Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/9610184CA39E11EDA897D05FC4F9AE02.roa
File:                     9610184CA39E11EDA897D05FC4F9AE02.roa (raw, json)
Hash identifier:          S5BKFOnlMp8gTtUxaQYK3Igt8r9v9vsIr3KMUAKIaEU=
Subject key identifier:   50:11:68:9D:55:79:8F:44:A2:06:46:D2:D7:4D:B0:EE:4D:2F:D9:85
Certificate issuer:       /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Certificate serial:       6DE2
Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/9610184CA39E11EDA897D05FC4F9AE02.roa
Signing time:             Wed 10 May 2023 16:31:30 +0000
ROA not before:           Wed 10 May 2023 16:31:29 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     139515
IP address blocks:        103.182.106.0/23 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
                          rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 03 May 2024 15:38:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 28130 (0x6de2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
        Validity
            Not Before: May 10 16:31:29 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=645bc6e1-52da
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ea:27:17:03:23:6e:df:f2:3d:35:37:fd:15:a4:
                    27:93:f1:81:80:73:d4:69:a2:6f:a7:c6:3b:31:73:
                    a3:c6:7b:94:6c:ad:81:20:c6:ec:8e:53:04:32:6e:
                    33:4f:2f:75:dc:00:e0:31:8b:1b:d6:7c:b9:a0:e0:
                    81:ec:78:0e:b4:10:63:22:4b:d6:47:31:05:ea:7b:
                    a5:62:5f:65:a8:4e:46:4d:44:5f:95:4e:3a:72:af:
                    f1:bb:da:3a:75:ec:6e:44:25:82:32:62:c7:88:9a:
                    64:90:f5:e8:d7:dc:77:51:0a:91:b3:3c:c7:d7:97:
                    64:6f:2c:94:22:0c:db:7a:6b:41:73:ea:14:9b:d3:
                    55:f9:cb:dc:19:22:f5:dc:9d:69:33:5a:8a:60:63:
                    d6:3f:9b:3b:af:d0:9c:ac:b6:d0:6a:6e:7c:04:70:
                    5c:97:17:e6:cf:ee:e7:36:13:03:d4:a6:fb:74:4e:
                    5f:b6:a7:a0:15:1b:e7:87:21:59:84:91:70:d5:21:
                    8e:33:91:67:52:f6:ec:be:61:1f:8c:a0:47:cf:a3:
                    ca:2c:3d:58:f1:3d:e6:63:e5:58:49:94:6b:64:ce:
                    ed:d0:e0:46:23:c6:20:e9:01:a5:7f:30:d2:05:24:
                    e0:96:11:bd:b1:d8:03:b7:ad:b9:e1:7a:2e:f6:82:
                    a1:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                50:11:68:9D:55:79:8F:44:A2:06:46:D2:D7:4D:B0:EE:4D:2F:D9:85
            X509v3 Authority Key Identifier:
                keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/9610184CA39E11EDA897D05FC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.182.106.0/23

    Signature Algorithm: sha256WithRSAEncryption
         79:ef:9f:a5:4d:f9:e4:77:0f:79:80:1c:8c:33:f0:91:58:ca:
         8f:8b:50:99:db:62:04:1b:83:63:30:6b:b1:43:f8:a4:61:2e:
         b9:74:af:0e:a1:c0:18:2f:0f:c7:ee:21:67:ee:63:e0:76:28:
         08:f9:34:11:bb:b8:27:ed:97:91:24:54:d7:88:b3:cd:6a:ca:
         3f:fc:a7:c1:5f:3d:64:eb:5f:9c:6e:4f:32:d8:e8:c6:ea:a7:
         68:6a:06:49:27:0d:23:27:42:5f:2d:4d:7c:b4:f2:fc:a5:f8:
         93:3a:96:ca:a6:13:ab:34:e1:5f:ca:7b:6d:a9:86:98:6b:be:
         52:64:42:72:39:fb:e7:8c:9f:d6:0f:26:3c:05:70:4c:cf:8b:
         fb:a0:82:2a:8a:1e:53:f0:00:c5:e4:1f:fb:64:e5:79:c2:82:
         cb:47:41:77:7a:11:d8:fd:45:de:13:7b:05:08:d9:aa:95:82:
         f3:b5:ef:fe:54:73:f4:41:b5:d2:49:4f:ca:c1:99:ab:9a:67:
         b3:5e:bf:e5:2d:cf:21:b3:fa:11:fb:f3:98:a3:bf:13:ac:07:
         3c:71:fd:2e:db:ad:38:36:6d:60:ef:50:ea:3c:ee:b7:29:dd:
         ba:4a:1d:51:c8:24:5d:a6:f4:89:ea:47:02:e1:8e:42:d5:bf:
         fe:18:59:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 28 15:51:29 2024 by rpki-client on console-fra.rpki-client.org