Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/7F610E10328011EDBB66772FC4F9AE02.roa
File:                     7F610E10328011EDBB66772FC4F9AE02.roa (raw, json)
Hash identifier:          XaoLYVi8Z+ksYf4q8kTS/4HqQrSq9YVvg4obAJiysgA=
Subject key identifier:   71:00:59:B7:AC:DF:FA:27:7C:F7:DD:A3:52:90:B5:C3:C6:B9:3B:9E
Certificate issuer:       /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Certificate serial:       70E2
Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/7F610E10328011EDBB66772FC4F9AE02.roa
Signing time:             Wed 10 May 2023 16:45:38 +0000
ROA not before:           Wed 10 May 2023 16:45:38 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     150078
IP address blocks:        103.151.106.0/23 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
                          rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 03 May 2024 15:38:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 28898 (0x70e2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
        Validity
            Not Before: May 10 16:45:38 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=645bca32-768b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:ca:17:0b:6a:25:b0:73:74:4d:e3:d0:b5:c3:
                    94:8a:ef:c5:d8:61:e4:35:f9:a2:ab:1f:3e:34:a6:
                    ff:1a:7a:6a:a5:83:cd:6b:82:6d:63:98:7b:37:6b:
                    49:6b:24:51:b6:f1:53:ca:41:01:c1:56:c2:c6:95:
                    de:0b:b2:42:cc:db:2c:f7:30:d8:97:40:90:64:14:
                    73:d6:9f:67:c3:98:c9:4c:bc:0d:16:17:12:98:54:
                    1c:fa:3e:76:8a:a2:e4:12:0c:6b:ab:ab:31:94:8e:
                    59:7a:58:44:fe:b8:9a:8e:5e:e2:87:fd:b8:7c:05:
                    fe:9c:21:3c:d4:83:d1:7c:58:99:e7:65:ce:53:1f:
                    57:b3:c2:77:64:43:8d:83:ff:5c:71:a3:26:56:08:
                    e6:52:8e:51:75:5c:39:c9:e9:62:3c:ca:56:47:1d:
                    2f:8c:c9:3e:ae:f2:03:51:02:9c:b0:5f:c7:ed:1f:
                    f9:7c:80:a2:ef:d0:1e:b9:1d:7e:18:6f:a3:e9:51:
                    ce:40:e5:4f:06:e0:01:d0:d9:e0:ad:92:af:aa:c7:
                    60:76:fc:5f:3c:71:4d:f5:d6:f8:d0:7c:7a:d4:71:
                    90:1e:20:f4:b5:d7:77:56:7d:7a:8a:78:32:5a:be:
                    d5:f3:4f:10:ef:c9:00:7e:5b:01:62:27:2f:f6:49:
                    b9:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                71:00:59:B7:AC:DF:FA:27:7C:F7:DD:A3:52:90:B5:C3:C6:B9:3B:9E
            X509v3 Authority Key Identifier:
                keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/7F610E10328011EDBB66772FC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.151.106.0/23

    Signature Algorithm: sha256WithRSAEncryption
         76:4d:88:89:d2:a3:44:16:67:80:1e:11:7b:25:a8:7f:7d:1a:
         01:1c:bf:5f:56:ae:84:14:0b:94:74:ce:2e:db:22:6f:00:94:
         e6:04:16:96:1a:e6:d4:49:f7:3c:09:dd:d3:e2:b8:01:2f:d0:
         e7:30:fa:16:dc:3d:b4:5b:1e:51:1a:27:ab:29:85:af:44:e2:
         45:e3:fa:80:ad:79:66:50:e4:0d:0b:41:0a:b6:fc:fa:b2:03:
         9f:3a:cb:b1:fc:3d:49:7b:46:78:21:03:a3:48:f5:53:20:7f:
         01:73:12:a1:5c:3f:30:cf:4a:0e:21:a5:52:28:24:66:18:f8:
         47:8c:35:53:6d:b7:e7:4e:3b:e0:00:35:17:b6:a5:b0:94:19:
         9e:4e:3c:76:73:cd:07:24:64:c6:6a:66:9f:4d:6f:88:94:6d:
         92:62:12:cc:25:ee:1b:e2:4f:83:53:5a:9f:64:85:9c:f3:ae:
         9a:df:e1:2e:18:4c:20:a1:ba:eb:59:e5:90:79:a3:80:9d:09:
         43:33:d5:73:47:53:dd:a3:3e:26:69:4d:8b:a1:b4:4a:0e:1b:
         dc:a2:b5:33:41:68:4e:92:b9:dc:02:50:12:e2:a8:e9:49:4b:
         92:07:20:9b:8e:e7:23:44:da:6e:d4:39:3f:a2:50:29:0c:a2:
         cb:e6:ff:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 27 10:19:38 2024 by rpki-client on console-ams.rpki-client.org