Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/DB74486C5F3A11EC8C771087C4F9AE02.roa
File:                     DB74486C5F3A11EC8C771087C4F9AE02.roa (raw, json)
Hash identifier:          Tok071r6gqepTJo1tnksdcEDYtgQtnI/jdlvCAy1hxg=
Subject key identifier:   3E:C1:19:EF:83:13:E9:00:BF:02:D1:87:E6:42:C2:E7:16:BE:41:35
Certificate issuer:       /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Certificate serial:       6E21
Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/DB74486C5F3A11EC8C771087C4F9AE02.roa
Signing time:             Wed 10 May 2023 16:32:39 +0000
ROA not before:           Wed 10 May 2023 16:32:39 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     140138
IP address blocks:        103.155.30.0/23 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
                          rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 03 May 2024 15:38:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 28193 (0x6e21)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
        Validity
            Not Before: May 10 16:32:39 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=645bc727-3ab2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ec:53:2b:a3:50:3d:c0:ab:da:c2:6c:68:33:53:
                    b6:84:fe:04:65:94:ee:37:e7:53:7f:0e:f5:82:8f:
                    f5:1d:7e:90:71:b1:ac:4c:43:2b:1e:f5:30:56:fd:
                    c8:5c:ac:46:96:27:96:ae:71:13:88:de:6a:d1:22:
                    0f:20:62:6d:db:d6:7c:86:ad:f8:a2:9c:d5:87:af:
                    09:84:44:dc:12:e4:b3:0a:31:7f:b7:22:38:e0:2c:
                    df:42:52:23:9e:c2:7a:2d:f0:c1:35:07:ae:0c:53:
                    af:a6:98:ee:36:90:6a:3e:68:01:9f:62:bf:46:cc:
                    23:2d:30:bb:e6:0d:d1:59:0c:93:93:8b:f3:03:83:
                    26:d1:86:1c:ed:35:32:e1:24:1d:64:1a:ba:e6:43:
                    60:52:e6:d2:db:5b:c1:2c:fb:f5:ff:ea:9c:9f:95:
                    cb:4a:b2:d7:de:a8:b4:41:f8:60:81:6b:48:c2:50:
                    bf:ee:55:61:a3:dd:ec:3a:d0:92:94:55:58:7b:fd:
                    a2:8a:1f:d5:82:bf:e3:31:95:af:db:ea:2a:50:8e:
                    08:03:4c:84:47:f0:1e:f6:b2:ae:e0:71:9b:1d:33:
                    3f:e4:d0:f2:fa:7a:ca:4c:5d:23:41:49:82:22:9f:
                    01:55:a3:96:c9:79:f9:dd:19:47:f5:35:bb:ea:3c:
                    26:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3E:C1:19:EF:83:13:E9:00:BF:02:D1:87:E6:42:C2:E7:16:BE:41:35
            X509v3 Authority Key Identifier:
                keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/DB74486C5F3A11EC8C771087C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.155.30.0/23

    Signature Algorithm: sha256WithRSAEncryption
         56:17:a2:ad:83:36:a2:6d:e5:ff:31:b2:cc:cc:3e:74:f3:95:
         df:fb:5a:09:3b:e9:ce:cf:26:7c:55:b6:cb:8f:96:d2:4b:44:
         f2:b9:42:e0:5a:b6:54:06:97:2b:7a:df:e9:56:b0:d4:c4:ca:
         fc:04:85:3b:38:e9:65:b4:e3:68:3e:b2:13:ff:db:15:93:11:
         5f:d1:03:8f:90:15:68:59:7b:f5:e1:e2:ae:0b:b3:26:45:63:
         8e:d7:6f:41:37:ee:1f:7e:35:bd:79:25:56:e1:2c:41:3f:e4:
         45:10:87:89:cd:e4:1c:9a:11:48:06:53:48:2b:69:be:56:3d:
         8d:45:60:21:a5:1d:24:23:8a:cc:4d:a9:b2:fe:c8:33:78:fc:
         36:30:bb:79:d5:7c:51:43:ab:17:e4:f6:46:48:da:de:9c:50:
         36:7e:36:f0:be:b6:45:7f:09:20:d3:3d:db:3a:2b:16:25:f5:
         e7:e6:c6:c1:ac:60:d5:a6:42:88:bf:47:56:00:e2:5c:c2:b0:
         43:ea:c4:f4:6d:04:72:09:fb:43:d1:52:62:5e:5c:7e:2a:4b:
         2b:0e:38:45:26:bc:70:05:14:ba:67:b2:df:39:f8:87:46:84:
         c9:13:f5:01:59:e9:2b:32:7c:1e:4d:ac:b0:26:6a:ac:d5:6a:
         60:95:6e:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 27 10:19:47 2024 by rpki-client on console-ams.rpki-client.org