Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/5FD48BEE089311EB9277E86CC4F9AE02.roa
File:                     5FD48BEE089311EB9277E86CC4F9AE02.roa (raw, json)
Hash identifier:          strgFXLjbia2XpY0D+qSZw5umVfQ07RXW1j0sE7o86M=
Subject key identifier:   DE:92:EC:11:EE:D9:6A:86:DF:2D:3D:5E:3D:D8:24:DF:56:7C:0A:AF
Certificate issuer:       /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Certificate serial:       6C5D
Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/5FD48BEE089311EB9277E86CC4F9AE02.roa
Signing time:             Wed 10 May 2023 16:24:10 +0000
ROA not before:           Wed 10 May 2023 16:24:10 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     136325
IP address blocks:        103.93.116.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
                          rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 03 May 2024 15:38:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 27741 (0x6c5d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
        Validity
            Not Before: May 10 16:24:10 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=645bc529-5dfb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:f4:76:d2:31:6a:17:c5:b4:15:41:97:c1:c5:
                    66:7b:90:f2:eb:db:5a:2d:84:c8:79:42:e9:7d:a9:
                    fb:9b:28:97:9a:b9:9d:48:19:fd:dd:f3:5d:fd:34:
                    17:f9:c6:58:b1:39:4b:6f:db:46:8e:92:57:fb:4d:
                    12:26:03:ce:b5:cc:17:54:42:cd:eb:d2:b6:21:67:
                    30:14:c6:6a:e9:31:3f:6b:9f:9c:79:8a:53:1f:95:
                    49:a4:b7:80:d4:11:c3:8d:da:38:78:d5:78:ec:00:
                    ee:4b:1e:5b:04:1a:7a:62:37:63:01:58:f9:e1:aa:
                    04:e4:95:cd:16:50:7d:a5:65:2f:50:34:fd:fe:5b:
                    c7:0a:32:89:45:70:11:6a:a1:1c:86:4b:7b:76:ba:
                    71:a8:b1:be:51:b0:4f:5d:26:8b:f9:c8:da:63:63:
                    b3:4d:55:39:85:ea:19:af:f5:bf:eb:a6:44:ef:d4:
                    6e:0e:89:f6:b6:7a:0c:e7:d7:79:c6:c9:ae:39:ba:
                    03:5e:13:8b:2d:dd:1e:64:3e:05:97:8d:55:90:11:
                    d4:05:e2:5a:62:6c:85:09:bc:6e:65:f7:54:8d:73:
                    3d:80:2a:ad:8a:18:8b:27:b0:8c:6a:32:15:20:8f:
                    ee:58:86:8b:ee:64:67:d7:8c:fc:66:61:96:53:6b:
                    08:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DE:92:EC:11:EE:D9:6A:86:DF:2D:3D:5E:3D:D8:24:DF:56:7C:0A:AF
            X509v3 Authority Key Identifier:
                keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/5FD48BEE089311EB9277E86CC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.93.116.0/22

    Signature Algorithm: sha256WithRSAEncryption
         4e:0a:f6:d2:36:18:6e:b5:09:46:f2:84:a2:c8:84:6b:3c:12:
         82:ca:93:ee:b6:a2:69:90:71:7e:23:3b:b0:96:a3:06:a0:ea:
         b0:b6:f9:0e:7c:98:69:c7:3f:c7:84:df:f1:fa:7f:83:74:55:
         7c:61:a1:34:dc:18:7c:00:59:33:ca:19:16:4a:23:79:17:bd:
         fd:f7:85:e9:a7:90:b2:c5:11:83:59:82:73:9d:53:c3:01:0a:
         26:db:e5:66:53:9d:ac:45:27:03:c3:ee:d3:09:aa:df:1a:79:
         70:98:1f:19:ce:50:f5:ae:6b:fb:cc:d8:70:81:f9:2a:13:87:
         1e:c6:28:15:97:d8:46:bb:7f:b9:43:a5:e9:b7:62:16:ee:29:
         bd:15:d4:29:70:8d:fe:be:3c:15:ed:dc:57:14:0c:dc:46:2c:
         9a:61:56:4f:93:13:a3:6b:b8:66:6b:64:6a:03:1d:c4:e3:9f:
         0a:97:0d:3a:cc:2f:03:bd:a9:60:0f:7e:32:f3:64:59:2f:b4:
         50:89:92:15:b7:d8:f1:40:32:c6:1b:27:de:6b:26:32:10:8a:
         e4:76:32:44:44:fc:1e:91:09:ae:ab:16:48:be:1a:f2:eb:d6:
         f0:aa:de:d4:25:ec:71:76:16:35:46:1a:58:27:ce:e8:28:8c:
         c3:d3:2a:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 27 10:19:34 2024 by rpki-client on console-ams.rpki-client.org