Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/984B0856EEC811EBAACF6435C4F9AE02.roa
File:                     984B0856EEC811EBAACF6435C4F9AE02.roa (raw, json)
Hash identifier:          qlboAwPaOVOmYl2zf5nZ0/6ip2Jr+JTUYiXDz8lXFJc=
Subject key identifier:   13:2C:B5:8E:E5:14:AD:DF:67:25:16:BF:CA:30:EA:55:1D:C8:F2:0B
Certificate issuer:       /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Certificate serial:       6E1F
Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/984B0856EEC811EBAACF6435C4F9AE02.roa
Signing time:             Wed 10 May 2023 16:32:37 +0000
ROA not before:           Wed 10 May 2023 16:32:37 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     140134
IP address blocks:        103.154.4.0/23 maxlen: 24
                          103.158.168.0/23 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
                          rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 03 May 2024 15:38:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 28191 (0x6e1f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
        Validity
            Not Before: May 10 16:32:37 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=645bc725-b7ed
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:0f:c7:75:f1:5a:66:d3:db:75:b0:e1:51:07:
                    ea:7a:7c:0d:14:ef:2c:e4:5e:d1:b2:07:c3:5b:83:
                    62:be:e2:08:e1:c2:f3:55:72:d4:d7:c2:8f:c8:c6:
                    a5:2d:40:e2:b5:ad:cd:0e:27:0d:f8:e2:d4:c6:8b:
                    73:cc:c4:5a:89:cf:4f:ce:8e:2f:f8:e4:ce:9e:09:
                    d7:3b:a3:aa:1b:2f:df:d3:21:2a:b8:c5:43:92:8b:
                    2f:c8:62:28:d0:37:38:06:af:43:30:d3:36:77:0b:
                    c0:92:9d:dc:df:3a:c2:36:5d:01:5f:21:c9:4c:db:
                    24:17:37:66:2a:a2:4a:63:74:1f:4d:a8:8a:db:4d:
                    67:a3:8d:7d:21:8b:ef:43:27:40:a2:1f:b6:42:27:
                    21:51:e7:c6:33:0a:e7:de:43:b8:7a:5c:fb:3e:5b:
                    ab:cf:ca:40:70:d6:6d:4c:77:29:d2:f4:53:c7:98:
                    65:98:49:96:fe:9e:ed:a3:a7:20:2f:ae:6d:16:e3:
                    0d:b7:79:e7:bb:11:03:25:42:b7:c3:c3:39:48:2a:
                    83:16:f9:eb:f7:76:12:ce:85:0c:b3:f6:84:78:9f:
                    14:35:9b:c8:54:80:cf:95:77:fd:36:f6:9b:a2:43:
                    e5:8a:06:c0:68:ed:ac:40:8f:e2:08:f9:e4:d3:8e:
                    03:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                13:2C:B5:8E:E5:14:AD:DF:67:25:16:BF:CA:30:EA:55:1D:C8:F2:0B
            X509v3 Authority Key Identifier:
                keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/984B0856EEC811EBAACF6435C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.154.4.0/23
                  103.158.168.0/23

    Signature Algorithm: sha256WithRSAEncryption
         b1:2b:7c:49:53:33:5c:fe:df:1d:62:4b:f3:53:47:ce:4d:48:
         6f:61:f6:eb:80:eb:a5:3d:0c:49:d7:17:e8:24:9d:59:3d:76:
         45:9c:2b:35:82:a6:9c:d1:3f:15:9f:19:22:35:f6:3e:c6:30:
         a6:6e:f1:f6:85:76:73:0b:01:53:f1:5a:ed:23:4e:2c:0b:43:
         dc:b0:48:db:3e:8c:9d:0b:85:f3:27:45:c8:5c:e6:58:f2:af:
         af:0b:65:42:d0:55:a7:55:6b:71:1c:ff:e1:55:dd:b5:7d:75:
         43:42:02:a6:11:5a:aa:f9:38:98:25:8d:65:d4:ef:04:30:94:
         eb:81:b4:a2:58:8a:3f:2c:77:8d:b1:ba:fd:8b:15:27:89:84:
         fb:67:4b:c9:58:0a:ab:b2:46:f4:d7:a6:3a:4f:22:93:20:7a:
         14:8e:06:23:26:6f:59:b6:8a:40:dd:e4:29:a3:fb:bc:b5:be:
         b6:0a:47:57:fa:5d:72:e9:7b:a7:0e:1a:33:a8:03:ec:75:a1:
         2c:44:ea:d5:1b:d4:27:78:b8:4f:b3:a8:1a:5d:72:d4:60:af:
         e3:2c:fd:85:db:36:7d:1e:96:27:86:a0:99:fc:f4:c1:be:17:
         3f:80:43:f3:ed:cc:bc:22:e2:06:24:50:d4:ea:ca:14:a1:56:
         aa:da:98:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 27 10:19:39 2024 by rpki-client on console-ams.rpki-client.org