Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/AC9522204C7111EE924EDD13C4F9AE02.roa
File:                     AC9522204C7111EE924EDD13C4F9AE02.roa (raw, json)
Hash identifier:          KK8SL8wgM64pOWumm7vuF7r9sN2hXJmumoahCp2kG9s=
Subject key identifier:   AD:89:06:E3:69:83:17:F5:F7:B6:85:C6:A4:DF:9E:32:57:46:94:6A
Certificate issuer:       /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Certificate serial:       79CA
Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/AC9522204C7111EE924EDD13C4F9AE02.roa
Signing time:             Wed 06 Sep 2023 04:56:00 +0000
ROA not before:           Wed 06 Sep 2023 04:56:00 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     151103
IP address blocks:        103.242.83.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
                          rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 03 May 2024 15:38:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 31178 (0x79ca)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
        Validity
            Not Before: Sep  6 04:56:00 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=64f80660-fa19
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e2:6d:80:0c:2d:25:36:4e:ba:4d:bf:25:2e:aa:
                    de:57:e6:56:7f:3d:e9:a2:72:e8:52:90:5e:04:4e:
                    b5:d7:2f:82:30:4e:5f:b2:21:97:b3:cc:b8:a7:61:
                    53:ca:fe:af:31:6e:f5:40:23:69:cd:2a:fd:09:a7:
                    4b:1f:b0:0d:c8:0c:07:6a:8c:06:e2:cb:a8:ac:c2:
                    8e:ba:89:51:0a:e0:46:6e:b6:ad:06:7a:50:f5:a2:
                    5a:84:3f:48:2f:e5:8b:b2:19:fe:fd:ad:36:26:17:
                    ee:24:32:49:c0:e3:1a:42:57:53:90:50:0d:27:22:
                    fc:b1:6c:75:9d:95:fc:25:e8:0b:2c:2f:fa:69:c5:
                    c1:f0:bf:e4:98:86:a6:5a:9f:51:96:1a:be:cf:a4:
                    a0:11:65:8f:7a:d4:1d:86:c2:2f:dc:ab:44:d7:33:
                    60:44:d4:0d:4c:f7:5d:dc:a3:66:b3:a3:38:9a:2f:
                    e1:c3:9b:0a:49:55:3a:05:a3:c6:84:05:1d:30:96:
                    00:8b:d3:4a:ea:8c:f4:1c:dc:7c:b1:3e:e3:4d:de:
                    d7:e4:26:2d:6c:48:ea:59:08:06:65:d3:7a:03:8d:
                    6d:6f:ca:75:dd:60:b1:be:bf:6c:fe:d8:f6:f1:9d:
                    97:fc:2b:4b:d0:50:a6:be:ef:16:19:37:4b:a5:78:
                    e7:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AD:89:06:E3:69:83:17:F5:F7:B6:85:C6:A4:DF:9E:32:57:46:94:6A
            X509v3 Authority Key Identifier:
                keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/AC9522204C7111EE924EDD13C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.242.83.0/24

    Signature Algorithm: sha256WithRSAEncryption
         4b:d2:48:d9:b9:45:62:4b:fa:6d:08:72:32:2e:5d:d2:3a:32:
         69:c2:70:86:31:70:3a:c9:18:d3:db:84:55:5a:fe:f6:f6:35:
         d6:29:b9:4e:b7:60:35:b8:63:43:10:88:24:b1:48:ab:3b:fd:
         e1:ea:94:65:6a:b5:35:30:8c:d9:c3:2b:45:02:bd:ac:1f:16:
         f2:62:15:df:90:42:d8:36:a1:ac:ad:4e:ba:86:49:5d:bd:d3:
         f8:b8:a3:0b:06:06:4f:13:69:51:33:c1:9d:17:ec:0c:da:1b:
         61:09:bf:01:79:5c:f2:b7:e9:46:cc:40:29:86:d3:06:29:22:
         df:9d:c7:f6:f0:26:af:1f:0b:c8:3c:d2:8e:f7:98:41:e6:67:
         ee:b1:b8:58:a4:0e:a8:a9:90:ac:8e:33:fd:c1:21:63:72:99:
         53:8b:2c:5d:27:0f:41:9a:7f:be:b1:63:87:dd:18:1a:12:07:
         67:57:71:44:6f:f1:ca:53:b5:e8:d6:08:5c:1b:66:37:d2:4e:
         21:48:4f:60:55:59:19:ac:9e:1e:4d:33:4d:f3:44:34:f0:3c:
         65:9f:e4:e5:01:97:e9:af:a2:0c:6b:90:0a:84:b2:10:84:b2:
         e7:d0:17:58:2a:94:f9:ff:aa:fa:5a:5d:19:cb:d9:ed:b9:94:
         f4:54:02:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 27 10:19:41 2024 by rpki-client on console-ams.rpki-client.org