Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/5D9C0652DD7911EBA6E0FF2BC4F9AE02.roa
File:                     5D9C0652DD7911EBA6E0FF2BC4F9AE02.roa (raw, json)
Hash identifier:          Pm3DH/+N4Gb7h/wn2S6xQ4xFKzyz3gCukHBQk5PfP/Q=
Subject key identifier:   58:06:39:8E:E4:27:5B:EC:0E:29:F1:7B:78:9B:69:ED:C7:A9:F4:F4
Certificate issuer:       /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Certificate serial:       6B7F
Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/5D9C0652DD7911EBA6E0FF2BC4F9AE02.roa
Signing time:             Wed 10 May 2023 16:19:58 +0000
ROA not before:           Wed 10 May 2023 16:19:57 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     134946
IP address blocks:        103.82.188.0/23 maxlen: 24
                          103.82.190.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
                          rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 03 May 2024 15:38:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 27519 (0x6b7f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
        Validity
            Not Before: May 10 16:19:57 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=645bc42d-febb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:61:9d:86:6e:e1:8a:a7:82:56:82:2b:d8:fc:
                    9f:db:9c:65:33:f2:73:b6:7b:7a:2a:d1:79:a6:9b:
                    72:2a:e3:16:b6:7e:cf:4d:ca:0a:a8:75:46:e0:dd:
                    ac:8d:ee:af:3d:47:c6:36:75:b0:62:7d:6c:7a:69:
                    fa:b3:05:eb:65:e0:b4:43:7a:68:bf:e2:74:04:4c:
                    7c:81:94:65:d2:ca:b1:f9:e1:eb:4b:bf:b4:8a:39:
                    a9:f8:91:07:ec:1e:b5:27:ba:4c:d2:f0:50:c7:c9:
                    48:7c:f4:14:4a:7f:5b:d8:45:99:c0:ac:78:5c:60:
                    87:e5:bf:c4:65:d5:97:d9:d0:53:76:3f:51:a7:f1:
                    49:e5:7c:f8:f2:11:5b:17:62:34:d9:48:f7:8e:f1:
                    2b:17:1c:4c:be:95:4f:ad:5f:bf:76:b1:70:92:8e:
                    6e:6a:95:cf:6f:41:b8:91:32:69:2e:56:d0:7f:0a:
                    8f:4b:02:0f:2b:f7:16:26:72:3a:6a:49:fd:11:18:
                    b7:91:c0:11:82:e2:64:10:1d:a6:ff:ee:db:84:5d:
                    d8:6f:29:72:26:91:a1:2f:8c:81:6f:c3:af:de:96:
                    c0:09:66:99:6f:ea:78:1a:4c:e5:1d:76:ce:cb:3c:
                    67:ac:44:49:b0:f2:f1:00:28:0d:70:ae:c9:b8:08:
                    28:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                58:06:39:8E:E4:27:5B:EC:0E:29:F1:7B:78:9B:69:ED:C7:A9:F4:F4
            X509v3 Authority Key Identifier:
                keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/5D9C0652DD7911EBA6E0FF2BC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.82.188.0-103.82.190.255

    Signature Algorithm: sha256WithRSAEncryption
         16:41:0a:75:ee:8e:eb:82:c5:7c:0d:08:82:93:0f:c7:ea:63:
         a6:77:71:a4:64:15:2c:1e:fc:3c:2e:4c:c0:fe:80:47:1d:39:
         23:1f:b9:35:a6:d3:13:7f:ff:0d:c0:7d:00:4e:e8:6f:bf:4a:
         93:75:e3:fe:14:56:03:e0:27:ad:70:95:c6:55:67:56:fd:d8:
         7f:70:b9:e7:3e:a7:c6:dd:9e:50:b2:77:cb:5c:49:21:09:0e:
         2d:b3:55:4a:de:be:2f:3d:d3:a4:d8:5e:a1:8c:db:30:e8:d6:
         0e:67:6f:e4:70:24:8a:ee:31:c8:87:96:d4:19:78:03:6b:e5:
         b4:68:ef:98:ca:78:24:b4:d3:7b:f6:0f:26:60:67:14:2b:38:
         8f:c1:37:4f:f2:9a:30:84:2c:e4:ed:9d:aa:7b:4c:4c:f6:44:
         92:ba:b7:f1:4e:ba:c8:91:78:47:e1:6c:d2:17:ce:1d:88:40:
         44:e7:97:7d:6f:9b:c3:bd:a1:c1:34:f1:58:64:92:25:cf:29:
         38:f1:3b:49:b2:fa:76:16:2b:1c:6a:70:1d:36:2f:0d:6c:c2:
         d5:c1:73:de:ff:9e:b2:21:63:14:d2:5f:d0:9b:65:38:73:61:
         39:27:62:ea:9b:9d:11:c2:51:a4:2f:80:4f:3f:da:0a:ff:67:
         2d:d4:1a:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 27 10:19:34 2024 by rpki-client on console-ams.rpki-client.org