Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/77BDCFDCD39711ED88221345C4F9AE02.roa
File:                     77BDCFDCD39711ED88221345C4F9AE02.roa (raw, json)
Hash identifier:          UuqlwdJmpt77hEg8oCBhC2+JcN6dPBzLXObBI7wF9IM=
Subject key identifier:   6A:9E:FE:D3:5E:FE:A9:BE:A7:AA:C2:89:D7:82:19:F1:E4:CB:87:42
Certificate issuer:       /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Certificate serial:       6FCC
Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/77BDCFDCD39711ED88221345C4F9AE02.roa
Signing time:             Wed 10 May 2023 16:40:31 +0000
ROA not before:           Wed 10 May 2023 16:40:31 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     146935
IP address blocks:        103.170.242.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
                          rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 03 May 2024 15:38:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 28620 (0x6fcc)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
        Validity
            Not Before: May 10 16:40:31 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=645bc8ff-a072
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:1c:47:c0:dd:2d:09:c7:ad:78:6a:c7:31:72:
                    82:61:b9:9e:98:a9:26:c7:f5:cc:9a:3a:b1:c6:49:
                    02:0f:9a:1a:a1:e1:03:98:75:e7:d1:71:1c:19:a4:
                    fc:19:03:a8:09:bf:d9:2b:54:df:e0:82:66:ae:90:
                    65:b6:56:6a:8f:53:b3:8f:3e:71:ca:f0:48:00:77:
                    b2:75:fb:8e:a8:e8:01:db:c5:05:8f:e9:b9:c7:63:
                    b3:2a:f7:1a:3e:ea:7c:ac:3c:87:c8:26:c4:d0:89:
                    ce:0d:94:3b:56:ae:ad:34:50:e5:20:13:59:0e:1a:
                    9f:d0:77:3b:da:89:b5:f9:25:a7:27:e5:51:0f:5f:
                    13:25:39:bf:5f:e6:db:70:f9:38:e1:30:25:bc:fc:
                    05:94:3d:51:ba:d2:f2:77:87:63:d0:bc:15:ce:35:
                    84:15:08:88:1a:72:a4:bf:d5:24:8f:80:de:44:86:
                    cb:fb:58:22:db:ce:c5:c9:ad:6c:be:d9:8b:1d:e1:
                    60:e5:a6:95:f8:e6:76:17:8f:82:2c:ee:8c:e3:cb:
                    cb:66:c9:e0:a0:5a:74:8d:9f:96:da:1b:5e:dd:4d:
                    e0:b6:0b:14:c9:4b:41:34:6a:77:b3:d5:6d:df:95:
                    1b:37:f9:9b:9f:ad:c3:db:06:47:49:fb:e5:0f:68:
                    25:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6A:9E:FE:D3:5E:FE:A9:BE:A7:AA:C2:89:D7:82:19:F1:E4:CB:87:42
            X509v3 Authority Key Identifier:
                keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/77BDCFDCD39711ED88221345C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.170.242.0/24

    Signature Algorithm: sha256WithRSAEncryption
         85:d4:b4:78:66:fa:46:52:1e:2a:ae:ec:37:b2:15:12:8a:b2:
         6f:27:2b:e8:10:c8:42:cd:4e:16:96:aa:6c:ac:18:86:b1:6d:
         11:f2:06:c9:36:c6:a4:b8:99:33:9d:76:e7:b3:4b:76:c7:8c:
         c7:93:73:3b:c2:08:37:ce:80:af:2d:89:57:02:68:1c:89:d9:
         72:17:61:a4:e9:81:8e:3a:32:eb:e7:f0:95:d3:13:0d:0a:0b:
         f0:70:93:e0:dd:1a:5e:26:10:6f:83:b8:d5:b7:b9:67:12:8c:
         8b:f1:39:bc:d0:68:20:7c:60:b3:81:94:87:6b:07:da:18:87:
         0f:6a:16:ca:ff:87:59:02:5c:f7:cf:be:71:5e:8d:87:e4:b7:
         39:65:d8:87:55:b6:21:e3:ff:54:b9:c6:68:5f:90:af:fa:a3:
         fb:ac:9d:62:66:b6:2c:1e:d2:58:01:65:98:bf:5f:a5:a6:2f:
         b7:39:10:21:60:db:61:ae:ed:ca:1e:e7:d6:dd:9e:c1:67:80:
         f1:d0:2d:2d:54:d6:4b:3c:6f:f9:c4:c1:29:ad:a9:ba:ef:b6:
         fb:ef:f1:5e:9d:cd:8c:b8:77:c8:c9:c9:cf:f4:ff:73:d3:af:
         4b:13:1b:7c:a0:86:7b:fc:02:bb:48:b4:56:d7:ff:80:91:b4:
         e6:6a:c3:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 27 10:19:37 2024 by rpki-client on console-ams.rpki-client.org