Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/5E5C351ECC5A11EC8162C282C4F9AE02.roa
File:                     5E5C351ECC5A11EC8162C282C4F9AE02.roa (raw, json)
Hash identifier:          GR/gWZ9QBHewKey8gFXD3Kz9FXRxRBq6p7cId//UYjg=
Subject key identifier:   03:37:D3:1F:71:5E:34:29:BA:2E:ED:2E:0D:27:18:CB:43:7D:9A:4B
Certificate issuer:       /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Certificate serial:       6B4C
Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/5E5C351ECC5A11EC8162C282C4F9AE02.roa
Signing time:             Wed 10 May 2023 16:18:59 +0000
ROA not before:           Wed 10 May 2023 16:18:59 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     134867
IP address blocks:        103.183.233.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
                          rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 03 May 2024 15:38:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 27468 (0x6b4c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
        Validity
            Not Before: May 10 16:18:59 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=645bc3f3-53bc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ef:5f:30:b6:0a:b1:64:6d:5c:86:30:20:23:8b:
                    7b:a8:ee:d8:ff:a6:54:c9:75:ff:8d:f4:f8:27:16:
                    19:d2:f8:10:d8:f7:dc:9e:6f:b8:1d:7c:59:21:03:
                    20:a0:96:86:c2:4a:10:55:33:41:26:ce:c2:89:d3:
                    b2:95:90:75:82:04:f8:4d:41:e2:96:ee:d4:0e:e5:
                    25:21:0b:4a:6e:bf:bd:da:74:ab:14:e9:d7:57:17:
                    89:6a:00:65:f4:bf:06:27:55:fc:ba:4b:6d:52:43:
                    1a:59:10:73:d9:1b:81:5f:c4:22:a3:c7:73:83:9d:
                    fb:e6:7b:0c:e5:b5:21:bb:37:82:2e:97:ab:b0:18:
                    54:20:a1:5e:f5:c0:0f:4e:3d:7f:da:de:6c:cc:00:
                    70:74:3c:ef:e0:e2:df:67:cd:46:34:8b:ed:4f:04:
                    e1:cc:58:9e:a7:3e:3b:aa:90:7d:9a:80:bc:5a:19:
                    01:d8:d2:c0:db:04:4f:41:9d:4b:a7:66:f2:07:f0:
                    85:5a:d1:58:10:21:21:5c:36:5d:9c:55:2b:10:23:
                    88:e3:b9:f1:b9:04:82:21:db:bc:f7:d9:7c:28:79:
                    5b:1a:fc:c4:09:81:f0:6d:30:96:3a:0e:f3:8b:13:
                    c1:64:bb:5b:d3:8d:2f:8e:3e:29:a9:b6:fd:2d:57:
                    d3:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                03:37:D3:1F:71:5E:34:29:BA:2E:ED:2E:0D:27:18:CB:43:7D:9A:4B
            X509v3 Authority Key Identifier:
                keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/5E5C351ECC5A11EC8162C282C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.183.233.0/24

    Signature Algorithm: sha256WithRSAEncryption
         08:01:17:61:63:37:e5:e2:2d:cb:ea:3e:7a:58:2e:d2:4c:f4:
         44:29:07:4d:be:24:e8:40:33:52:03:85:7e:fe:ac:64:db:46:
         55:95:79:73:c4:09:ce:3f:a5:57:47:bc:6b:41:79:ea:c7:e5:
         c2:c9:82:24:16:6b:27:8b:34:9f:a4:fd:a8:3e:31:29:5d:78:
         fa:46:33:b9:52:ee:9c:39:be:3a:f6:23:6a:96:62:e7:db:e1:
         a1:e8:86:fd:e0:9c:1c:e6:d6:cc:3a:26:3a:be:43:35:77:d5:
         08:18:dc:a9:3a:42:75:4b:d2:dc:9a:7f:a4:9e:20:51:d4:7c:
         ba:67:73:31:ac:c4:6a:1f:80:de:76:53:e8:dd:af:93:d8:79:
         20:ed:30:67:8a:69:02:eb:62:0e:9b:ff:3c:57:81:18:f4:94:
         dd:84:2e:fc:22:c6:6f:41:9c:11:b2:41:33:74:52:86:03:de:
         3d:4b:f7:da:8a:71:9f:7d:81:d2:e4:f7:d5:3a:4d:b3:cd:b3:
         80:be:85:fc:b8:00:22:d6:26:f1:ef:ee:ea:4e:87:d2:3b:6e:
         a6:f2:6d:0a:9d:63:4e:f2:7e:18:6a:b6:e3:c5:b9:67:2a:92:
         68:7d:6c:e2:38:55:d9:3b:b0:6c:e8:b8:f2:7f:13:9c:03:7b:
         b4:37:d8:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 27 10:19:34 2024 by rpki-client on console-ams.rpki-client.org