Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/726D59CEC1DF11EBB27A0812C4F9AE02.roa
File:                     726D59CEC1DF11EBB27A0812C4F9AE02.roa (raw, json)
Hash identifier:          CMiAoVehWD1+4t3xLDNjEInsgc+bJTYVhVT9eYZ5yrY=
Subject key identifier:   6A:18:26:21:A8:18:E8:30:C1:9D:56:21:12:5F:6C:88:95:C3:17:26
Certificate issuer:       /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Certificate serial:       6F27
Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/726D59CEC1DF11EBB27A0812C4F9AE02.roa
Signing time:             Wed 10 May 2023 16:37:27 +0000
ROA not before:           Wed 10 May 2023 16:37:27 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     141848
IP address blocks:        103.166.108.0/24 maxlen: 24
                          103.166.109.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
                          rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 03 May 2024 15:38:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 28455 (0x6f27)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
        Validity
            Not Before: May 10 16:37:27 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=645bc846-d01c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:2e:0a:33:67:45:2c:36:55:61:f4:74:33:5c:
                    da:f2:bc:d7:0b:12:6e:04:6a:0b:cd:0e:2e:4c:fb:
                    56:9c:e1:9c:13:da:c1:63:01:5e:c6:f6:8c:bb:9c:
                    d4:48:e2:1d:22:a7:92:d4:7a:d3:b6:c0:65:27:26:
                    b5:e8:e3:4c:75:64:e0:bd:ce:f7:71:4f:04:ea:64:
                    92:53:5d:0c:96:e4:37:c1:6e:ca:e6:27:80:47:6a:
                    a2:46:38:d8:07:2b:24:36:8b:34:ea:cc:a9:2c:81:
                    a5:62:14:94:58:cd:5b:57:e9:63:eb:0f:d1:43:61:
                    af:fe:af:b0:3b:e0:d1:53:56:8b:a9:29:87:46:4d:
                    62:98:df:8e:98:73:0b:94:d9:ad:73:39:3c:9f:4e:
                    34:20:2d:03:78:01:af:0c:64:ae:a1:bc:d8:f3:b6:
                    a7:04:d4:c2:e6:b3:1d:f7:be:a8:18:e3:41:19:ae:
                    ad:2a:1f:d0:bd:24:83:14:86:9e:1e:04:8c:d7:4b:
                    6d:04:3a:de:c0:05:5d:50:83:1e:8d:ea:e2:6a:e9:
                    52:1e:35:a8:31:84:83:80:f2:79:21:79:8c:9f:fc:
                    f0:6f:7c:60:a8:f9:3a:6e:af:a4:49:fa:b3:59:1d:
                    13:d1:4a:3e:b0:f2:d4:90:2b:36:81:db:16:72:e7:
                    21:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6A:18:26:21:A8:18:E8:30:C1:9D:56:21:12:5F:6C:88:95:C3:17:26
            X509v3 Authority Key Identifier:
                keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/726D59CEC1DF11EBB27A0812C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.166.108.0/23

