Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/6C8C162075CD11EB966F546EC4F9AE02.roa
File:                     6C8C162075CD11EB966F546EC4F9AE02.roa (raw, json)
Hash identifier:          y1hIMhWcNetZGVgHd0VQ3dm8rRVpWg9KvrBEMaogNH4=
Subject key identifier:   D2:1E:6A:18:CF:5E:3A:7D:01:B2:E5:AD:82:5E:B8:9A:43:DB:08:0E
Certificate issuer:       /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Certificate serial:       715C
Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/6C8C162075CD11EB966F546EC4F9AE02.roa
Signing time:             Wed 10 May 2023 16:47:52 +0000
ROA not before:           Wed 10 May 2023 16:47:52 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     18992
IP address blocks:        103.152.156.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
                          rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 03 May 2024 15:38:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 29020 (0x715c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
        Validity
            Not Before: May 10 16:47:52 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=645bcab8-76b2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:7e:a1:bb:56:9f:ff:7d:fa:85:bb:b9:5e:3d:
                    a1:0f:96:7d:28:81:67:bc:bf:c1:75:10:fc:82:3a:
                    73:58:e7:c5:50:28:68:81:e9:df:eb:a2:59:5f:ad:
                    6f:ad:42:82:79:9d:3d:6a:7c:26:5f:06:dc:31:fb:
                    67:9b:de:d2:5d:c6:58:e7:24:25:d1:e4:d5:b5:94:
                    5c:ee:54:22:81:9f:84:f1:f1:bc:a5:82:de:2e:e1:
                    a7:7c:8a:80:ca:b1:8b:13:be:ce:60:7f:b0:90:24:
                    f5:71:0d:bd:92:2d:e7:bf:1a:f6:23:f1:6d:78:8a:
                    e9:5c:ea:ef:70:01:c1:d5:5c:19:6a:57:01:fc:dd:
                    b4:19:79:3e:f7:f5:ca:bf:ca:02:5f:51:47:95:8a:
                    cf:b4:a2:77:bc:61:63:fe:55:d7:57:72:f9:54:56:
                    54:b5:bf:51:05:cd:8f:97:bc:49:f6:fb:f4:25:25:
                    c8:48:65:fd:83:c6:f7:2e:3a:ff:b4:00:d4:e7:1b:
                    f4:33:59:3b:48:cf:2d:96:7c:fc:d1:70:b3:58:4f:
                    59:cf:99:6b:09:ff:37:37:17:e2:44:8c:11:87:8d:
                    ae:a5:ce:28:0e:b7:0f:43:9c:d6:5e:29:c5:d8:3c:
                    39:5a:fc:ed:8e:5a:68:6d:b2:ac:0b:4d:46:d8:e4:
                    c6:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D2:1E:6A:18:CF:5E:3A:7D:01:B2:E5:AD:82:5E:B8:9A:43:DB:08:0E
            X509v3 Authority Key Identifier:
                keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/6C8C162075CD11EB966F546EC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.152.156.0/24

    Signature Algorithm: sha256WithRSAEncryption
         58:93:03:7e:f7:ed:8b:9d:7d:b6:b4:e4:3a:57:60:4c:a3:0b:
         9b:8d:e8:26:6b:e6:6c:cf:42:90:06:ee:38:8e:e6:30:fd:dc:
         4f:7a:fe:09:a8:60:e1:ce:16:52:5e:ee:f1:70:7b:1b:9d:df:
         04:fe:ba:7c:45:88:75:7d:8f:84:08:fd:a5:a3:eb:ec:dd:e3:
         2c:c1:49:82:f9:0e:4d:2b:00:6e:20:a7:25:2d:e2:3c:f3:e9:
         f4:a0:25:89:3c:2f:88:c8:fb:14:d9:84:2e:73:87:4b:c1:76:
         c8:67:1e:a9:31:c3:d3:e8:c9:1e:41:d3:94:9b:0a:35:e3:f3:
         e3:ed:12:ba:4b:86:9b:31:15:77:8d:20:67:d4:31:1e:3b:c7:
         54:73:5c:56:92:fe:a9:3e:c3:92:77:3b:0d:fb:0d:bf:2e:ce:
         cc:5e:0d:e0:11:aa:c0:38:1c:43:d8:08:3a:aa:e8:e8:16:b5:
         15:04:89:85:dd:87:d9:f4:fa:ea:c1:94:b8:b0:1a:9d:1d:f0:
         22:b0:6e:af:b2:49:9a:b5:2c:da:b3:c3:90:0f:af:27:c8:5d:
         d2:65:9f:74:c4:ba:38:2e:b6:05:d1:8e:91:00:77:1a:94:e6:
         a6:d1:25:83:96:ec:02:e9:2a:5e:20:90:68:c1:d2:3c:67:cd:
         f5:2a:70:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 27 10:19:36 2024 by rpki-client on console-ams.rpki-client.org