Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/7A61919C0FA411EB817C5A77C4F9AE02.roa
File:                     7A61919C0FA411EB817C5A77C4F9AE02.roa (raw, json)
Hash identifier:          l2vKSDi4FADmhMKnRtSp/EOtK6g4dsgx943ySCob3Mw=
Subject key identifier:   EB:AB:50:48:84:AB:E1:C3:24:E3:A2:A6:B1:74:BC:00:04:32:64:E4
Certificate issuer:       /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Certificate serial:       6BCE
Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/7A61919C0FA411EB817C5A77C4F9AE02.roa
Signing time:             Wed 10 May 2023 16:21:28 +0000
ROA not before:           Wed 10 May 2023 16:21:28 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     135696
IP address blocks:        103.113.27.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
                          rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 03 May 2024 15:38:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 27598 (0x6bce)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
        Validity
            Not Before: May 10 16:21:28 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=645bc487-d354
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:e3:51:bf:4e:56:1a:ac:ea:f3:6b:72:0e:0e:
                    3a:f0:74:71:c5:3f:5e:49:28:80:a9:21:a1:7c:2a:
                    f8:79:f5:15:f8:fd:9b:60:5b:b8:4e:62:14:fd:01:
                    d7:27:13:a7:ce:bd:34:97:f4:8f:d3:44:54:3b:9f:
                    5f:62:31:06:ee:74:48:36:91:82:d0:9f:0a:36:16:
                    ae:3b:96:7b:d2:85:0e:30:98:bf:44:99:29:65:e1:
                    28:3d:13:84:4f:32:24:3b:ba:d2:2c:77:e1:3d:d5:
                    97:4c:c4:b8:3e:c9:f2:4c:d7:7b:20:a9:37:8c:a7:
                    65:9a:72:3a:83:20:d0:7e:a2:84:c6:ee:dd:d9:11:
                    f0:db:3c:63:50:39:68:18:39:32:fa:0d:55:b2:d9:
                    64:33:97:e0:fe:7d:77:dd:4b:c7:cf:ff:54:0c:5e:
                    1a:81:6f:b1:85:cf:59:41:79:43:74:2f:3c:bf:97:
                    a4:ef:96:f3:3b:a6:6c:48:f2:fc:9c:76:38:52:74:
                    3a:e1:e5:76:3f:7d:9a:79:db:7c:c7:3d:f2:a5:8e:
                    88:9f:b7:fa:21:7a:09:12:09:5e:8c:79:97:f6:f2:
                    12:ea:9b:e2:58:e9:a1:a3:f2:64:02:1f:fb:42:38:
                    b3:26:6e:8a:40:ea:b0:4d:7b:eb:ce:9c:68:40:06:
                    67:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EB:AB:50:48:84:AB:E1:C3:24:E3:A2:A6:B1:74:BC:00:04:32:64:E4
            X509v3 Authority Key Identifier:
                keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/7A61919C0FA411EB817C5A77C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.113.27.0/24

    Signature Algorithm: sha256WithRSAEncryption
         6c:09:c4:b6:02:6f:4f:30:c3:1d:96:33:7f:5e:98:9c:0a:ec:
         17:5f:39:44:3e:39:f1:da:45:9c:84:8c:b3:08:99:8f:b7:b5:
         e2:18:fb:e5:4e:67:2a:d2:2e:3c:0a:68:da:44:ff:c4:26:6a:
         32:d2:53:ff:bd:ce:42:19:91:44:3a:40:af:e9:3c:90:f8:42:
         6b:0c:62:9a:82:5f:46:96:94:b6:4e:bf:a0:16:79:41:8e:bf:
         87:55:83:f1:d5:55:9b:a6:60:d8:b8:08:34:42:5f:a0:89:96:
         c4:8a:1f:d4:62:17:1c:e3:e8:a9:c7:d9:29:e9:24:04:25:7a:
         77:26:b7:29:89:74:9c:1a:ce:ea:46:92:e1:2f:f2:57:0f:09:
         bf:74:7c:53:2c:89:88:81:00:a6:57:6f:f1:11:92:2d:8b:5e:
         67:e9:4d:3b:fb:a9:98:f6:8b:a9:5a:23:a5:34:49:b9:7c:8f:
         ae:a0:97:83:1b:cb:27:d6:ac:50:9f:9f:46:b0:08:25:df:67:
         f7:9b:ab:a9:0d:28:58:13:c9:97:eb:95:26:d6:87:38:d6:45:
         9e:9d:17:d5:ea:92:a7:15:b4:b8:03:d5:76:ef:90:9a:67:33:
         17:85:e9:95:34:45:0c:9f:77:e2:5a:b4:ac:03:c9:02:47:d0:
         d1:08:63:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 27 10:19:37 2024 by rpki-client on console-ams.rpki-client.org