Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/79AFBDFA145411EB92AD130AC4F9AE02.roa
File:                     79AFBDFA145411EB92AD130AC4F9AE02.roa (raw, json)
Hash identifier:          edG2bDDzDLi6LTkn4Ws5TIoAg3QZK9ujTnmTUTxWt5o=
Subject key identifier:   2A:09:5F:1B:9F:FF:95:BB:AA:08:55:7C:A8:44:EE:ED:8A:23:63:B8
Certificate issuer:       /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Certificate serial:       6C1E
Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/79AFBDFA145411EB92AD130AC4F9AE02.roa
Signing time:             Wed 10 May 2023 16:22:59 +0000
ROA not before:           Wed 10 May 2023 16:22:59 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     135833
IP address blocks:        103.83.211.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
                          rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 03 May 2024 15:38:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 27678 (0x6c1e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
        Validity
            Not Before: May 10 16:22:59 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=645bc4e3-5ddf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:df:d3:76:42:ae:bc:12:3f:74:bc:34:59:92:
                    d2:3c:62:6a:33:cd:ce:52:1f:77:15:9c:aa:84:bd:
                    a6:97:d4:bc:8b:37:3c:e4:75:c3:56:29:55:e0:07:
                    16:9b:c3:75:2b:13:66:17:7e:10:5e:c3:e1:ef:f1:
                    4b:19:94:ee:1e:25:bd:4e:77:4b:b6:9e:2d:25:c3:
                    65:dc:15:a8:fd:f1:e7:30:50:58:d6:25:1f:62:08:
                    23:c2:05:b9:69:b9:7d:9e:76:82:19:a5:ed:b7:fa:
                    59:97:a7:86:c7:d9:c5:d3:9d:1d:01:a1:29:75:84:
                    f5:84:19:e6:5e:4a:c0:0e:f9:64:a1:56:18:ab:5d:
                    97:37:70:0f:c4:ff:0b:d3:66:e7:4e:9b:40:e0:bb:
                    a7:ca:69:83:d4:9e:5c:c6:50:ae:e0:69:37:52:69:
                    85:d4:ab:c9:7e:2c:12:37:db:74:08:2f:d8:c7:67:
                    c9:3a:00:ad:42:72:9a:f6:70:5c:fb:0e:57:f9:3c:
                    b1:81:00:8c:69:f7:0f:f9:6e:47:8d:80:3d:1f:e4:
                    a7:bc:e1:66:30:bf:aa:ad:01:ce:2e:49:ee:6f:62:
                    ac:ff:12:6b:04:87:ba:f3:03:f5:f6:48:36:69:48:
                    30:1c:d4:96:c7:15:fe:a0:e4:e6:74:6e:3e:03:87:
                    d0:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2A:09:5F:1B:9F:FF:95:BB:AA:08:55:7C:A8:44:EE:ED:8A:23:63:B8
            X509v3 Authority Key Identifier:
                keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/79AFBDFA145411EB92AD130AC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.83.211.0/24

    Signature Algorithm: sha256WithRSAEncryption
         0e:07:48:3e:63:69:1d:e5:ac:b0:e1:1f:e0:cf:1e:2f:f3:a1:
         fa:e8:35:b4:46:38:ee:b6:0b:96:b8:41:97:80:53:f7:65:8f:
         aa:aa:78:59:4d:71:e6:fd:b8:75:b9:fe:06:3c:f4:52:2f:6a:
         c9:c0:6e:79:7f:6c:2e:94:b5:9d:84:c1:e8:f6:8c:ec:88:ff:
         88:1b:b7:7e:f7:de:6a:f1:81:51:f7:17:85:9f:90:5e:79:5d:
         a6:6f:22:e9:f8:3a:a1:e3:f5:90:19:35:6b:f2:80:e6:88:4c:
         e4:89:36:b2:bd:24:27:f9:70:e2:95:38:fd:e6:f8:f8:ee:e2:
         53:f8:ae:71:2c:0a:c7:e1:a3:3d:60:01:f0:1b:ed:c2:dd:2f:
         44:61:f2:f3:66:80:e9:dd:51:4b:cb:04:64:dd:97:e9:81:da:
         d9:78:69:85:6d:dc:c6:88:a9:1a:07:88:58:c0:f2:87:0a:23:
         5b:15:8c:91:e6:0e:6a:dd:55:12:fc:59:b9:4c:43:4c:4c:1f:
         a8:bd:7e:ec:f4:c4:d8:6c:00:55:a6:50:a3:40:b5:51:e0:84:
         85:c1:b8:aa:e7:a5:e9:1a:27:4f:eb:cd:89:81:9c:5d:75:be:
         00:1f:b3:ce:06:a3:f2:e4:c4:c0:01:66:f0:c3:29:e8:04:33:
         cf:3e:4d:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 27 10:19:37 2024 by rpki-client on console-ams.rpki-client.org