Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/8F052754415711ECBBF3CC52C4F9AE02.roa
File:                     8F052754415711ECBBF3CC52C4F9AE02.roa (raw, json)
Hash identifier:          meeBr2jfuDDdS8onxibYOTWeDVIQb5Yf9+NMLP/MWcQ=
Subject key identifier:   AF:0E:36:D3:74:17:D3:FB:13:2B:6B:7B:E3:67:20:DD:44:9C:7E:F9
Certificate issuer:       /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Certificate serial:       6F9B
Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/8F052754415711ECBBF3CC52C4F9AE02.roa
Signing time:             Wed 10 May 2023 16:39:35 +0000
ROA not before:           Wed 10 May 2023 16:39:35 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     146862
IP address blocks:        103.173.80.0/23 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
                          rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 03 May 2024 15:38:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 28571 (0x6f9b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
        Validity
            Not Before: May 10 16:39:35 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=645bc8c7-754a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:2e:7f:85:3b:4a:d4:33:14:56:5f:4f:14:0b:
                    a3:e5:28:7b:a7:c1:25:65:fd:16:8c:84:7d:8b:d7:
                    af:b3:53:50:65:77:50:cf:03:5a:f2:48:f2:91:f0:
                    b7:40:90:d1:15:b8:70:1b:77:46:62:4a:1e:ca:95:
                    8c:70:f0:49:a4:71:8c:a0:cb:71:bb:62:7e:f3:b1:
                    c4:72:5b:47:47:6f:a9:f2:b3:4d:db:65:93:ec:85:
                    6b:e3:06:f3:fc:ec:76:ca:3e:4d:f9:54:da:12:bb:
                    fa:c1:7f:0c:1c:8b:0c:a5:d9:c2:f6:63:8b:b8:9e:
                    6e:9f:f6:4d:af:8e:69:cc:4c:96:f3:6e:5e:c3:42:
                    d6:69:e0:0f:e7:5a:5d:fa:0f:37:bd:3d:28:26:d0:
                    b1:26:d2:59:5e:23:af:be:7e:20:73:80:63:45:7e:
                    e8:25:57:d6:86:c2:7f:27:ff:59:6c:fb:83:f4:a5:
                    14:88:a8:b4:a1:49:72:2f:de:5e:5b:6a:b9:7a:40:
                    2e:63:14:fe:5c:64:33:49:08:d9:68:28:d0:3f:9e:
                    ee:69:4d:dd:ee:b8:b3:73:13:20:71:57:72:44:6e:
                    27:88:cf:b8:aa:1e:a2:e9:c4:6e:d5:64:66:a6:ab:
                    9c:d3:d8:c7:78:5e:60:3a:ee:68:89:14:d6:f2:db:
                    ef:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AF:0E:36:D3:74:17:D3:FB:13:2B:6B:7B:E3:67:20:DD:44:9C:7E:F9
            X509v3 Authority Key Identifier:
                keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/8F052754415711ECBBF3CC52C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.173.80.0/23

