhjNQ0gTe3s=
Subject key identifier:   A7:AB:25:F8:64:4F:DE:73:40:BD:BC:FB:89:BE:FD:C9:FF:F8:5A:7B
Certificate issuer:       /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Certificate serial:       6CB5
Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/59A53DCEBA0211EB86714D52C4F9AE02.roa
Signing time:             Wed 10 May 2023 16:25:51 +0000
ROA not before:           Wed 10 May 2023 16:25:51 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     136708
IP address blocks:        103.103.8.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
                          rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 03 May 2024 15:38:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 27829 (0x6cb5)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
        Validity
            Not Before: May 10 16:25:51 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=645bc58e-d559
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:b4:07:91:8a:e3:ed:2c:0f:98:af:6a:75:7a:
                    a3:45:ac:10:5c:cf:59:4e:46:82:39:49:d0:2f:23:
                    18:62:da:a7:62:cf:89:f3:a5:a0:31:b9:53:28:6a:
                    8d:cd:cb:5d:a9:08:85:aa:5a:1f:92:de:47:7b:97:
                    ee:24:fa:6d:cf:24:dd:eb:58:0a:89:e5:35:79:45:
                    06:90:7d:f8:15:e5:3a:88:77:15:bd:1a:02:3c:36:
                    9a:b1:b4:6a:ce:3e:2c:d4:12:cc:f2:fa:68:33:6a:
                    2a:77:b0:a9:82:d9:72:ad:3a:69:e8:0e:af:a1:69:
                    ec:d7:71:bc:65:b3:23:b0:f6:6b:19:db:e3:59:fb:
                    c1:04:a1:d5:33:42:b9:9d:1d:de:9c:4a:d7:b8:01:
                    e7:21:39:f3:a0:f4:44:08:f5:9d:34:36:e3:52:0b:
                    60:12:8b:cc:4e:76:78:2c:7e:7a:be:f3:e8:d2:4e:
                    97:2a:00:14:00:cc:ec:d2:94:c4:33:36:ae:bb:50:
                    48:fa:4b:e7:70:6f:5b:9e:c2:df:88:b8:a1:b0:0a:
                    72:ed:5f:f5:81:1c:8c:3b:b3:ac:f1:43:fd:02:57:
                    0a:32:2f:c3:d1:2d:28:76:eb:25:2d:6e:b9:0c:5e:
                    f6:7e:d1:a9:bc:62:b7:a3:fb:5a:eb:32:a9:7a:f7:
                    64:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A7:AB:25:F8:64:4F:DE:73:40:BD:BC:FB:89:BE:FD:C9:FF:F8:5A:7B
            X509v3 Authority Key Identifier:
                keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/59A53DCEBA0211EB86714D52C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.103.8.0/22

    Signature Algorithm: sha256WithRSAEncryption
         7f:1c:7f:9e:2d:11:9d:73:42:f3:0b:13:d2:d9:71:71:0a:4f:
         52:71:52:71:5a:f5:de:23:6b:70:e6:15:8d:5d:66:76:ed:d7:
         86:63:1b:5b:e3:e7:82:aa:83:25:6d:77:32:5c:7a:b1:b4:92:
         4c:71:b3:83:3b:b4:fb:76:02:94:23:99:93:ee:14:0b:10:af:
         9c:2b:c7:24:2f:b2:ea:cd:51:d6:6e:7f:19:12:5a:c9:be:2e:
         88:14:d6:fd:9d:3f:cb:40:69:93:b4:42:e6:c7:2a:32:96:3a:
         0d:2d:ef:6c:c9:85:11:fb:79:b5:9e:28:02:a0:6b:35:67:03:
         fe:55:de:f2:7d:26:bb:a5:5f:0b:2d:25:3c:7f:6d:68:19:fd:
         82:83:e5:79:9e:0f:4f:6c:91:c6:ac:e3:f8:72:de:61:f4:26:
         95:fe:fb:96:ae:12:ed:73:3e:16:35:51:db:17:ac:84:b6:3f:
         ce:44:64:b3:66:35:88:61:cd:2e:f9:cb:c8:0f:75:77:bb:66:
         31:a3:1a:c6:7f:3d:6c:14:87:12:77:2b:2d:62:cb:7f:98:67:
         3e:aa:27:82:b6:ae:0b:58:f9:c6:36:85:42:de:38:8b:85:0a:
         97:db:20:59:24:d3:25:ad:53:e3:35:c7:10:45:6a:1d:97:99:
         84:d1:9e:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 27 10:19:33 2024 by rpki-client on console-ams.rpki-client.org