Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/CEB9CC80A76611EDA5D91754C4F9AE02.roa
File:                     CEB9CC80A76611EDA5D91754C4F9AE02.roa (raw, json)
Hash identifier:          2XSpjH/KQOzHVyEqqUMEXkXGYHcF87z1LtOXrjXwsvw=
Subject key identifier:   42:96:0E:D8:A6:4C:F1:60:12:E4:8F:C4:C4:25:E9:67:21:94:2B:DD
Certificate issuer:       /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Certificate serial:       6DD9
Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/CEB9CC80A76611EDA5D91754C4F9AE02.roa
Signing time:             Wed 10 May 2023 16:31:20 +0000
ROA not before:           Wed 10 May 2023 16:31:20 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     139504
IP address blocks:        103.75.41.0/24 maxlen: 24
                          2001:df6:2e80::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
                          rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 03 May 2024 15:38:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 28121 (0x6dd9)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
        Validity
            Not Before: May 10 16:31:20 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=645bc6d8-c435
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:1c:49:a4:ac:a3:fa:6c:c8:45:a9:31:ea:1f:
                    3f:7a:d0:eb:d9:08:d1:65:70:74:7b:c9:93:62:da:
                    9a:cd:68:16:5b:cc:01:c6:a3:1a:8c:1f:8d:e6:67:
                    5d:b4:dc:f6:49:0b:44:f9:5d:13:2f:58:f4:97:e4:
                    3c:53:4e:70:07:67:76:81:32:98:e1:6d:5c:9d:bb:
                    64:ce:09:00:db:2b:3d:b7:2b:08:f0:99:b4:13:61:
                    56:6f:f1:2c:62:30:5f:fa:5a:a3:f7:e7:36:d4:b4:
                    36:8d:91:2b:b8:5a:8c:90:a9:86:3c:5a:69:91:33:
                    8d:7c:9d:80:bd:83:a7:44:21:db:b0:af:a3:df:b7:
                    42:71:81:26:b1:9c:17:c7:10:7e:66:36:f4:d1:21:
                    10:e9:dd:f3:d3:c4:3c:ee:4a:c4:bd:82:fc:15:9f:
                    76:65:3e:b9:ca:f6:1d:c4:a4:e1:09:34:28:4c:07:
                    f2:0b:f3:0f:0a:d3:a5:97:7c:5b:e3:36:d5:b4:d3:
                    02:f2:d2:6b:88:2e:36:be:9d:a1:ca:cf:80:93:04:
                    0f:2b:1e:4c:99:c3:cc:5b:8c:35:bc:be:3f:90:88:
                    5b:e4:6e:e3:66:f0:de:ff:cf:ef:47:c2:41:61:f7:
                    b9:93:dd:d2:e2:1f:50:11:eb:6a:d3:41:47:9e:e2:
                    0e:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                42:96:0E:D8:A6:4C:F1:60:12:E4:8F:C4:C4:25:E9:67:21:94:2B:DD
            X509v3 Authority Key Identifier:
                keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/CEB9CC80A76611EDA5D91754C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.75.41.0/24
                IPv6:
                  2001:df6:2e80::/48

    Signature Algorithm: sha256WithRSAEncryption
         14:9b:91:46:08:2c:90:11:e8:6e:be:12:b5:f4:21:8b:a9:5c:
         50:c5:ca:7d:7a:67:c0:9f:b9:ba:da:05:dd:da:9c:66:5a:cb:
         99:59:0e:bf:3b:af:11:65:18:27:22:0c:90:f4:d4:d7:22:3a:
         c0:a2:50:72:16:9c:ea:81:58:ca:84:eb:5d:c9:1b:cc:dd:01:
         f6:e5:58:48:27:4c:38:b9:50:ad:47:f3:e3:01:0a:5b:d2:13:
         ed:c7:2a:88:ae:b6:fc:ee:03:65:e5:b2:8c:d4:72:a9:4a:22:
         74:c9:7d:ce:b3:9e:9f:38:fd:27:49:a1:2a:30:19:e6:ce:a3:
         06:d3:b0:8c:d6:9b:a3:ee:22:15:91:b3:aa:f4:90:5c:d9:e8:
         08:93:de:73:52:8c:65:77:bd:b9:b0:4e:81:31:20:5f:53:c0:
         06:80:30:81:e1:8b:36:fc:6b:4e:78:7c:1e:eb:4f:8b:d4:16:
         36:83:a1:27:61:39:06:2e:91:6e:20:9c:0e:d0:62:b9:21:90:
         7c:d4:22:22:36:99:1c:3b:39:ce:25:98:4f:42:06:ce:85:4f:
         9e:ed:bd:f4:55:eb:d1:e4:61:ae:ef:36:8d:1f:0b:48:0e:da:
         95:c0:36:7c:e4:75:a2:5d:1b:d2:26:be:33:c4:7e:61:86:24:
         9f:47:3e:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 27 10:19:46 2024 by rpki-client on console-ams.rpki-client.org