Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/982EE556B67A11EDBF54387EC4F9AE02.roa
File:                     982EE556B67A11EDBF54387EC4F9AE02.roa (raw, json)
Hash identifier:          6qiPZ+ZOP804XFib5g2dpwyYM8UpFr0pGuoxMeNfdfA=
Subject key identifier:   E8:C4:59:22:2E:C1:21:71:DB:E9:97:04:8C:EB:78:16:10:92:BA:3A
Certificate issuer:       /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Certificate serial:       6D31
Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/982EE556B67A11EDBF54387EC4F9AE02.roa
Signing time:             Wed 10 May 2023 16:28:07 +0000
ROA not before:           Wed 10 May 2023 16:28:07 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     137643
IP address blocks:        103.194.228.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
                          rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 03 May 2024 15:38:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 27953 (0x6d31)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
        Validity
            Not Before: May 10 16:28:07 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=645bc616-d58f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e7:f3:2e:43:50:de:cf:c9:42:e0:17:e4:70:6d:
                    90:fe:7f:51:fe:7c:e9:e0:d3:09:a1:5a:78:02:89:
                    49:1f:e5:7a:12:79:79:cb:08:9d:77:bd:a5:d0:a7:
                    fe:3b:91:6e:6f:03:41:91:e7:e8:cb:96:cc:16:d7:
                    b6:ad:16:e6:f4:6c:c4:2c:be:48:ab:26:f9:79:b0:
                    28:ce:5d:5c:0a:af:7c:bd:a7:04:5c:b2:ca:6a:42:
                    00:8c:98:b5:31:61:b8:1a:3e:e6:ad:c2:03:5d:e8:
                    94:3c:4f:ae:9d:51:61:07:d8:f7:77:7f:3e:60:46:
                    ae:16:ee:d6:fb:f8:7c:e0:0b:50:0f:28:1e:66:fd:
                    14:5d:8b:7d:a3:95:89:72:33:87:b0:ea:ba:53:42:
                    80:af:49:40:ea:0c:ab:77:a8:05:f4:dc:55:ed:5d:
                    ab:e5:89:de:ac:f8:11:ad:cc:7b:5a:ef:35:7a:ec:
                    b3:f3:30:ae:09:61:ea:ae:e2:00:07:bf:2b:ec:af:
                    d5:64:de:74:5b:de:f9:ba:56:7e:27:78:90:ee:ab:
                    80:4b:68:7f:b4:95:ca:f0:ee:1f:76:9b:7b:2e:82:
                    8c:6e:45:eb:e7:6f:49:b2:30:9b:76:71:ff:b3:88:
                    b8:3b:a6:41:2c:32:c3:26:2e:94:30:c8:d7:f9:0c:
                    11:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E8:C4:59:22:2E:C1:21:71:DB:E9:97:04:8C:EB:78:16:10:92:BA:3A
            X509v3 Authority Key Identifier:
                keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/982EE556B67A11EDBF54387EC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.194.228.0/24

    Signature Algorithm: sha256WithRSAEncryption
         02:44:38:dc:3c:2a:20:7f:97:e4:fc:da:4b:00:d8:a6:38:be:
         ea:84:66:91:a2:b0:03:19:dc:9d:c4:f0:f8:aa:db:88:b5:fe:
         64:ab:ad:7f:3c:c8:42:00:9d:5b:60:c9:d0:17:95:e1:71:97:
         fa:a4:b9:ec:82:2d:11:a0:5d:a0:1c:5e:d5:11:d7:f4:ab:ef:
         af:22:d3:a1:39:38:c0:48:94:3b:56:6a:9e:b7:13:33:67:1f:
         ef:d4:cd:68:d7:4a:3f:f4:7a:40:75:90:e8:54:a1:63:2f:b3:
         47:e0:4b:10:6e:c3:d5:3a:81:00:53:3f:79:76:72:50:23:84:
         6e:bc:ba:50:ac:ca:e6:17:ae:a5:a3:53:cc:52:de:63:57:2e:
         e0:bc:5f:34:79:10:e1:0d:5a:98:bd:4b:6e:56:ad:1d:aa:e3:
         87:d7:5d:dc:e1:7d:4f:6a:47:c8:79:18:f7:62:ce:c5:d5:4b:
         0d:a6:82:24:2a:fd:b3:9a:77:4d:38:36:4b:ad:ac:5b:93:94:
         8d:3a:59:fe:8d:16:e8:3a:ae:77:81:d2:4e:ce:46:af:2c:dc:
         5c:0b:d6:8f:74:99:d8:8a:58:f6:cc:a9:b5:12:32:cd:fd:14:
         f0:7a:78:bc:cc:a4:23:e7:7e:b3:66:a4:0a:06:d5:6c:66:4d:
         4f:8d:1b:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 27 10:19:39 2024 by rpki-client on console-ams.rpki-client.org