Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/B6042062D89E11EABECC1778C4F9AE02.roa
File:                     B6042062D89E11EABECC1778C4F9AE02.roa (raw, json)
Hash identifier:          JCTHx3nzKr622AgfHYkMiHvDS+rCvSYz0itM6XNbqAA=
Subject key identifier:   00:F2:A4:9A:7B:55:58:33:07:5E:C3:F2:26:4C:E8:8A:B1:5C:34:C7
Certificate issuer:       /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Certificate serial:       6CEB
Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/B6042062D89E11EABECC1778C4F9AE02.roa
Signing time:             Wed 10 May 2023 16:26:50 +0000
ROA not before:           Wed 10 May 2023 16:26:50 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     137133
IP address blocks:        103.110.42.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
                          rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 03 May 2024 15:38:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 27883 (0x6ceb)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
        Validity
            Not Before: May 10 16:26:50 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=645bc5ca-7988
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:de:50:66:76:37:50:64:93:97:fc:8b:b1:40:
                    90:f5:c8:d5:07:f1:19:21:d6:fa:c7:5d:91:61:18:
                    df:7d:29:d4:6e:2e:b4:3b:c8:07:53:b0:f9:78:67:
                    61:8f:f2:23:15:57:21:7a:03:e9:78:be:4d:3e:ae:
                    c4:cf:45:71:9e:1d:e3:d6:86:99:cb:cb:d2:a2:0e:
                    62:6c:13:f6:15:d2:11:6f:71:91:c1:cf:42:6b:44:
                    be:93:12:f1:5c:6e:93:58:32:1f:de:23:5d:b3:e6:
                    26:e1:41:9f:85:37:98:dd:01:ad:f6:3d:3a:2f:ca:
                    40:69:f1:e7:2c:e9:1b:32:40:f6:01:71:11:61:3d:
                    e0:74:d1:e0:f3:e9:41:12:30:69:70:d6:30:3c:ca:
                    c3:2c:80:dd:3e:de:b5:9c:dc:20:e7:d1:c7:c6:4d:
                    54:2c:77:68:77:a7:b2:79:0e:9c:34:cc:a6:db:c1:
                    61:54:35:33:97:7f:bf:74:ef:94:65:1d:ae:53:f0:
                    94:95:ff:a9:cc:8d:c9:97:45:71:66:65:6f:fc:e3:
                    c0:ca:78:a7:72:b1:11:54:21:05:a8:93:da:e3:53:
                    8a:ba:c8:ec:b4:92:17:36:c4:97:d8:db:19:bf:a3:
                    3c:c7:9b:ee:3f:6b:43:8e:23:77:19:f9:0f:91:6f:
                    52:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                00:F2:A4:9A:7B:55:58:33:07:5E:C3:F2:26:4C:E8:8A:B1:5C:34:C7
            X509v3 Authority Key Identifier:
                keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/B6042062D89E11EABECC1778C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.110.42.0/24

    Signature Algorithm: sha256WithRSAEncryption
         8a:0a:0d:ab:89:e1:c6:3e:13:60:75:af:9d:43:55:09:82:d4:
         c3:aa:4d:d3:2e:c6:42:e6:6e:04:56:04:c7:70:27:b9:19:d4:
         d0:59:e8:fe:75:b6:a7:a3:97:96:31:11:82:c2:2e:b3:9b:08:
         34:56:27:70:d3:af:03:0e:8a:b1:7c:ea:a7:66:04:57:6b:8f:
         4b:b0:4d:19:a4:69:2a:0e:b2:19:a2:1a:5d:0e:0b:e5:ed:47:
         7f:4e:21:53:f4:35:f9:df:12:63:d0:b1:ce:0e:45:71:b5:5a:
         7c:45:a2:a6:75:27:2c:97:8f:86:2f:73:d2:55:63:4c:d3:02:
         e9:2a:11:7a:c0:87:3f:70:9f:08:05:03:cb:4d:02:22:e6:fb:
         d5:67:0e:d4:f4:5d:3c:b3:d6:58:a4:4b:57:d5:02:61:11:8a:
         08:b8:82:e9:44:35:bc:cf:47:17:64:c5:1c:d2:25:01:f5:9f:
         5d:e1:e9:df:5f:bc:8b:11:03:ec:8d:e0:c4:d3:34:ca:d8:b7:
         99:1c:2b:c6:22:69:44:a4:1e:06:91:fc:c0:2d:1f:71:3a:22:
         a7:b2:fe:26:11:46:f1:1f:78:f6:00:1c:f3:44:d4:c3:3c:e5:
         a3:88:e4:4b:3e:d2:37:0b:7d:8f:97:8c:2d:d3:cd:c4:53:03:
         c7:16:c0:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 27 10:19:42 2024 by rpki-client on console-ams.rpki-client.org