Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/C57FC162A22D11EDB64D9286C4F9AE02.roa
File:                     C57FC162A22D11EDB64D9286C4F9AE02.roa (raw, json)
Hash identifier:          V89U7VWE5YBB5nk8SlebvecFKOLuyywQKnJvfHqPj/Y=
Subject key identifier:   CE:99:F5:DF:61:AC:6C:A8:C5:7B:E3:84:36:B8:82:8E:7F:1A:F6:12
Certificate issuer:       /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Certificate serial:       6C92
Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/C57FC162A22D11EDB64D9286C4F9AE02.roa
Signing time:             Wed 10 May 2023 16:25:11 +0000
ROA not before:           Wed 10 May 2023 16:25:11 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     136651
IP address blocks:        103.100.76.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
                          rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 03 May 2024 15:38:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 27794 (0x6c92)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
        Validity
            Not Before: May 10 16:25:11 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=645bc567-17fb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:a2:40:67:0d:1b:83:d8:87:a9:df:6a:0e:da:
                    ba:0d:92:46:29:b1:4c:55:ed:b1:59:6e:7a:0f:f8:
                    57:a5:cb:9e:ae:c2:0b:b9:2c:da:9d:d2:0c:15:06:
                    99:df:42:ef:9d:6c:98:c8:9a:35:3c:a3:2a:e7:34:
                    43:57:c8:03:c7:ba:b6:a0:15:9e:fe:e3:75:92:fd:
                    95:2d:36:17:92:d3:12:70:9d:47:21:1c:f7:a6:65:
                    9e:56:86:c2:8c:17:15:42:86:45:b8:cd:3f:cc:1a:
                    4b:68:bf:69:8e:c1:ef:2a:37:e6:36:ed:4b:01:11:
                    26:d1:09:ea:af:f9:31:98:92:fa:a9:03:dd:a1:d5:
                    0a:8c:a0:00:b0:ea:93:28:80:0f:39:f6:e4:d7:a8:
                    36:01:93:0b:81:a9:8e:07:55:51:e3:7f:0c:c1:6a:
                    35:b6:01:a7:7c:f5:19:c2:ea:e7:1b:9b:d5:ab:6c:
                    95:22:22:8e:ed:37:70:f9:b6:77:ff:5f:67:88:24:
                    96:ec:dd:d9:d7:d5:dd:8a:fc:7c:37:bf:61:0a:6b:
                    90:fe:9e:98:53:07:97:c5:b7:1a:96:0a:af:87:e3:
                    bc:81:0e:f5:d2:72:3c:1c:12:0d:a9:8d:a9:94:af:
                    c2:2d:cd:f2:df:7f:7e:50:84:30:54:8a:a2:5a:48:
                    26:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CE:99:F5:DF:61:AC:6C:A8:C5:7B:E3:84:36:B8:82:8E:7F:1A:F6:12
            X509v3 Authority Key Identifier:
                keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/C57FC162A22D11EDB64D9286C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.100.76.0/22

    Signature Algorithm: sha256WithRSAEncryption
         26:94:bf:71:9b:84:7a:bc:27:ed:b3:0e:91:49:35:09:ee:66:
         94:5d:55:61:cd:3b:bd:e3:cd:06:52:a2:41:ff:4e:6b:18:c6:
         a4:ee:71:45:c4:8f:35:80:b8:6f:a1:42:64:38:bd:ee:1a:09:
         9e:cf:ea:60:a3:81:d0:e6:b1:17:29:66:3c:60:c3:b4:38:59:
         ba:9f:0b:7a:6a:32:f2:6b:8e:dc:40:be:dc:87:e2:10:6c:53:
         6d:e9:24:9b:56:ed:c9:03:2c:61:48:b2:95:15:96:6c:33:0a:
         c9:e5:80:11:5a:fa:8e:8b:93:af:4e:9e:b3:7a:36:9c:04:8a:
         de:14:70:6e:ef:ef:4c:37:bf:d8:07:26:5b:2f:4c:a4:e8:15:
         c7:76:f5:ca:f6:3b:68:3f:a1:af:62:2c:75:3f:6f:29:a5:73:
         c3:9a:15:e6:e4:b9:9b:df:ae:04:76:ca:ad:58:fc:33:86:cd:
         89:38:c4:b1:a7:8f:36:0f:0d:94:6c:48:60:df:a1:ce:46:f4:
         38:de:cd:fc:a2:ce:31:36:83:60:74:61:18:b1:d7:b9:24:e1:
         e2:dd:87:8a:cc:c7:61:25:21:4c:77:07:d5:c6:b6:88:c5:b3:
         8c:3f:50:a1:b4:d7:63:f1:21:ae:73:35:33:f6:95:03:89:25:
         b5:01:f9:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 27 10:19:45 2024 by rpki-client on console-ams.rpki-client.org