Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/69F495FEDDD111EDB5905E74C4F9AE02.roa
File:                     69F495FEDDD111EDB5905E74C4F9AE02.roa (raw, json)
Hash identifier:          0YK9jPWazR6ZFYRcBic/cV0dIblkv3TyQfg9l2Nbw08=
Subject key identifier:   A4:D5:0F:D0:88:96:FA:52:DC:B0:F7:21:78:E7:4F:9A:04:42:2C:69
Certificate issuer:       /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Certificate serial:       709A
Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/69F495FEDDD111EDB5905E74C4F9AE02.roa
Signing time:             Wed 10 May 2023 16:44:21 +0000
ROA not before:           Wed 10 May 2023 16:44:21 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     149607
IP address blocks:        103.185.240.0/23 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
                          rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 03 May 2024 15:38:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 28826 (0x709a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
        Validity
            Not Before: May 10 16:44:21 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=645bc9e4-2bb5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:2e:e1:59:15:31:08:48:17:09:40:22:47:ee:
                    f7:8d:0c:24:d6:a7:ab:c2:db:ff:75:42:82:83:c7:
                    16:bf:b7:81:d8:bf:04:29:f6:05:ad:96:64:81:7e:
                    6f:19:5a:cd:10:ca:92:c3:31:9d:1c:e2:8e:39:b2:
                    3a:47:0b:93:64:59:25:82:cb:65:e6:8b:63:84:0b:
                    f9:c1:ae:3e:6d:0f:24:95:92:5a:1f:8b:0b:f6:60:
                    f7:3f:37:c7:5c:53:3a:98:d6:e7:c3:ff:8b:a7:27:
                    5e:e2:10:c0:3c:5b:37:56:df:d5:2b:bd:ab:4f:34:
                    09:54:80:50:92:68:15:69:50:d7:7a:d2:61:20:aa:
                    d6:b4:5a:5c:5a:41:4c:74:15:c4:62:34:df:3e:88:
                    d1:76:f0:8a:ef:4d:c8:e7:c0:46:92:45:c2:e2:9e:
                    8d:95:44:50:c5:8f:fc:32:50:15:c8:3f:a0:f3:0f:
                    db:49:58:f6:ca:bc:7d:bf:b8:b5:8a:ed:07:e3:4c:
                    3d:49:15:0b:f4:14:5d:96:f1:a8:07:15:00:58:b7:
                    21:f8:56:e1:33:b5:fa:b7:b8:ef:4c:06:27:74:7f:
                    e9:48:42:7b:82:b9:da:e7:0d:2e:8f:eb:aa:3e:06:
                    c8:6c:46:62:fc:cf:f6:98:30:2a:ab:e7:80:a0:c5:
                    82:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A4:D5:0F:D0:88:96:FA:52:DC:B0:F7:21:78:E7:4F:9A:04:42:2C:69
            X509v3 Authority Key Identifier:
                keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/69F495FEDDD111EDB5905E74C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.185.240.0/23

    Signature Algorithm: sha256WithRSAEncryption
         7a:75:df:f7:d3:c9:12:f0:56:08:32:ac:9f:46:73:a2:76:86:
         ec:52:db:f4:ef:fd:29:4c:70:e9:98:86:e2:d1:98:a0:d4:e3:
         e5:6b:c7:04:08:36:42:53:8f:43:6d:83:b5:ad:7c:2f:5d:df:
         ef:61:7c:f0:19:21:6e:27:c5:0b:61:c1:14:b7:fe:73:d0:c0:
         d9:6c:cf:cc:7f:9e:85:d9:6d:ec:65:fc:f7:13:af:00:27:11:
         c5:78:00:14:11:11:65:31:33:5e:56:91:b3:9d:4e:6a:b5:a2:
         ad:bb:9a:31:a2:c6:b2:d0:f1:2b:95:81:94:b0:87:15:29:0c:
         76:e3:bf:ca:f2:f1:bc:4e:31:29:fe:2d:6f:b9:85:72:36:87:
         fa:09:02:43:e2:da:8c:2a:c1:96:31:63:da:e3:0d:73:88:3d:
         11:09:f0:f3:fb:72:7f:f7:20:ad:27:34:e8:47:9b:0c:e5:51:
         30:b3:0a:90:7e:59:84:c1:9b:f9:50:1f:21:06:91:a2:63:eb:
         7b:73:58:bd:21:d0:ba:e5:9f:bb:e1:68:1a:10:4f:93:f1:84:
         68:a3:fd:4d:2f:e7:5b:fd:a4:48:f6:d8:6d:35:ba:3d:8a:e9:
         27:f6:61:a8:37:42:52:48:8e:0d:a5:a4:e4:eb:6d:30:36:1b:
         39:7c:31:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 27 10:19:36 2024 by rpki-client on console-ams.rpki-client.org