Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/CCCC35E46EDB11EC9178D238C4F9AE02.roa
File:                     CCCC35E46EDB11EC9178D238C4F9AE02.roa (raw, json)
Hash identifier:          psciNbPWEtfv+c8FhdIIbuwuP3Xiw9bxuLTTIMYEbww=
Subject key identifier:   5F:DE:C7:02:92:36:81:CA:89:5B:A2:C0:56:1F:F3:6F:9F:FB:11:91
Certificate issuer:       /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Certificate serial:       702A
Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/CCCC35E46EDB11EC9178D238C4F9AE02.roa
Signing time:             Wed 10 May 2023 16:42:16 +0000
ROA not before:           Wed 10 May 2023 16:42:16 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     149204
IP address blocks:        103.178.244.0/23 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
                          rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 03 May 2024 15:38:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 28714 (0x702a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
        Validity
            Not Before: May 10 16:42:16 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=645bc968-5d6e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:09:c7:3c:7e:56:0a:62:eb:ae:65:e8:0e:06:
                    ea:ca:ad:9e:d8:c9:bd:41:7a:b3:e0:7b:1f:f3:a3:
                    fb:7b:6c:32:b3:00:21:ab:e5:71:9e:ec:67:e4:4e:
                    54:bf:60:96:41:88:a5:cb:4c:c1:95:e7:52:9a:00:
                    c6:d2:6b:d5:e6:45:e0:a5:fd:f8:33:41:92:d8:5b:
                    ce:61:d6:04:23:32:07:f4:81:61:fc:de:33:d9:df:
                    6f:ab:d4:1c:25:5f:4e:f6:68:df:d7:44:89:3d:85:
                    b9:3e:e8:a0:8a:c8:27:b6:13:5a:ee:17:e9:c5:da:
                    91:7a:c1:25:ee:1c:c9:b1:dc:01:20:29:26:ba:d7:
                    72:be:da:03:50:0d:b5:ef:7d:c0:8b:d3:1d:1a:78:
                    bf:d6:7e:09:9d:9d:d6:ee:85:10:fb:d6:e7:71:ec:
                    e4:73:2b:68:5f:38:a5:8f:81:a0:55:e1:b7:09:64:
                    bb:01:73:15:08:75:32:b9:95:cc:94:cd:ec:48:20:
                    ae:1c:e9:64:33:2d:b5:8b:61:85:db:67:df:65:35:
                    70:bd:23:ae:8e:06:dd:b1:fd:8c:22:90:8b:6c:09:
                    24:01:7a:a4:16:9d:7f:47:58:94:10:f2:b9:28:a8:
                    bc:98:24:df:be:03:cc:0d:b9:4a:ef:3d:d5:d7:18:
                    14:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5F:DE:C7:02:92:36:81:CA:89:5B:A2:C0:56:1F:F3:6F:9F:FB:11:91
            X509v3 Authority Key Identifier:
                keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/CCCC35E46EDB11EC9178D238C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.178.244.0/23

    Signature Algorithm: sha256WithRSAEncryption
         15:b4:04:cd:3e:60:8d:c3:9e:b5:81:6b:bd:77:5c:a9:eb:98:
         cf:48:d3:cd:df:af:09:f7:89:d9:92:c4:96:7e:62:24:49:0c:
         93:98:93:4e:f9:05:0c:56:76:36:6b:d3:2f:42:b6:53:34:d6:
         2c:c9:ec:3d:cd:0b:d1:9a:12:5e:d7:4c:1b:38:53:60:7a:ee:
         e5:46:89:e6:5f:6e:14:95:4c:7b:ed:73:db:c0:5b:24:25:24:
         24:53:5b:ca:75:9a:66:0d:6c:f9:ce:51:99:f1:b4:c8:bc:98:
         51:8c:47:e2:23:60:61:cb:3b:49:d5:3a:1e:fd:5c:09:1d:03:
         55:df:c3:4b:70:f2:28:94:2a:c2:9c:b6:a1:99:9d:ab:33:c7:
         ed:c9:e5:df:c4:1f:95:46:01:87:b3:80:97:2d:34:7e:91:57:
         55:d1:7f:4d:b3:e6:5d:3b:c2:ed:9a:6f:1e:d8:80:bf:4f:f4:
         ec:d0:b3:e9:75:18:27:b5:69:4b:58:58:cf:97:fd:15:34:29:
         a1:4c:41:11:31:56:b3:3d:19:da:c5:20:b8:04:df:50:7a:84:
         41:28:19:48:63:10:4c:1b:e3:ee:02:e4:98:f5:80:78:45:b8:
         cc:37:d2:4a:97:c5:87:82:c6:41:59:c7:c7:6c:37:51:93:37:
         30:fc:96:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 27 10:19:46 2024 by rpki-client on console-ams.rpki-client.org