Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/E1DA593EF22511EC88BA5369C4F9AE02.roa
File:                     E1DA593EF22511EC88BA5369C4F9AE02.roa (raw, json)
Hash identifier:          9BZmXtlCzNkrH0BzuQxUzR3FW2yaZYMHesvgpRZ7yXY=
Subject key identifier:   A5:C8:CA:8A:C8:BD:5A:F2:32:91:0E:FD:F3:45:0F:5E:DB:63:E7:7C
Certificate issuer:       /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Certificate serial:       6A55
Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/E1DA593EF22511EC88BA5369C4F9AE02.roa
Signing time:             Wed 10 May 2023 16:14:16 +0000
ROA not before:           Wed 10 May 2023 16:14:16 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     133235
IP address blocks:        103.231.32.0/23 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
                          rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 03 May 2024 15:38:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 27221 (0x6a55)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
        Validity
            Not Before: May 10 16:14:16 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=645bc2d8-e5fd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:b5:6c:1d:a1:eb:92:af:cd:e6:ee:af:16:ce:
                    6e:3b:d7:1a:ab:2a:54:0f:71:61:e0:78:be:0b:80:
                    d0:d7:e1:5d:47:af:03:9b:39:63:51:3b:db:db:9c:
                    63:fa:2b:5d:27:c4:34:9f:bb:9e:62:9e:55:d2:30:
                    04:9a:2b:ef:d7:81:ab:77:58:95:d6:cd:c5:63:8a:
                    e5:58:fa:b3:71:c7:f8:8d:12:33:74:cb:08:24:cf:
                    93:4f:95:8e:04:6f:49:19:e9:54:25:59:ff:d4:42:
                    71:1d:55:cc:e5:c9:44:ae:8c:e7:7c:6b:6a:81:9a:
                    17:5e:8d:54:fb:38:86:e3:a9:2d:a5:03:e8:4a:9c:
                    60:bd:aa:5e:90:58:67:7f:d0:b5:3f:d8:7a:e9:0d:
                    f9:c7:29:52:f8:93:3e:c5:f5:76:8e:46:2a:92:c6:
                    1f:6f:e3:52:6e:69:9b:4a:45:73:08:f9:e3:7f:9e:
                    2a:3a:11:fe:6c:9f:66:ac:c5:35:ce:56:05:18:0b:
                    41:15:53:48:90:fa:cd:92:fc:d9:38:aa:fe:4e:4b:
                    6d:69:8d:00:b2:e8:8c:e4:46:5e:56:e5:19:2e:d2:
                    25:81:29:f8:1f:7d:5f:f9:f0:21:fb:a6:e7:dd:76:
                    98:17:76:1d:19:f5:08:3d:6a:f7:d1:cc:e2:1f:7b:
                    95:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A5:C8:CA:8A:C8:BD:5A:F2:32:91:0E:FD:F3:45:0F:5E:DB:63:E7:7C
            X509v3 Authority Key Identifier:
                keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/E1DA593EF22511EC88BA5369C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.231.32.0/23

    Signature Algorithm: sha256WithRSAEncryption
         af:e2:d4:59:89:07:75:6b:68:3b:e2:08:2a:36:42:81:bf:73:
         d8:4b:56:66:68:cd:07:07:8a:39:8d:b8:ea:56:95:8e:32:8b:
         c3:af:64:c8:70:7e:b3:6e:e5:cd:36:c3:c3:99:ac:db:41:53:
         1f:b0:f5:e3:11:19:43:5e:fc:75:23:f1:2a:b5:5f:a7:f9:18:
         29:52:cb:ee:62:c0:8b:2a:2e:76:08:d9:5e:6f:d7:db:bb:2f:
         78:b0:b2:40:f2:e1:9f:e2:22:f4:f2:ac:87:a3:01:9c:e1:97:
         2d:d7:16:79:6c:fa:f4:ed:9f:fe:93:48:40:41:51:7b:19:92:
         8f:d1:41:fb:80:b7:96:f7:fa:bb:95:2a:cb:45:9b:fd:23:f8:
         48:70:59:36:d1:ca:83:b8:e4:b2:d7:a2:bc:99:93:10:6b:77:
         7c:b5:5e:96:a9:6c:0c:2e:00:9f:be:f5:bb:2d:a5:d9:ee:2e:
         76:be:36:2e:76:c9:49:47:4e:94:ff:f1:9d:d9:ef:cd:72:22:
         f4:96:83:d0:06:c3:39:8c:0a:30:49:d8:89:09:66:9f:1a:e4:
         cd:90:24:04:95:dd:d7:04:10:7c:9f:9c:81:97:07:a7:fe:15:
         11:66:d7:e1:2a:42:2d:1b:8e:10:e9:ee:59:d5:78:3b:f1:ae:
         e9:4f:26:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 27 10:19:48 2024 by rpki-client on console-ams.rpki-client.org