Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/935B110232AE11EE80DCED3FC4F9AE02.roa
File:                     935B110232AE11EE80DCED3FC4F9AE02.roa (raw, json)
Hash identifier:          3sCaSKcfM2lz9hkx3/UUC9ptLqNTrJVmrFHZDj7Tw6A=
Subject key identifier:   21:64:8B:7E:03:12:E8:84:F5:70:A3:9E:B7:48:22:AF:FC:F4:87:03
Certificate issuer:       /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Certificate serial:       832F
Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/935B110232AE11EE80DCED3FC4F9AE02.roa
Signing time:             Mon 19 Feb 2024 11:47:27 +0000
ROA not before:           Mon 19 Feb 2024 11:47:27 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     150643
IP address blocks:        103.247.80.0/23 maxlen: 24
                          2001:df2:c6c0::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
                          rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 02 May 2024 11:49:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 33583 (0x832f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
        Validity
            Not Before: Feb 19 11:47:27 2024 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=65d33fcf-f8d2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:da:94:29:02:1f:7d:fe:59:ae:c5:3a:e9:98:
                    ea:cf:01:37:11:a9:40:f9:03:22:56:5f:86:10:ba:
                    bb:aa:74:06:b6:80:d2:2b:71:3c:86:65:0f:bf:aa:
                    6f:c2:47:d5:65:6d:df:a2:e6:c8:bc:cd:d8:4f:df:
                    12:f4:a1:5a:26:d8:80:e4:99:90:cc:40:3e:2f:8a:
                    c3:04:4c:53:a0:a8:8c:86:6b:12:e8:aa:b2:89:68:
                    6a:a5:a6:86:e3:e7:a6:b0:45:8a:17:98:06:31:01:
                    be:6f:bb:97:55:f3:82:39:60:eb:3a:4a:5d:8c:2c:
                    9a:3c:3e:8f:38:93:6c:85:8a:82:5e:95:82:f1:64:
                    b5:34:7c:c2:b5:c2:50:43:73:63:f8:a6:c0:b6:8f:
                    ac:b0:7d:8d:3c:3c:7d:33:d3:8f:ee:e0:58:a0:d8:
                    ff:c2:f4:06:b0:a0:ed:98:3f:d7:3c:c6:33:30:a8:
                    85:47:e5:57:7c:54:7e:38:e7:cd:6a:f2:e8:7b:95:
                    29:93:ab:73:65:ef:40:60:b9:d8:a7:3e:21:e2:d3:
                    1d:42:1a:d0:7e:14:b0:1e:51:44:ca:dd:0b:bd:99:
                    21:23:8c:c4:be:50:28:fa:ea:17:1d:d0:bd:9a:ac:
                    e1:2c:b0:b8:47:1d:38:21:7d:7a:6c:e0:dc:5e:f1:
                    ca:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                21:64:8B:7E:03:12:E8:84:F5:70:A3:9E:B7:48:22:AF:FC:F4:87:03
            X509v3 Authority Key Identifier:
                keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/935B110232AE11EE80DCED3FC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.247.80.0/23
                IPv6:
                  2001:df2:c6c0::/48

    Signature Algorithm: sha256WithRSAEncryption
         b7:09:56:1e:b1:b8:f6:a5:d1:a6:2a:ba:1e:86:24:00:10:31:
         b5:4b:77:2b:f1:78:90:bf:d5:0d:15:a4:f8:40:62:ae:38:e9:
         88:7f:a7:35:ea:df:b5:84:ad:8e:3b:8b:97:4e:6b:87:b8:da:
         81:97:26:fe:a5:97:00:3d:7e:0e:25:e9:74:b7:5e:4e:8c:47:
         a2:67:5d:03:8f:a9:3a:a2:98:cd:68:74:a5:cc:ae:11:db:c2:
         f0:f3:fc:a4:d7:a0:b8:b5:e1:7b:2a:bd:d0:3a:3c:4f:4b:1d:
         ea:95:43:d0:53:c2:6d:ab:a7:7a:30:ae:b0:85:49:0f:2b:27:
         04:da:0f:79:9d:fd:cd:ec:ad:f4:6f:c5:12:aa:05:a4:cf:9b:
         a5:d6:50:4b:e5:94:69:64:1b:04:06:34:b2:e2:16:5d:a8:20:
         e7:dd:7c:68:29:35:4d:80:cc:22:87:b6:1f:78:2a:a0:75:ec:
         20:db:f6:5d:7f:91:29:1c:a2:f1:06:4a:37:7d:3c:14:3c:c7:
         03:68:f5:3a:86:9b:2f:ab:78:b5:76:a1:a3:eb:f3:ea:e9:41:
         38:c1:72:7e:37:e1:66:c6:66:a2:1f:a2:f5:ae:a5:a7:d9:87:
         aa:6e:03:60:2c:c6:f1:6f:ee:5d:7b:f1:f5:74:89:be:c0:fd:
         f2:c2:03:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 25 22:33:58 2024 by rpki-client on console-fra.rpki-client.org