    Signature Algorithm: sha256WithRSAEncryption
         26:e5:44:32:f4:f1:1a:53:5b:a1:a6:b1:75:36:92:2c:68:8d:
         c9:87:06:03:24:3a:60:36:15:3d:12:6b:37:7b:11:ea:22:1e:
         2a:e6:32:59:67:0b:17:e6:7c:83:33:bb:ba:c3:56:3f:34:7a:
         91:86:d8:05:88:74:d8:f4:3b:0a:6c:83:ce:d0:89:83:a4:8f:
         30:73:42:f5:44:71:5c:ed:dd:53:af:af:ab:8d:22:e5:01:9b:
         88:02:0e:2e:58:49:e8:da:54:7a:ec:87:09:58:e4:92:95:12:
         2c:a2:94:5f:54:66:a0:79:50:25:27:ab:95:e6:1b:18:86:95:
         e2:50:db:c2:f3:86:e3:6e:e2:2d:00:d2:73:b5:f2:c4:d7:5c:
         8d:a9:4f:94:a9:6f:51:86:79:1d:ab:33:b1:d9:c1:b4:91:e2:
         11:2a:eb:03:f1:26:d9:9b:16:b3:81:aa:a7:10:78:c7:be:fa:
         16:f3:f8:10:2f:d3:60:d3:b3:65:6e:0d:31:fc:c8:db:db:86:
         e1:c2:13:9b:62:4f:e7:ce:ff:f5:b6:22:79:02:93:58:02:3d:
         e9:f9:d8:14:e2:c8:d5:47:5c:bb:ad:5f:f9:64:42:ce:45:a5:
         2d:c5:15:83:17:e0:48:c0:6e:b0:75:29:71:c6:60:d7:3f:3e:
         dc:65:8a:5f
-----BEGIN CERTIFICATE-----
MIIFcTCCBFmgAwIBAgICb5swDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
OEVEQjIxMTAvBgNVBAUTKDI5NkVEQjY0RjNBRjZFOUQ5ODA5MzJFODE2Rjk1OTgz
RTNBQkM4MjMwHhcNMjMwNTEwMTYzOTM1WhcNMjQwNzAxMDAwMDAwWjAYMRYwFAYD
VQQDEw02NDViYzhjNy03NTRhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAyC5/hTtK1DMUVl9PFAuj5Sh7p8ElZf0WjIR9i9evs1NQZXdQzwNa8kjykfC3
QJDRFbhwG3dGYkoeypWMcPBJpHGMoMtxu2J+87HEcltHR2+p8rNN22WT7IVr4wbz
/Ox2yj5N+VTaErv6wX8MHIsMpdnC9mOLuJ5un/ZNr45pzEyW825ew0LWaeAP51pd
+g83vT0oJtCxJtJZXiOvvn4gc4BjRX7oJVfWhsJ/J/9ZbPuD9KUUiKi0oUlyL95e
W2q5ekAuYxT+XGQzSQjZaCjQP57uaU3d7rizcxMgcVdyRG4niM+4qh6i6cRu1WRm
pquc09jHeF5gOu5oiRTW8tvvLQIDAQABo4IClTCCApEwHQYDVR0OBBYEFK8ONtN0
F9P7Eytre+NnIN1EnH75MB8GA1UdIwQYMBaAFClu22Tzr26dmAky6Bb5WYPjq8gj
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4RURCMi8yQTQzRTMwQzcw
RTkxMUUyQjM2RDRCNkIyOTc5QkIyMC9LVzdiWlBPdmJwMllDVExvRnZsWmctT3J5
Q00uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0tXN2JaUE92YnAyWUNUTG9GdmxaZy1PcnlDTS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
OEVEQjIvMkE0M0UzMEM3MEU5MTFFMkIzNkQ0QjZCMjk3OUJCMjAvOEYwNTI3NTQ0
MTU3MTFFQ0JCRjNDQzUyQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E
EDAOMAwEAgABMAYDBAFnrVAwDQYJKoZIhvcNAQELBQADggEBACblRDL08RpTW6Gm
sXU2kixojcmHBgMkOmA2FT0Sazd7EeoiHirmMllnCxfmfIMzu7rDVj80epGG2AWI
dNj0Owpsg87QiYOkjzBzQvVEcVzt3VOvr6uNIuUBm4gCDi5YSejaVHrshwlY5JKV
EiyilF9UZqB5UCUnq5XmGxiGleJQ28LzhuNu4i0A0nO18sTXXI2pT5Spb1GGeR2r
M7HZwbSR4hEq6wPxJtmbFrOBqqcQeMe++hbz+BAv02DTs2VuDTH8yNvbhuHCE5ti
T+fO//W2InkCk1gCPen52BTiyNVHXLutX/lkQs5FpS3FFYMX4EjAbrB1KXHGYNc/
Ptxlil8=
-----END CERTIFICATE-----
Generated at Sat Apr 27 10:19:39 2024 by rpki-client on console-ams.rpki-client.org