Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/A1B343607DA511EC80B1F27AC4F9AE02.roa
File:                     A1B343607DA511EC80B1F27AC4F9AE02.roa (raw, json)
Hash identifier:          IiN1nzWQCZvlnmfoZ53jUVk6d5nvev8szh5BFwSO2ew=
Subject key identifier:   03:8F:8A:22:E9:AA:D8:72:A1:61:FF:D3:B8:B1:3C:2B:FF:C3:D1:2D
Certificate issuer:       /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Certificate serial:       705A
Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/A1B343607DA511EC80B1F27AC4F9AE02.roa
Signing time:             Wed 10 May 2023 16:43:12 +0000
ROA not before:           Wed 10 May 2023 16:43:11 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     149279
IP address blocks:        103.179.18.0/23 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
                          rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 03 May 2024 15:38:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 28762 (0x705a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
        Validity
            Not Before: May 10 16:43:11 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=645bc99f-6880
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:2b:e5:44:53:2c:51:da:13:b4:fd:05:76:2b:
                    36:5c:e0:00:be:82:20:a6:e6:fc:c3:69:40:46:24:
                    b9:68:9f:bf:ee:9a:5b:c2:ef:68:7a:e0:0d:f9:85:
                    30:82:12:73:11:6c:fb:53:36:69:de:19:33:ea:a4:
                    05:99:1a:08:72:8d:fd:08:42:95:03:39:a2:91:db:
                    30:42:2b:25:1f:d1:1f:06:13:3c:81:ec:71:96:e8:
                    46:12:04:ef:f8:8d:02:db:da:3e:53:34:83:cc:8f:
                    7b:ad:d8:ab:1e:fe:b4:69:f2:07:da:10:9a:1b:3d:
                    96:9c:44:f0:7b:eb:e8:f8:1d:6d:73:13:af:c8:c1:
                    5f:ae:c6:73:89:5d:7e:03:80:2a:0a:f3:16:bd:da:
                    f4:a4:e9:ab:70:49:42:50:42:8d:60:1c:42:02:19:
                    b3:fb:f6:ee:f4:4e:fa:ee:43:2a:f9:50:63:1f:f7:
                    a0:36:ae:15:c1:3e:1d:95:84:40:23:b3:8f:e2:40:
                    f9:61:bf:f0:a3:d6:02:fd:17:b7:a5:3e:c1:3a:60:
                    51:71:7f:33:a4:29:d8:93:4d:1e:9e:ba:f6:88:01:
                    3b:9f:be:a8:3d:7f:c6:e9:f5:17:a9:5d:8b:ed:d5:
                    d7:ec:bf:33:4d:ae:86:92:97:d7:bf:82:c6:7c:eb:
                    e0:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                03:8F:8A:22:E9:AA:D8:72:A1:61:FF:D3:B8:B1:3C:2B:FF:C3:D1:2D
            X509v3 Authority Key Identifier:
                keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/A1B343607DA511EC80B1F27AC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.179.18.0/23

    Signature Algorithm: sha256WithRSAEncryption
         96:dc:af:57:1f:c8:db:a5:7c:83:9d:2c:2a:19:09:54:90:36:
         2e:8a:96:7c:1f:05:8d:37:ea:3b:8e:61:7e:8a:dc:cb:49:f6:
         10:77:ce:92:42:4e:87:c2:4e:a5:95:77:55:ca:a9:ca:e3:88:
         1b:c8:3e:3c:46:a9:d5:b9:c2:17:02:97:62:18:27:3f:86:a3:
         70:ef:20:8e:ce:a8:89:67:bf:4c:cc:7e:71:db:53:79:fd:7e:
         c3:ed:5d:22:f8:45:9f:3f:fd:1d:8a:41:ef:e6:1b:cd:15:1a:
         a2:9f:de:b7:4d:8e:55:6d:1f:44:36:39:80:cf:53:b0:2b:23:
         d8:e3:1f:28:b2:4f:b7:46:7e:74:4e:42:35:a2:04:55:43:12:
         b3:c3:f3:28:e2:f7:31:2e:3a:13:2c:2d:7e:a8:ad:c5:b6:f3:
         ec:49:c6:a8:6f:7b:23:fa:da:5b:a1:29:bb:90:f4:77:28:e5:
         de:e3:d8:0b:78:a7:89:1b:03:01:76:15:2d:3e:96:60:e9:57:
         b7:79:3d:35:4c:fd:71:55:0c:1a:d2:7f:7a:eb:1c:88:02:67:
         17:01:c8:85:e6:b3:bf:2b:a8:aa:3f:bd:23:5f:38:39:b9:aa:
         7c:56:cc:45:43:14:51:72:4f:0c:b4:6e:8f:97:32:e0:b7:d7:
         67:98:d5:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 27 10:19:40 2024 by rpki-client on console-ams.rpki-client.org