Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/8D3A25F09AD011EC890E2B39C4F9AE02.roa
File:                     8D3A25F09AD011EC890E2B39C4F9AE02.roa (raw, json)
Hash identifier:          inDiPOAhduvox+7SuRP5K6eQ7h26c/MzEjBzzrJ3YIc=
Subject key identifier:   CF:59:82:25:43:54:AE:37:C6:BA:E1:C8:D6:F8:4A:76:73:ED:49:B3
Certificate issuer:       /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Certificate serial:       7098
Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/8D3A25F09AD011EC890E2B39C4F9AE02.roa
Signing time:             Wed 10 May 2023 16:44:19 +0000
ROA not before:           Wed 10 May 2023 16:44:19 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     149605
IP address blocks:        103.182.144.0/23 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
                          rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 03 May 2024 15:38:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 28824 (0x7098)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
        Validity
            Not Before: May 10 16:44:19 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=645bc9e3-9e42
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:19:2e:8d:4b:d1:b7:16:4e:ff:53:83:e1:35:
                    cd:47:d2:ab:d8:68:b5:4a:c3:ee:71:07:d4:cb:b3:
                    88:2d:85:97:c1:e6:3d:75:08:8c:bf:0c:74:e9:3e:
                    fe:7f:dc:d6:b5:15:d7:cd:71:18:b4:4e:3a:15:99:
                    65:87:37:53:2d:c6:ba:66:cb:65:f1:e3:58:22:9f:
                    5d:11:c8:a4:cc:a2:7f:6f:91:28:3e:3e:b3:44:74:
                    36:30:4e:c8:07:9b:e2:9e:42:a7:70:c0:dd:64:c6:
                    27:c0:0e:4c:26:d2:c4:7e:28:92:37:c4:40:df:cd:
                    f6:6d:5e:97:25:c4:97:bb:5e:0b:b6:ee:c7:3b:d3:
                    2e:4a:81:d2:c2:38:d0:75:1f:25:c1:16:55:6f:f5:
                    7a:25:35:41:72:38:ab:a4:46:a1:04:f3:2e:aa:2b:
                    50:fc:6e:8e:6b:b5:db:2f:bd:33:52:3b:5d:26:41:
                    60:4d:13:a1:cd:ab:70:0f:d0:8d:27:e1:1f:89:94:
                    26:27:df:e4:42:c5:8c:8d:4b:c6:4a:7c:d8:3a:30:
                    90:eb:da:69:1a:b9:1b:23:86:a4:ff:53:e1:fe:a2:
                    88:5b:4d:4f:29:85:ae:9e:a5:a5:d3:f7:ae:d6:63:
                    13:73:f4:04:c2:c5:a6:7c:7c:4e:56:68:6e:c4:38:
                    90:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CF:59:82:25:43:54:AE:37:C6:BA:E1:C8:D6:F8:4A:76:73:ED:49:B3
            X509v3 Authority Key Identifier:
                keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/8D3A25F09AD011EC890E2B39C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.182.144.0/23

    Signature Algorithm: sha256WithRSAEncryption
         98:96:83:59:5c:43:68:1a:e7:84:f6:0e:c1:1c:ac:a1:35:a3:
         bb:6b:d0:87:0b:e4:dd:60:8f:15:7a:33:2d:d5:39:a5:37:e1:
         1e:5e:ed:07:28:81:2d:05:0e:9f:9c:44:ba:86:5d:a9:e1:36:
         7c:70:cf:00:6e:92:0d:b6:5a:b8:94:26:af:37:34:76:b2:0d:
         56:28:fc:4d:17:ff:34:e6:90:6f:f6:71:b6:25:1c:bb:12:b3:
         2e:54:53:84:09:cb:c9:7a:30:0c:84:a7:e8:6e:cf:7f:01:19:
         3d:05:7d:dc:b0:d5:53:5c:a7:ee:b4:65:f7:39:a2:3a:ba:13:
         af:b1:bb:4a:3a:30:5e:af:61:41:12:e4:d6:5e:e9:0c:96:98:
         dd:88:3a:dd:a1:ec:5b:0c:7a:74:83:c3:e7:48:c4:59:4c:8e:
         90:98:00:9c:e9:29:f3:41:4a:86:c1:0f:72:81:17:18:8f:06:
         23:a4:73:8f:91:cc:89:7a:3f:cf:67:54:5e:ba:cd:e7:f8:d2:
         2d:2d:a2:5a:bd:4e:3c:45:43:40:10:09:10:75:0e:06:ed:46:
         90:54:6b:e7:0c:88:c4:7b:7d:fd:94:12:4a:fc:67:a5:f7:78:
         d4:62:e5:a5:fd:ae:9a:fd:c1:be:78:56:69:05:c4:27:ba:e8:
         e0:1e:d4:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 27 10:19:39 2024 by rpki-client on console-ams.rpki-client.org