Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/6EC804CA513611EE81AEB539C4F9AE02.roa
File:                     6EC804CA513611EE81AEB539C4F9AE02.roa (raw, json)
Hash identifier:          G/pz8XR2OT8v41382OCfwpqxTPuLGdH/RYRAfKY1Zrw=
Subject key identifier:   61:66:46:39:17:73:FE:00:EB:33:D2:A6:2D:CE:E9:DE:4A:72:BC:B5
Certificate issuer:       /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Certificate serial:       7A05
Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/6EC804CA513611EE81AEB539C4F9AE02.roa
Signing time:             Tue 12 Sep 2023 06:34:32 +0000
ROA not before:           Tue 12 Sep 2023 06:34:32 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     137147
IP address blocks:        103.251.252.0/23 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
                          rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 03 May 2024 15:38:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 31237 (0x7a05)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
        Validity
            Not Before: Sep 12 06:34:32 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=65000678-b9f4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:62:19:e9:c1:94:33:c0:ac:18:b2:b5:54:27:
                    41:16:ad:b5:9c:0e:ca:4d:c1:92:e3:bc:76:15:bd:
                    b4:4a:af:c2:d3:0f:73:a4:30:15:07:ab:42:75:6b:
                    2f:f1:82:02:04:6e:d1:8a:88:22:65:31:0c:7d:00:
                    bc:03:9b:c9:bd:05:cf:a7:45:8f:0d:3e:06:a0:b5:
                    c0:57:fa:51:c2:00:11:46:73:43:51:64:90:18:0a:
                    79:91:66:03:73:29:79:16:a0:27:93:80:6f:bb:bb:
                    96:00:1e:91:cd:1c:70:58:cb:f7:af:2f:cc:f7:0f:
                    5c:e6:c0:91:63:c7:b0:00:b4:d9:34:ce:e8:8e:52:
                    83:d8:d2:ea:80:3d:99:67:bb:2b:4c:b1:b1:4b:e1:
                    ba:af:b5:4b:af:f8:80:06:5b:63:2f:51:74:39:4d:
                    ae:40:87:91:86:6e:bf:a0:43:a6:da:83:e7:72:b5:
                    72:ff:e6:be:1f:03:a0:fa:6d:38:27:41:0e:ab:0f:
                    bb:c9:b3:c6:d7:94:0f:36:9f:a9:0f:55:2b:51:5b:
                    97:7f:cf:9b:87:71:7a:4c:f3:bf:f4:d7:90:f4:2e:
                    3e:eb:95:99:e3:d3:c3:3d:b5:eb:95:26:9f:fc:22:
                    9a:a8:43:a2:af:13:e5:a5:58:32:b9:62:f5:57:39:
                    4d:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                61:66:46:39:17:73:FE:00:EB:33:D2:A6:2D:CE:E9:DE:4A:72:BC:B5
            X509v3 Authority Key Identifier:
                keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/6EC804CA513611EE81AEB539C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.251.252.0/23

    Signature Algorithm: sha256WithRSAEncryption
         11:14:55:7b:51:5a:68:05:15:23:48:31:29:d2:7c:24:1c:5e:
         b6:79:ed:fa:95:81:8d:b0:73:eb:1c:e2:ca:1a:a9:8f:54:c8:
         da:57:66:6d:62:f4:90:bc:db:0a:ac:a6:72:0f:11:f6:96:f2:
         40:a3:18:11:a8:b0:2c:b8:4c:6a:e3:ec:bd:66:a8:c8:ea:5c:
         a3:6d:91:f1:00:72:b1:2c:16:81:54:3d:d5:77:56:58:4e:b2:
         ba:75:46:5e:5d:65:ae:11:c0:ee:53:31:ae:48:cf:56:0c:4b:
         65:f4:eb:3f:89:c1:db:5a:5c:cd:5c:2d:23:73:46:d8:4e:a6:
         eb:08:ad:c9:e3:31:2c:d1:d1:27:17:dd:ea:7f:99:5f:fe:dc:
         4d:18:9e:4a:40:36:8d:95:05:a2:80:ea:12:4c:a9:8a:cb:4b:
         62:ab:33:53:88:94:0b:55:ec:68:3e:d3:b8:19:65:36:80:ef:
         03:b8:0b:d1:9e:ad:6f:dc:e3:6b:3e:fa:53:46:a3:2f:e6:6a:
         73:36:ce:d0:c3:3c:fa:6d:32:c4:d2:1f:86:45:7c:e7:97:cd:
         0d:00:8b:0f:cc:df:6a:5c:4e:dc:60:23:ca:31:d9:ad:ea:11:
         52:a5:fe:48:98:fa:eb:62:51:f0:b7:43:6e:44:57:03:32:da:
         5c:59:82:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 27 10:19:36 2024 by rpki-client on console-ams.rpki-client.org