    Signature Algorithm: sha256WithRSAEncryption
         7a:87:07:13:54:11:c1:ca:9a:d9:a1:d2:3d:22:6d:4c:f3:f8:
         f8:1d:a7:58:1e:33:06:63:42:5e:77:b0:53:c5:ca:ce:af:ef:
         85:d4:f5:7b:2f:96:be:53:7a:1c:11:36:fa:7a:13:cc:c3:5e:
         c6:9c:5e:f2:70:fe:33:71:4b:27:2a:ba:21:a1:d0:2c:15:f2:
         a6:b1:53:25:7c:ff:5d:42:95:16:2b:50:64:b5:47:1e:b2:6c:
         24:13:6e:59:2f:62:76:05:c8:9f:bd:14:f5:77:02:29:40:1c:
         52:4e:c4:c1:ac:90:99:53:02:c0:c7:53:e9:0a:92:55:67:38:
         58:e1:65:02:71:0b:90:81:46:5a:aa:96:1b:fd:1e:97:8a:bd:
         dd:33:6e:24:59:24:90:6c:71:99:ed:a9:46:93:0b:f7:8a:a3:
         f2:90:25:60:5d:19:63:a2:7c:1b:69:1e:70:fb:4b:a8:6b:f3:
         cc:d5:52:fd:3d:08:11:9b:0e:12:76:12:c9:ac:8c:ab:76:dc:
         51:34:13:70:d5:11:a0:eb:46:77:81:8a:d4:97:f1:c6:13:c3:
         3f:df:e9:c7:88:be:48:2a:23:b7:ca:db:c7:df:ab:3f:9d:83:
         bd:0d:91:3c:7d:eb:00:ad:04:04:b3:11:b3:0f:e0:72:b0:47:
         4b:36:d6:b3
-----BEGIN CERTIFICATE-----
MIIFcTCCBFmgAwIBAgICbycwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
OEVEQjIxMTAvBgNVBAUTKDI5NkVEQjY0RjNBRjZFOUQ5ODA5MzJFODE2Rjk1OTgz
RTNBQkM4MjMwHhcNMjMwNTEwMTYzNzI3WhcNMjQwNzAxMDAwMDAwWjAYMRYwFAYD
VQQDEw02NDViYzg0Ni1kMDFjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA0i4KM2dFLDZVYfR0M1za8rzXCxJuBGoLzQ4uTPtWnOGcE9rBYwFexvaMu5zU
SOIdIqeS1HrTtsBlJya16ONMdWTgvc73cU8E6mSSU10MluQ3wW7K5ieAR2qiRjjY
ByskNos06sypLIGlYhSUWM1bV+lj6w/RQ2Gv/q+wO+DRU1aLqSmHRk1imN+OmHML
lNmtczk8n040IC0DeAGvDGSuobzY87anBNTC5rMd976oGONBGa6tKh/QvSSDFIae
HgSM10ttBDrewAVdUIMejeriaulSHjWoMYSDgPJ5IXmMn/zwb3xgqPk6bq+kSfqz
WR0T0Uo+sPLUkCs2gdsWcuch1wIDAQABo4IClTCCApEwHQYDVR0OBBYEFGoYJiGo
GOgwwZ1WIRJfbIiVwxcmMB8GA1UdIwQYMBaAFClu22Tzr26dmAky6Bb5WYPjq8gj
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4RURCMi8yQTQzRTMwQzcw
RTkxMUUyQjM2RDRCNkIyOTc5QkIyMC9LVzdiWlBPdmJwMllDVExvRnZsWmctT3J5
Q00uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0tXN2JaUE92YnAyWUNUTG9GdmxaZy1PcnlDTS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
OEVEQjIvMkE0M0UzMEM3MEU5MTFFMkIzNkQ0QjZCMjk3OUJCMjAvNzI2RDU5Q0VD
MURGMTFFQkIyN0EwODEyQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E
EDAOMAwEAgABMAYDBAFnpmwwDQYJKoZIhvcNAQELBQADggEBAHqHBxNUEcHKmtmh
0j0ibUzz+Pgdp1geMwZjQl53sFPFys6v74XU9Xsvlr5TehwRNvp6E8zDXsacXvJw
/jNxSycquiGh0CwV8qaxUyV8/11ClRYrUGS1Rx6ybCQTblkvYnYFyJ+9FPV3AilA
HFJOxMGskJlTAsDHU+kKklVnOFjhZQJxC5CBRlqqlhv9HpeKvd0zbiRZJJBscZnt
qUaTC/eKo/KQJWBdGWOifBtpHnD7S6hr88zVUv09CBGbDhJ2EsmsjKt23FE0E3DV
EaDrRneBitSX8cYTwz/f6ceIvkgqI7fK28ffqz+dg70NkTx96wCtBASzEbMP4HKw
R0s21rM=
-----END CERTIFICATE-----
Generated at Sat Apr 27 10:19:37 2024 by rpki-client on console-ams.rpki-client.org