Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/6CF07A9699EB11ECA68BB67CC4F9AE02.roa
File:                     6CF07A9699EB11ECA68BB67CC4F9AE02.roa (raw, json)
Hash identifier:          PFPWIzLRlcKZQKdODXLKZa0n64sFJor5k+KBhd473FI=
Subject key identifier:   A5:22:29:76:B7:6E:86:F1:95:CE:EF:F6:04:CA:FE:D0:CB:84:7D:6B
Certificate issuer:       /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Certificate serial:       7059
Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/6CF07A9699EB11ECA68BB67CC4F9AE02.roa
Signing time:             Wed 10 May 2023 16:43:11 +0000
ROA not before:           Wed 10 May 2023 16:43:11 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     149277
IP address blocks:        103.182.120.0/23 maxlen: 24
                          2001:df0:7940::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
                          rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 03 May 2024 15:38:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 28761 (0x7059)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
        Validity
            Not Before: May 10 16:43:11 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=645bc99e-36d5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:7b:ca:17:35:69:94:9c:cf:c4:e4:0c:0c:52:
                    23:41:ca:60:ea:02:63:2a:c4:cc:5e:af:d6:28:6b:
                    db:e8:ad:61:0c:6b:5e:71:3e:28:c1:74:37:cc:5a:
                    8c:50:73:db:d7:2c:00:68:93:1d:11:2e:29:91:c8:
                    50:f4:2e:60:f6:73:16:49:ee:1f:8f:12:28:ba:7e:
                    33:ea:a9:93:35:f0:01:2e:d0:65:dc:49:04:cd:a2:
                    3c:ea:c2:c2:ea:03:94:c6:92:7b:c1:18:6c:b9:09:
                    d1:d3:c3:96:ac:8a:bd:8f:3a:d8:37:48:ef:02:0d:
                    92:c4:b8:a4:30:f4:64:2b:c4:1c:b1:a2:db:fe:4b:
                    2e:78:c9:78:9e:2e:35:9f:10:53:74:8b:1f:16:28:
                    db:d9:07:20:93:f9:8c:2e:a2:34:c8:aa:07:69:cb:
                    dd:d2:56:64:e1:65:86:a2:46:60:40:0c:fe:06:3c:
                    f6:3f:f8:85:34:e6:9f:75:43:1f:57:c9:01:a4:3e:
                    54:32:8c:30:85:5e:3b:f9:c2:42:5a:1b:db:be:0f:
                    54:09:87:14:92:09:75:94:66:4c:20:b5:ba:6c:aa:
                    9e:42:5d:f0:58:46:bb:30:d2:00:51:05:a6:ff:24:
                    98:4f:d7:bc:5f:16:37:b5:cb:6a:2a:36:3a:72:ed:
                    af:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A5:22:29:76:B7:6E:86:F1:95:CE:EF:F6:04:CA:FE:D0:CB:84:7D:6B
            X509v3 Authority Key Identifier:
                keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/6CF07A9699EB11ECA68BB67CC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.182.120.0/23
                IPv6:
                  2001:df0:7940::/48

