Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/BCB6734A347111EB9B338223C4F9AE02.roa
File:                     BCB6734A347111EB9B338223C4F9AE02.roa (raw, json)
Hash identifier:          e4EAXZnhOiurID65jsK0n3G/er32b8hI5RC+ul1XWzk=
Subject key identifier:   4F:CC:74:C7:F4:E9:FA:2E:DA:80:4A:CD:20:51:67:24:3B:C9:73:84
Certificate issuer:       /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Certificate serial:       6D19
Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/BCB6734A347111EB9B338223C4F9AE02.roa
Signing time:             Wed 10 May 2023 16:27:40 +0000
ROA not before:           Wed 10 May 2023 16:27:40 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     137607
IP address blocks:        103.114.16.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
                          rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 03 May 2024 15:38:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 27929 (0x6d19)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
        Validity
            Not Before: May 10 16:27:40 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=645bc5fc-c7ce
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:2d:42:88:ad:93:70:b8:cc:75:22:57:8f:0b:
                    12:4b:ab:8b:a4:0a:b4:46:5f:3c:d6:b2:52:44:10:
                    97:b4:b1:1f:d2:4f:92:b1:11:2e:55:e4:8d:fd:a6:
                    76:dd:b8:f8:8b:cc:40:59:d9:97:0f:0d:73:3b:be:
                    3d:c0:63:d1:ce:42:28:3e:a8:cc:e9:93:78:7b:4d:
                    93:77:4e:10:5f:c1:f4:fb:d2:0c:b9:28:67:4b:56:
                    8c:cb:9a:39:a9:12:81:a1:26:34:82:fe:5b:a9:f8:
                    6c:f9:54:a4:a8:67:d5:0f:36:4d:4b:9b:b3:26:62:
                    22:ce:56:4e:48:a7:41:02:94:ae:76:e5:57:4f:3b:
                    0b:a5:a4:dc:8f:11:a2:2a:e1:27:f6:eb:d0:c8:96:
                    3b:91:43:55:cf:8e:18:32:e9:7d:f9:e4:f6:90:5d:
                    e8:92:34:d5:6c:51:92:2c:13:fe:e9:b1:20:5b:9f:
                    2f:e4:ce:23:86:c3:a9:b7:d5:60:b9:e2:16:17:d2:
                    04:e2:d8:d4:b7:52:e1:8b:83:1c:37:09:ae:82:e3:
                    12:6b:a9:ac:30:9b:6b:2c:9a:4d:72:6c:46:5b:c4:
                    d1:77:9a:72:4a:27:ce:52:2c:d6:92:53:b4:b5:ed:
                    02:26:5f:2d:ee:54:85:a6:ae:fc:b1:2c:1f:52:a8:
                    e3:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4F:CC:74:C7:F4:E9:FA:2E:DA:80:4A:CD:20:51:67:24:3B:C9:73:84
            X509v3 Authority Key Identifier:
                keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/BCB6734A347111EB9B338223C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.114.16.0/24

    Signature Algorithm: sha256WithRSAEncryption
         8b:a2:33:23:0e:47:41:db:b4:58:f0:20:7e:80:d1:29:df:54:
         58:7c:f5:d1:8d:3e:6d:16:0c:cf:a5:11:7e:10:59:00:01:8e:
         61:bc:31:0d:7a:86:32:1d:a2:c7:77:d7:22:1d:d6:b1:95:0b:
         9e:2c:14:87:ea:d3:a1:f1:c4:3d:03:2e:f0:f4:29:06:d0:a9:
         df:d8:91:90:53:3a:94:35:40:70:58:73:fe:c7:c6:a8:58:2d:
         35:5e:01:ba:b1:a7:4d:75:1f:50:f8:03:98:bf:15:7b:9b:bb:
         de:a4:ee:de:79:d6:02:e3:02:2f:85:72:fd:3e:b9:a5:3c:85:
         46:d2:4f:9f:c6:cc:64:9c:46:5a:6a:f7:43:42:4d:52:05:39:
         a7:9c:1d:8b:17:74:d7:26:6e:c5:53:5a:db:50:8d:23:5f:ae:
         a7:5d:7e:83:8d:9a:c7:f8:97:af:ac:3f:84:b5:94:24:de:cc:
         a4:e8:28:4f:67:08:85:15:cd:c7:48:77:41:9b:84:4e:0e:56:
         35:08:c3:73:8e:1e:b6:34:34:40:2c:11:20:e6:24:93:cd:64:
         2a:1c:92:40:75:c1:93:a1:9a:a4:e9:16:f9:2d:df:71:83:6e:
         32:11:26:d0:fd:29:08:79:54:ab:61:d6:7c:b5:68:27:6d:3a:
         30:6c:5c:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 27 10:19:45 2024 by rpki-client on console-ams.rpki-client.org