Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/B75E499A2FDE11EC90799967C4F9AE02.roa
File:                     B75E499A2FDE11EC90799967C4F9AE02.roa (raw, json)
Hash identifier:          zIo7JXITKf0jNOZYvRbHAAW5o1LjhbzYMOH+GxtcMm0=
Subject key identifier:   27:72:33:5F:6C:C7:65:90:3C:3F:E7:E0:7F:97:DC:DA:4B:65:34:E9
Certificate issuer:       /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Certificate serial:       7016
Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/B75E499A2FDE11EC90799967C4F9AE02.roa
Signing time:             Wed 10 May 2023 16:41:54 +0000
ROA not before:           Wed 10 May 2023 16:41:54 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     147288
IP address blocks:        103.174.132.0/23 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
                          rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 03 May 2024 15:38:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 28694 (0x7016)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
        Validity
            Not Before: May 10 16:41:54 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=645bc952-64cd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:a1:4f:c3:46:45:67:0f:fa:25:c7:31:3b:c4:
                    ef:64:43:90:06:07:d8:30:33:60:bf:01:a3:ea:be:
                    65:d1:bd:0e:12:17:f4:6b:e1:92:bc:53:db:4b:9d:
                    fc:50:17:ab:02:e4:7b:d8:7a:f8:bd:75:15:5f:c3:
                    14:fb:2a:dc:27:bb:a6:80:ee:54:73:8d:98:43:ad:
                    82:2d:cd:b8:f2:6f:28:2e:fa:30:d5:23:9f:ba:8b:
                    bd:6b:5c:ce:eb:f9:83:87:09:16:22:f4:6f:39:30:
                    03:66:6a:7e:f9:c3:8d:b5:a8:df:2b:c1:2b:44:e1:
                    a6:1e:95:99:63:bc:dd:aa:f5:b7:51:a1:31:3d:ae:
                    27:a3:fe:5c:d9:6c:22:47:4d:fc:4c:6d:ed:7e:8c:
                    40:9b:f7:ba:0a:72:2d:ce:1d:94:f2:58:2b:1c:df:
                    8e:c2:38:17:32:06:23:f8:d3:c6:43:91:fa:17:8a:
                    f8:4f:8f:2d:97:63:02:64:d3:24:6d:7a:ff:93:a9:
                    55:1a:b4:8e:ba:94:a5:6e:7b:d8:cb:a8:fb:9a:29:
                    32:ec:a4:5b:9d:e8:81:50:29:47:a7:5c:22:b5:80:
                    2a:36:2e:c0:59:a9:db:ef:de:22:de:12:c6:c4:6a:
                    dc:93:ec:1a:2d:78:57:ad:75:dd:30:a3:c5:e6:16:
                    d0:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                27:72:33:5F:6C:C7:65:90:3C:3F:E7:E0:7F:97:DC:DA:4B:65:34:E9
            X509v3 Authority Key Identifier:
                keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/B75E499A2FDE11EC90799967C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.174.132.0/23

    Signature Algorithm: sha256WithRSAEncryption
         81:b4:b8:eb:ee:bf:33:6b:e5:87:eb:6e:ac:b1:41:a5:ff:7d:
         ac:ba:09:cf:3a:04:bd:69:f4:a5:3e:53:18:e2:85:10:84:9e:
         dc:77:59:08:f5:00:2e:d2:b5:d4:43:8d:7a:7d:1d:8a:fe:6c:
         08:0c:e7:6a:ef:a2:1d:3c:6a:82:cf:9e:12:d6:2c:f6:4d:73:
         e7:f4:c0:52:61:3a:af:e8:6c:43:56:b9:5b:67:e9:5b:a7:1a:
         c5:42:85:5b:f7:3b:ee:aa:6b:07:cf:5e:04:1a:55:2d:93:83:
         dc:3b:9d:18:84:77:ac:1c:8c:85:14:7b:63:06:16:16:ee:87:
         e8:a1:c0:38:f7:38:a2:19:3c:20:4c:a9:63:48:a7:b3:6c:a4:
         7e:43:51:d6:f5:51:4e:0d:1a:f0:53:22:a3:e2:ff:5e:c6:d8:
         d1:43:2c:49:4c:2f:a9:5a:75:4e:28:3f:e4:b9:79:45:8d:ba:
         0b:0c:2f:c8:39:89:5d:56:cd:7d:46:20:25:30:aa:64:b8:39:
         67:39:84:f5:cf:ef:b0:d9:54:b2:24:fc:75:38:0c:86:41:33:
         92:f2:05:97:81:cb:87:2a:8f:9b:da:5d:27:ca:96:52:5c:42:
         a8:e8:07:e5:b0:34:0e:cd:e3:ff:f4:d8:80:ac:d7:b0:cd:05:
         4c:c5:c7:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 27 10:19:42 2024 by rpki-client on console-ams.rpki-client.org