Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/75ABEB9C707411ED96461866C4F9AE02.roa
File:                     75ABEB9C707411ED96461866C4F9AE02.roa (raw, json)
Hash identifier:          grAkIZYrU8FQT/s6A6HJrT9kpDVX97uJc7rXroxAbbk=
Subject key identifier:   7D:56:46:27:45:67:30:CD:27:B0:01:DD:49:8A:E8:83:2C:D2:82:69
Certificate issuer:       /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Certificate serial:       7180
Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/75ABEB9C707411ED96461866C4F9AE02.roa
Signing time:             Wed 10 May 2023 16:48:33 +0000
ROA not before:           Wed 10 May 2023 16:48:33 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     400377
IP address blocks:        103.175.106.0/23 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
                          rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 03 May 2024 15:38:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 29056 (0x7180)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
        Validity
            Not Before: May 10 16:48:33 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=645bcae1-9383
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:00:5a:7e:54:a4:90:87:6f:be:21:1c:d6:c3:
                    0b:ce:e2:8a:69:b7:aa:d4:b0:64:db:e6:7d:77:bc:
                    8b:15:01:3d:0c:8a:0e:64:e7:8f:1c:f3:f4:e4:65:
                    77:4d:ef:9f:74:af:d2:d0:6a:3a:4c:24:e7:89:8c:
                    71:53:7d:03:bc:ce:57:44:6e:bb:b9:95:58:a5:e2:
                    99:05:d0:c5:62:6a:96:bc:99:58:2e:20:20:9f:e8:
                    4a:2b:7e:8c:4d:67:28:c0:ef:2f:3d:20:02:e0:a4:
                    9c:98:30:2a:77:01:21:d3:45:ea:b0:d0:20:75:38:
                    14:35:5c:e6:9e:10:d0:7c:19:44:57:3e:38:62:b9:
                    8f:d1:29:c8:44:50:08:80:42:88:0e:60:72:67:ae:
                    46:49:09:a9:2e:24:a9:82:b0:de:d9:47:d2:86:ef:
                    06:ec:ab:65:11:99:76:57:01:d6:a6:65:d2:a7:f3:
                    be:d4:97:57:ab:89:34:e8:f4:8a:5c:ed:f6:9b:3a:
                    c4:93:6f:22:a8:f8:ff:f9:65:45:ea:0c:99:15:90:
                    12:7e:4b:5a:2f:65:43:51:7b:b6:44:55:a7:2b:82:
                    b8:e3:80:76:7b:ea:28:db:6e:14:de:c4:b6:e7:79:
                    5a:3a:d1:8f:32:38:96:2d:0d:fa:c4:ee:9d:53:e5:
                    17:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7D:56:46:27:45:67:30:CD:27:B0:01:DD:49:8A:E8:83:2C:D2:82:69
            X509v3 Authority Key Identifier:
                keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/75ABEB9C707411ED96461866C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.175.106.0/23

    Signature Algorithm: sha256WithRSAEncryption
         3f:c6:80:87:5b:79:97:66:4d:36:46:14:19:7f:ae:c6:6d:11:
         53:08:6e:0b:e0:7f:64:a6:f5:4e:4e:10:af:d8:ae:a1:b6:45:
         9b:97:f1:c7:77:71:0f:a8:47:ed:85:d8:15:d3:fd:5d:3a:cd:
         ea:f3:fd:28:5e:8f:d5:16:bb:6a:05:3f:8b:e7:bc:ea:89:7c:
         0f:83:b1:96:c3:3a:5a:6c:6e:f2:a8:ec:d2:84:70:24:a1:a4:
         d6:75:ab:fa:64:60:d7:60:24:0f:45:fe:6a:3d:7f:2c:62:25:
         ba:40:cd:2f:66:93:5d:ea:32:24:b3:01:ce:ec:8d:21:cd:20:
         cf:60:a1:da:21:c9:0d:96:78:83:2d:f5:48:8b:99:dc:75:0f:
         cc:ae:89:0d:4d:2d:b9:f2:ad:ff:7a:35:8a:26:3f:bc:ef:df:
         b5:c7:85:3c:72:2d:ac:99:4d:c7:a0:f1:be:88:3c:7a:bc:7c:
         2c:5e:d5:57:85:3d:e1:4d:bb:96:56:b9:01:fd:7a:6b:51:13:
         20:0f:9f:7e:61:d1:7c:c6:f9:c6:f3:db:10:1b:fe:a3:72:67:
         ce:50:b5:bf:c4:78:92:45:08:bb:3d:84:6e:9c:b7:e4:a6:a0:
         a3:e0:4e:39:7a:28:31:d2:52:4e:24:25:1c:30:4e:14:c5:f6:
         7a:1a:b7:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 27 10:19:37 2024 by rpki-client on console-ams.rpki-client.org