Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/E47A51F00B5911EEB4D80578C4F9AE02.roa
File:                     E47A51F00B5911EEB4D80578C4F9AE02.roa (raw, json)
Hash identifier:          HG3OlWB5y7dupCrYtZTd8rOeikNRqygzTLgC15qduTc=
Subject key identifier:   1B:62:61:8E:76:29:11:B7:0B:03:70:85:69:67:13:C4:4A:B0:87:2B
Certificate issuer:       /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Certificate serial:       7401
Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/E47A51F00B5911EEB4D80578C4F9AE02.roa
Signing time:             Thu 15 Jun 2023 08:52:01 +0000
ROA not before:           Thu 15 Jun 2023 08:52:01 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     151118
IP address blocks:        103.214.226.0/23 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
                          rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 03 May 2024 15:38:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 29697 (0x7401)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
        Validity
            Not Before: Jun 15 08:52:01 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=648ad131-c73e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:dd:e1:76:88:3a:c3:e1:c6:81:b0:6a:19:50:
                    a8:6d:80:7b:38:f9:96:ec:26:a6:ce:7d:11:dc:7a:
                    dd:a2:82:a3:0b:e0:65:e8:b1:e9:eb:e4:2b:94:a8:
                    77:ca:75:96:d7:3d:5d:e0:6d:04:f1:a9:a3:0c:0d:
                    18:27:92:fa:36:67:50:f6:b1:fd:2a:8d:81:58:99:
                    e6:62:14:38:db:64:b7:5c:51:33:e6:77:f9:3a:9c:
                    0f:e6:5d:79:bb:d6:64:c8:42:07:cc:b4:e9:be:25:
                    e1:c3:3e:84:d3:79:65:82:66:8c:51:59:d0:fd:3c:
                    66:3d:11:c0:95:42:8d:ee:a2:e7:f6:dc:c9:a1:31:
                    b6:63:b9:9a:88:49:f5:75:43:9e:09:15:cd:7a:b8:
                    a8:c5:d7:92:d0:49:43:ba:5f:8c:71:8d:92:be:25:
                    6e:77:c7:79:30:79:8f:df:7a:b0:ed:41:9a:1c:a1:
                    68:b2:43:94:71:69:e6:7b:20:b2:a1:31:f7:10:a8:
                    55:ef:c2:48:c9:a6:52:36:a7:7d:49:e2:f7:05:30:
                    eb:1f:54:04:08:4a:5c:5c:93:1d:24:fe:1e:b8:fd:
                    e2:63:0f:b1:f8:a6:74:60:9d:23:c3:7d:5e:9c:1d:
                    4d:05:55:8a:ab:fe:36:81:ef:58:5b:d6:82:16:42:
                    c9:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1B:62:61:8E:76:29:11:B7:0B:03:70:85:69:67:13:C4:4A:B0:87:2B
            X509v3 Authority Key Identifier:
                keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/E47A51F00B5911EEB4D80578C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.214.226.0/23

    Signature Algorithm: sha256WithRSAEncryption
         5c:75:0f:91:68:a0:46:c5:39:0d:58:54:2d:e7:12:01:7c:2b:
         78:c6:16:81:6e:50:7e:ca:42:91:2a:93:87:29:8f:81:e2:a6:
         1c:2a:91:13:d5:cf:d9:ed:4a:71:d0:e5:65:ea:18:2c:53:cc:
         6f:f0:01:5b:5f:6e:f8:09:23:0f:c9:f5:b7:15:7e:22:45:dd:
         12:a7:44:4a:db:9f:d7:5c:64:ed:c8:13:e5:5b:a8:12:55:19:
         b4:71:07:80:64:25:57:c5:92:76:2c:21:23:ab:f7:e5:55:d3:
         2a:84:2f:2d:72:11:60:43:d3:f0:7b:f4:7b:31:32:f0:68:0b:
         4e:74:c6:50:5e:0a:27:7c:12:63:d3:14:35:eb:3c:17:a2:8f:
         c4:aa:49:cb:d0:62:58:7b:53:53:ab:90:f6:e1:1e:e2:3d:96:
         1b:15:e1:70:95:8d:13:00:5a:bc:77:39:82:94:fb:b3:f4:7b:
         5d:40:cf:51:0f:f9:79:7b:dd:24:87:e2:25:10:43:33:af:14:
         d2:ee:7c:c2:d5:47:2c:72:97:14:7c:4a:e0:83:e3:4d:2d:52:
         80:81:b3:cd:da:e9:15:96:87:25:e1:38:4d:ea:36:c4:66:2b:
         6f:7f:86:4c:21:6d:cc:d4:9d:88:ec:74:80:7c:9e:61:78:d9:
         3d:c6:c3:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 27 10:19:48 2024 by rpki-client on console-ams.rpki-client.org