Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/71A60012004011EE8F32354EC4F9AE02.roa
File:                     71A60012004011EE8F32354EC4F9AE02.roa (raw, json)
Hash identifier:          3fjgGEVR5wrtev49/s8IpnOBldNfxKObKIdAPBJneAs=
Subject key identifier:   50:44:C2:84:FE:85:5D:BB:B9:AA:F7:3A:E3:CC:97:EB:4A:E7:36:11
Certificate issuer:       /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Certificate serial:       731A
Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/71A60012004011EE8F32354EC4F9AE02.roa
Signing time:             Thu 01 Jun 2023 05:52:08 +0000
ROA not before:           Thu 01 Jun 2023 05:52:08 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     151112
IP address blocks:        103.98.4.0/23 maxlen: 24
                          2001:df2:86c0::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
                          rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 03 May 2024 15:38:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 29466 (0x731a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
        Validity
            Not Before: Jun  1 05:52:08 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=64783208-4005
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:14:77:6d:b4:16:ca:68:48:24:ce:74:41:26:
                    54:3c:f0:3d:c0:8e:5b:69:75:a1:ea:08:30:8e:2c:
                    15:a3:8c:3c:31:c1:a8:b9:46:11:7e:20:40:c3:a3:
                    1d:49:dc:d0:61:43:a2:67:a7:65:56:c4:c2:10:68:
                    79:3a:90:df:af:65:3e:de:61:9e:b7:ca:ae:db:14:
                    60:76:bc:38:d4:5d:cd:2d:7e:f3:73:3e:e6:d9:fd:
                    97:97:e1:19:c8:78:30:cb:d2:96:99:1b:53:37:1b:
                    30:2f:04:1c:05:1d:47:41:d7:00:5a:79:ec:7b:39:
                    08:94:f8:a3:20:29:8c:c8:63:ab:03:bc:1b:52:1b:
                    42:da:cf:40:7f:80:71:ed:f2:a4:c9:49:61:d3:53:
                    85:0a:39:38:b2:8c:ee:88:d3:c2:ba:f0:7f:ab:86:
                    4f:bd:98:b8:89:c6:c3:2a:38:ab:f5:d3:38:e8:1d:
                    dc:69:f0:05:29:86:96:cc:b3:f7:13:21:fc:a7:9c:
                    21:8d:94:2d:e1:87:96:ef:a6:0b:ac:5e:eb:10:e5:
                    62:4e:b6:db:cb:78:8f:52:ec:aa:81:d4:82:bf:61:
                    54:62:3e:34:77:8d:7f:7e:ab:8f:69:68:b2:8a:e7:
                    72:bd:90:31:ee:a8:3a:43:09:47:57:41:fe:71:a0:
                    35:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                50:44:C2:84:FE:85:5D:BB:B9:AA:F7:3A:E3:CC:97:EB:4A:E7:36:11
            X509v3 Authority Key Identifier:
                keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/71A60012004011EE8F32354EC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.98.4.0/23
                IPv6:
                  2001:df2:86c0::/48

    Signature Algorithm: sha256WithRSAEncryption
         8b:4b:df:7d:39:0a:0c:fa:f9:d5:43:37:74:30:90:c5:ec:68:
         36:1e:a0:95:d8:ca:88:58:9c:03:39:45:7a:72:af:04:19:2f:
         90:20:3d:22:bc:cd:41:a2:cc:b7:12:25:eb:cc:a3:2a:da:b3:
         a6:32:37:c1:a0:77:12:0d:ff:a5:b2:1c:48:58:63:53:83:6e:
         ef:45:ea:8e:0d:46:67:ca:33:9e:ef:83:19:d4:ba:df:e0:52:
         fc:6d:09:f7:df:2c:dc:66:0e:35:63:93:cd:cd:aa:4b:c8:05:
         f5:89:b8:2e:95:e7:0e:2a:79:1f:7f:11:8e:7e:a7:59:53:ae:
         ff:05:ab:7b:53:7b:ad:c2:33:fb:c7:58:dd:e8:8d:a3:47:0e:
         fb:e2:5f:14:aa:7b:81:6a:f7:3b:25:86:c4:22:a6:de:ff:bd:
         80:33:09:08:6b:66:e9:01:ac:cd:0f:bc:9c:32:8f:fe:f3:f8:
         f7:94:39:66:17:ca:97:d6:59:39:b3:8b:ce:55:c8:b6:4f:10:
         e9:0a:83:af:6d:f0:48:e1:38:19:68:f8:ba:67:f1:cd:9f:8d:
         ad:e9:b6:92:c2:6e:af:ea:4a:3a:3d:90:78:86:bd:52:1d:f8:
         4c:f1:af:3e:4b:c2:2c:95:44:3f:16:50:50:da:3a:1c:ab:18:
         0b:95:76:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 27 10:19:37 2024 by rpki-client on console-ams.rpki-client.org