Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/6D4C0054BDCF11EA8755D90DC4F9AE02.roa
File:                     6D4C0054BDCF11EA8755D90DC4F9AE02.roa (raw, json)
Hash identifier:          ifytRI7+hUD6ACSznRg8810ju7cy1VDuCmDsMmb7Ft8=
Subject key identifier:   4B:79:47:7F:79:DE:77:1C:33:88:55:5B:4E:96:86:53:D4:1C:4E:D7
Certificate issuer:       /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Certificate serial:       6DF2
Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/6D4C0054BDCF11EA8755D90DC4F9AE02.roa
Signing time:             Wed 10 May 2023 16:31:47 +0000
ROA not before:           Wed 10 May 2023 16:31:47 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     139536
IP address blocks:        103.145.249.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
                          rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 03 May 2024 15:38:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 28146 (0x6df2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
        Validity
            Not Before: May 10 16:31:47 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=645bc6f3-4888
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:eb:3c:5e:09:35:d0:97:25:4c:66:41:2e:8f:73:
                    bd:99:2f:34:84:36:66:9e:67:65:fa:e1:a1:8f:b7:
                    f8:c2:95:b0:b2:de:0c:96:b3:53:ce:4d:b7:19:00:
                    68:53:eb:78:94:d9:de:2e:7c:3e:7e:2f:ea:0d:2f:
                    fa:96:2f:c4:09:94:cc:f7:5f:db:70:fe:33:d9:7a:
                    fc:cc:b3:da:fc:33:84:f6:84:3f:8a:1f:e2:36:af:
                    f2:7c:92:dd:56:6c:01:ee:73:7a:79:e2:d4:96:b2:
                    1d:50:e1:90:86:65:60:22:1f:49:b7:50:1e:66:a4:
                    13:7f:a2:fd:91:da:72:5e:03:7d:05:cc:42:1f:57:
                    27:f7:26:23:28:9e:1a:37:56:ce:fb:bd:fe:12:d1:
                    eb:c6:bf:9b:d2:67:09:44:f3:c4:b2:2a:db:f8:11:
                    d2:fb:cb:54:f3:a3:e0:76:12:18:d9:c4:d5:f6:66:
                    d8:10:73:24:47:7c:5e:c9:8e:66:23:9f:2d:cf:54:
                    0e:76:77:62:d5:04:78:2d:5f:62:c0:bb:61:b7:40:
                    cc:f7:e7:8f:96:46:3d:b9:d9:bf:fd:88:02:68:78:
                    4a:fd:6a:c3:1b:9e:74:bb:5a:33:c0:29:6f:7b:55:
                    e3:36:c8:3a:de:bc:2f:ac:13:8a:62:26:c2:4d:5c:
                    9c:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4B:79:47:7F:79:DE:77:1C:33:88:55:5B:4E:96:86:53:D4:1C:4E:D7
            X509v3 Authority Key Identifier:
                keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/6D4C0054BDCF11EA8755D90DC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.145.249.0/24

    Signature Algorithm: sha256WithRSAEncryption
         42:42:8d:26:2c:26:eb:80:e6:33:8d:18:35:77:3a:91:56:a4:
         79:b6:2b:0b:85:fd:19:87:b7:0c:12:09:e5:a3:68:57:50:58:
         2d:98:94:30:8f:93:95:c7:d4:50:0d:79:3a:ac:cf:ff:08:63:
         67:fa:c5:93:76:a9:e1:7c:57:63:d0:06:22:51:aa:de:6e:75:
         25:29:5a:72:64:25:cd:dc:02:d2:da:79:38:9f:eb:ff:87:51:
         b9:b7:8c:e3:85:e6:9e:85:21:9c:a1:5d:6a:68:09:ad:74:82:
         0d:88:90:b3:da:05:63:ae:a0:d7:3e:f8:c6:e9:13:92:22:7d:
         5d:ab:2e:11:f7:b3:1b:7e:7a:6e:f6:1b:50:8d:a7:6d:a3:e0:
         68:f9:02:4c:a4:d5:2b:9b:12:82:52:c4:ce:6d:7e:cb:e9:f1:
         43:d5:0d:ab:2c:6c:70:d2:81:c5:9b:92:7e:d9:36:e9:43:ac:
         f9:4f:16:09:c1:86:a5:0d:d4:0e:ea:f9:29:13:0a:b5:55:2e:
         8a:ad:c0:b5:5a:0d:16:1f:a9:04:a2:9a:14:68:35:55:67:65:
         a2:11:3e:e5:ff:10:dd:d9:1e:5c:fb:83:9e:1f:29:31:f6:f0:
         6c:36:69:3b:9f:41:c3:79:02:50:e1:b0:9e:b1:8d:ac:b9:f5:
         56:4a:8c:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 27 10:19:36 2024 by rpki-client on console-ams.rpki-client.org