Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/6EAC2BF0B96211ECA4322D20C4F9AE02.roa
File:                     6EAC2BF0B96211ECA4322D20C4F9AE02.roa (raw, json)
Hash identifier:          +dWL+s6p4XsFgBY+4J4KeySJXfLZSZyvApYFgS4j1fk=
Subject key identifier:   09:6D:CA:A2:02:0B:16:3C:68:ED:28:E3:E6:93:23:75:DC:66:C0:F3
Certificate issuer:       /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Certificate serial:       706B
Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/6EAC2BF0B96211ECA4322D20C4F9AE02.roa
Signing time:             Wed 10 May 2023 16:43:30 +0000
ROA not before:           Wed 10 May 2023 16:43:30 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     149542
IP address blocks:        103.184.166.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
                          rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 03 May 2024 15:38:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 28779 (0x706b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
        Validity
            Not Before: May 10 16:43:30 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=645bc9b1-ae8a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:bb:13:59:03:54:c0:72:7b:a4:55:c2:d5:68:
                    00:01:75:12:60:fd:83:ce:f0:3b:95:d1:fa:77:fe:
                    78:76:ac:9f:cb:21:d6:c1:3d:37:b8:97:f7:f1:20:
                    b6:b3:89:72:ad:65:48:f2:95:3f:a8:b9:77:a8:e1:
                    6b:23:52:58:4a:31:c0:41:4d:f7:7f:ee:71:f0:a2:
                    26:c8:94:fd:d4:47:d3:c1:d4:ff:51:90:dc:a8:37:
                    d8:7f:5e:70:1d:28:f8:48:57:bd:68:54:eb:2c:33:
                    d0:36:8e:db:d3:42:76:ee:52:01:5d:25:97:d4:12:
                    b0:d0:c6:1e:d6:79:18:f3:f9:5d:a8:42:d2:08:98:
                    41:0f:02:7f:5e:54:c7:7d:30:81:a8:0e:aa:f2:3a:
                    3c:a3:b3:d2:92:ea:d4:bb:70:fd:2e:9e:64:b0:22:
                    70:cd:f8:8a:6a:d5:e6:b0:9c:cf:cf:72:66:9a:02:
                    f5:e5:92:9f:9f:42:92:59:6e:fd:8a:60:19:01:b1:
                    fe:6b:f9:d8:d2:4d:78:3a:e9:ef:ed:84:e1:2d:7c:
                    6a:24:c6:03:11:a0:da:a5:75:66:20:e1:32:5d:f5:
                    cc:5e:a4:63:55:be:20:b7:9a:ac:c2:00:45:6a:0f:
                    4a:63:fb:df:aa:5a:bb:8e:30:42:b9:90:1f:fd:0c:
                    11:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                09:6D:CA:A2:02:0B:16:3C:68:ED:28:E3:E6:93:23:75:DC:66:C0:F3
            X509v3 Authority Key Identifier:
                keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/6EAC2BF0B96211ECA4322D20C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.184.166.0/24

    Signature Algorithm: sha256WithRSAEncryption
         6d:18:e8:a8:6c:2a:d2:78:ef:e8:90:f9:77:65:56:fd:84:9e:
         23:36:0f:48:1f:70:bc:25:7c:d1:28:61:50:53:1c:99:17:e6:
         31:c0:81:5f:ca:ef:4f:91:8c:4c:5a:67:37:1c:2a:ef:e9:5b:
         66:98:f3:7a:12:c7:f9:2c:be:db:aa:48:32:c8:57:a0:27:b3:
         f3:e0:6f:6b:d8:db:5f:20:a3:8e:6b:aa:6d:e2:bc:57:69:a0:
         7b:87:21:5c:a6:71:1f:59:99:d0:5d:67:24:9e:79:2c:44:72:
         c0:6d:5a:e6:ec:22:ce:e9:f1:f3:97:a4:37:4e:16:99:d7:a5:
         15:fd:ef:c9:16:b2:3c:b5:b9:4d:44:28:f3:1f:89:9e:0b:51:
         bd:21:6d:b3:26:a6:6c:bf:73:c1:99:80:55:c9:ce:27:23:a7:
         76:f2:93:63:bc:d7:11:6f:e5:d5:cf:12:fc:a1:e9:b6:ad:2d:
         ca:d4:fc:bc:5e:75:1c:31:5b:ac:a3:ed:5c:10:14:60:f2:c3:
         db:df:ff:2a:af:05:fa:e9:59:08:f9:20:62:94:e8:74:58:c1:
         fb:e2:91:ba:20:29:e0:9b:f3:76:9c:e3:0d:fe:3e:42:56:34:
         a2:4b:fa:8f:de:f0:15:b7:f8:d8:0a:e2:65:35:30:58:39:a4:
         7b:0d:c2:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 27 10:19:36 2024 by rpki-client on console-ams.rpki-client.org