Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/C208C24A5E7F11EEA7ECDC16C4F9AE02.roa
File:                     C208C24A5E7F11EEA7ECDC16C4F9AE02.roa (raw, json)
Hash identifier:          WpYaAx+9Yu+7JRV4Ej0Fy3tlp7hYh1thK+7HSTMjxyw=
Subject key identifier:   A8:20:98:E0:33:8F:A9:0C:25:2D:72:8E:7E:E0:3C:BA:B9:54:1F:C1
Certificate issuer:       /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Certificate serial:       7AE4
Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/C208C24A5E7F11EEA7ECDC16C4F9AE02.roa
Signing time:             Fri 29 Sep 2023 04:22:10 +0000
ROA not before:           Fri 29 Sep 2023 04:22:10 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     151763
IP address blocks:        103.158.184.0/23 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
                          rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 03 May 2024 15:38:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 31460 (0x7ae4)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
        Validity
            Not Before: Sep 29 04:22:10 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=651650f2-07df
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f1:11:1d:d8:88:86:64:28:99:88:a3:9f:f8:c9:
                    bd:f5:a5:b4:67:df:de:c4:fa:c2:cb:a2:92:3c:a4:
                    93:93:f7:05:03:5a:c8:bf:c0:ba:35:cb:a2:f7:60:
                    d9:0f:7a:62:d3:6c:e4:2c:70:1f:8b:bb:fa:07:f0:
                    f1:4c:e4:12:54:56:76:d0:54:8a:c7:66:6f:52:31:
                    d4:5a:30:e4:98:a5:da:07:48:dc:5e:7b:a4:8c:c8:
                    52:cd:3f:87:c8:41:1a:d9:82:2d:0d:82:85:0c:8a:
                    4e:5e:d8:d8:52:11:b8:ca:0c:07:65:a6:08:1c:8e:
                    a1:45:45:d4:99:43:21:ac:94:a2:0b:6a:3b:3b:0a:
                    63:c9:db:bf:98:16:c5:2d:9f:06:97:dc:f0:97:c2:
                    22:af:56:60:37:5f:37:a4:12:fb:5c:80:17:67:6d:
                    d5:e9:da:f2:6e:75:8a:55:2f:00:91:c3:07:38:2c:
                    d6:60:95:84:08:27:65:38:d4:4e:50:43:97:7d:ef:
                    09:2e:c0:04:d4:d1:29:70:2c:a1:e3:3b:3e:b0:ef:
                    2b:db:6b:67:18:15:c1:fc:94:d4:a3:91:cb:e5:3f:
                    2f:69:ec:bb:21:52:58:a4:ea:fc:12:d6:1b:10:2c:
                    75:da:76:75:6c:1f:3c:36:9f:d9:ab:fa:e7:d9:67:
                    7c:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A8:20:98:E0:33:8F:A9:0C:25:2D:72:8E:7E:E0:3C:BA:B9:54:1F:C1
            X509v3 Authority Key Identifier:
                keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/C208C24A5E7F11EEA7ECDC16C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.158.184.0/23

    Signature Algorithm: sha256WithRSAEncryption
         8d:0a:8f:b0:b5:1c:60:72:3b:4c:5e:11:87:23:91:35:6b:a4:
         49:9a:b0:97:96:e0:ac:23:57:21:a0:ac:44:ff:eb:db:8c:a8:
         2b:c9:cb:eb:ed:86:42:b8:f1:3b:43:e4:a0:2b:9c:1f:11:bb:
         20:76:bc:35:36:67:a9:84:57:c9:eb:f8:b3:36:d4:79:23:78:
         cb:84:99:d1:ee:c1:78:17:6c:b8:1e:10:5c:18:2f:cc:58:53:
         36:00:a6:52:dd:c5:40:90:93:40:cd:93:5f:95:0b:80:56:1c:
         b3:96:19:cf:c3:89:ec:26:10:e6:af:94:d8:cf:63:8c:7a:fe:
         1d:97:5d:a8:db:fb:13:a3:d9:ff:de:40:e0:53:63:94:ab:f7:
         a6:eb:80:cb:1b:a8:f5:ce:aa:aa:27:d7:40:35:65:d1:e7:76:
         e3:d7:75:7b:5b:c4:75:7b:e9:9c:19:ef:52:dc:d1:6f:0e:2c:
         54:5b:c9:a7:56:49:0a:b9:e1:52:72:72:ce:66:96:8c:81:a9:
         44:02:8d:0d:7e:23:58:60:16:a3:4f:3a:6d:84:4a:83:56:9d:
         18:41:2e:52:09:de:a0:df:42:54:d9:fd:bb:59:35:6b:b8:25:
         c8:98:20:c4:78:c2:e2:90:f1:f8:3b:4d:91:b9:b4:72:d7:82:
         1d:21:3c:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 27 10:19:45 2024 by rpki-client on console-ams.rpki-client.org