    Signature Algorithm: sha256WithRSAEncryption
         43:2b:22:e1:b2:c8:96:9a:f7:78:c6:d2:86:73:6a:ba:10:a8:
         4a:e4:4a:00:0c:0c:91:c4:44:45:0f:6d:27:95:50:18:9c:23:
         20:74:68:d2:e4:1c:7d:4a:1a:41:d2:74:95:bc:e6:e1:3c:9e:
         d5:5e:2f:d6:df:e4:4d:a8:25:c0:ce:0b:0e:8e:7e:5f:ec:8c:
         b6:df:13:76:92:f7:cf:6d:4a:62:28:d3:48:d8:09:f8:9e:9b:
         11:c4:a7:93:9d:e5:ff:7f:56:bc:d3:90:c5:39:e4:ed:91:ab:
         2b:87:90:50:9a:46:32:21:03:5a:1e:78:7d:30:6c:e9:d8:0a:
         77:f0:38:09:32:01:84:e5:20:81:e8:4d:70:41:63:ed:0d:c8:
         b1:1c:26:7e:b7:b6:39:18:65:d2:d6:8c:b8:18:49:2f:2a:2f:
         91:68:17:d6:b2:28:a8:b3:da:6c:aa:2a:ba:b4:c9:7d:de:90:
         f4:8f:fd:58:46:be:a4:5c:2a:23:3c:b4:c5:e7:ad:82:e2:50:
         80:b8:8e:b4:1a:8c:4e:b4:0f:ce:44:df:9e:cd:1e:82:8a:69:
         a3:5f:01:3b:86:c1:fa:c9:30:b3:56:86:62:35:ff:68:66:a2:
         a8:e2:7b:42:4e:8a:c7:98:84:89:0e:dc:1d:e9:ea:65:3d:bf:
         85:2b:5f:2f
-----BEGIN CERTIFICATE-----
MIIFgjCCBGqgAwIBAgICcFkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
OEVEQjIxMTAvBgNVBAUTKDI5NkVEQjY0RjNBRjZFOUQ5ODA5MzJFODE2Rjk1OTgz
RTNBQkM4MjMwHhcNMjMwNTEwMTY0MzExWhcNMjQwNzAxMDAwMDAwWjAYMRYwFAYD
VQQDEw02NDViYzk5ZS0zNmQ1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAv3vKFzVplJzPxOQMDFIjQcpg6gJjKsTMXq/WKGvb6K1hDGtecT4owXQ3zFqM
UHPb1ywAaJMdES4pkchQ9C5g9nMWSe4fjxIoun4z6qmTNfABLtBl3EkEzaI86sLC
6gOUxpJ7wRhsuQnR08OWrIq9jzrYN0jvAg2SxLikMPRkK8QcsaLb/ksueMl4ni41
nxBTdIsfFijb2Qcgk/mMLqI0yKoHacvd0lZk4WWGokZgQAz+Bjz2P/iFNOafdUMf
V8kBpD5UMowwhV47+cJCWhvbvg9UCYcUkgl1lGZMILW6bKqeQl3wWEa7MNIAUQWm
/ySYT9e8XxY3tctqKjY6cu2vxQIDAQABo4ICpjCCAqIwHQYDVR0OBBYEFKUiKXa3
bobxlc7v9gTK/tDLhH1rMB8GA1UdIwQYMBaAFClu22Tzr26dmAky6Bb5WYPjq8gj
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4RURCMi8yQTQzRTMwQzcw
RTkxMUUyQjM2RDRCNkIyOTc5QkIyMC9LVzdiWlBPdmJwMllDVExvRnZsWmctT3J5
Q00uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0tXN2JaUE92YnAyWUNUTG9GdmxaZy1PcnlDTS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
OEVEQjIvMkE0M0UzMEM3MEU5MTFFMkIzNkQ0QjZCMjk3OUJCMjAvNkNGMDdBOTY5
OUVCMTFFQ0E2OEJCNjdDQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwMAYIKwYBBQUHAQcBAf8E
ITAfMAwEAgABMAYDBAFntngwDwQCAAIwCQMHACABDfB5QDANBgkqhkiG9w0BAQsF
AAOCAQEAQysi4bLIlpr3eMbShnNquhCoSuRKAAwMkcRERQ9tJ5VQGJwjIHRo0uQc
fUoaQdJ0lbzm4Tye1V4v1t/kTaglwM4LDo5+X+yMtt8TdpL3z21KYijTSNgJ+J6b
EcSnk53l/39WvNOQxTnk7ZGrK4eQUJpGMiEDWh54fTBs6dgKd/A4CTIBhOUggehN
cEFj7Q3IsRwmfre2ORhl0taMuBhJLyovkWgX1rIoqLPabKoqurTJfd6Q9I/9WEa+
pFwqIzy0xeetguJQgLiOtBqMTrQPzkTfns0egoppo18BO4bB+skws1aGYjX/aGai
qOJ7Qk6Kx5iEiQ7cHenqZT2/hStfLw==
-----END CERTIFICATE-----
Generated at Sat Apr 27 10:19:36 2024 by rpki-client on console-ams.rpki-client.org