Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/E4EDA694A38811ECA33B9C73C4F9AE02.roa
File:                     E4EDA694A38811ECA33B9C73C4F9AE02.roa (raw, json)
Hash identifier:          XIkaWSkiyze0S/gJnPvYVXT2TtqPBVUdjx+PubQrYjs=
Subject key identifier:   A3:F2:55:89:C3:FF:3E:4A:C1:9D:29:77:F7:10:C3:28:44:90:38:53
Certificate issuer:       /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Certificate serial:       7095
Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/E4EDA694A38811ECA33B9C73C4F9AE02.roa
Signing time:             Wed 10 May 2023 16:44:16 +0000
ROA not before:           Wed 10 May 2023 16:44:16 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     149602
IP address blocks:        103.183.42.0/23 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
                          rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 03 May 2024 15:38:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 28821 (0x7095)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
        Validity
            Not Before: May 10 16:44:16 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=645bc9e0-4a9c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:64:4f:5a:52:1a:34:7c:dc:78:e0:a9:55:7b:
                    12:c8:48:69:92:65:47:67:72:34:50:96:f0:cb:ed:
                    00:db:be:65:57:b0:18:8c:c5:54:ea:78:b2:3d:fd:
                    3a:b5:72:ec:15:29:a7:ff:65:76:a4:23:63:4b:21:
                    db:00:30:a4:81:e6:ff:07:b1:b1:e1:da:9e:7e:39:
                    51:1d:a9:e4:45:b4:72:1d:da:ae:da:e9:e7:2b:0e:
                    46:0a:51:97:4b:f8:16:72:75:44:95:42:68:f3:9a:
                    92:ef:c5:ee:4d:19:65:92:e5:9c:01:67:20:42:04:
                    27:4e:f0:f0:32:c5:c2:1e:8d:a3:3c:1f:35:bb:f3:
                    e3:a0:d6:96:f3:14:dd:75:7a:46:45:ad:e2:a3:bc:
                    0b:d1:9a:a5:94:52:53:72:37:bf:51:e0:3e:66:bd:
                    ba:61:2c:bb:fa:f0:9e:ca:56:ff:5d:53:f7:d2:87:
                    8c:27:60:d7:23:5c:98:d9:4b:77:dc:60:2a:1d:8a:
                    bc:70:f4:65:08:80:01:e7:1e:6b:7e:1d:0b:e7:ba:
                    d0:8a:25:48:b2:75:83:3e:f2:0e:4b:4c:9f:c6:96:
                    ff:e6:1d:27:23:7c:5c:78:e9:75:60:c9:5b:02:f9:
                    6a:b7:43:37:84:28:03:b6:8a:66:97:c3:b3:0e:8c:
                    49:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A3:F2:55:89:C3:FF:3E:4A:C1:9D:29:77:F7:10:C3:28:44:90:38:53
            X509v3 Authority Key Identifier:
                keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/E4EDA694A38811ECA33B9C73C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.183.42.0/23

    Signature Algorithm: sha256WithRSAEncryption
         60:64:b8:8f:6a:0e:9a:b3:ea:70:2c:fc:17:2c:d9:82:5f:dc:
         22:ed:54:b5:8e:33:b8:79:c7:de:0a:7a:4d:a6:3b:7d:fb:76:
         2c:ff:96:51:e5:15:97:c6:e3:27:b5:0d:d6:87:67:0f:bc:91:
         4f:5b:9b:88:7f:9f:7b:70:8e:ad:fa:85:64:1b:15:b6:6a:5b:
         76:42:e1:eb:c9:63:7c:93:cc:e7:25:79:26:ed:67:ea:e0:97:
         07:bd:72:e4:37:5d:cc:8e:7d:6e:60:ab:42:9a:46:23:de:b5:
         d4:3b:6f:c6:6c:33:ac:a0:e1:f3:43:05:65:4c:87:c5:8b:2f:
         3a:9d:bf:d7:7c:89:cc:b9:4f:ec:51:a2:11:2e:98:07:ea:83:
         2d:1c:d9:65:8f:a1:04:80:a6:60:46:6a:31:32:14:ac:32:7f:
         fa:d5:e9:86:73:70:ac:82:75:3d:e5:8b:b4:20:d6:ad:f0:38:
         3e:4d:18:ff:5d:ec:d4:05:3e:26:68:e1:6a:f6:f6:78:74:1b:
         ee:64:59:bf:2d:b6:f7:3e:b3:c0:d6:57:f9:76:8e:33:c0:3f:
         e2:4a:b1:80:5c:a4:39:35:6b:0c:5d:bd:49:c5:36:04:21:38:
         53:3c:7d:e4:68:bc:8e:47:65:7e:a6:bd:3c:72:4a:bf:0e:41:
         f9:36:a6:7c
-----BEGIN CERTIFICATE-----
MIIFcTCCBFmgAwIBAgICcJUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
OEVEQjIxMTAvBgNVBAUTKDI5NkVEQjY0RjNBRjZFOUQ5ODA5MzJFODE2Rjk1OTgz
RTNBQkM4MjMwHhcNMjMwNTEwMTY0NDE2WhcNMjQwNzAxMDAwMDAwWjAYMRYwFAYD
VQQDEw02NDViYzllMC00YTljMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAwmRPWlIaNHzceOCpVXsSyEhpkmVHZ3I0UJbwy+0A275lV7AYjMVU6niyPf06
tXLsFSmn/2V2pCNjSyHbADCkgeb/B7Gx4dqefjlRHankRbRyHdqu2unnKw5GClGX
S/gWcnVElUJo85qS78XuTRllkuWcAWcgQgQnTvDwMsXCHo2jPB81u/PjoNaW8xTd
dXpGRa3io7wL0ZqllFJTcje/UeA+Zr26YSy7+vCeylb/XVP30oeMJ2DXI1yY2Ut3
3GAqHYq8cPRlCIAB5x5rfh0L57rQiiVIsnWDPvIOS0yfxpb/5h0nI3xceOl1YMlb
Avlqt0M3hCgDtopml8OzDoxJewIDAQABo4IClTCCApEwHQYDVR0OBBYEFKPyVYnD
/z5KwZ0pd/cQwyhEkDhTMB8GA1UdIwQYMBaAFClu22Tzr26dmAky6Bb5WYPjq8gj
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4RURCMi8yQTQzRTMwQzcw
RTkxMUUyQjM2RDRCNkIyOTc5QkIyMC9LVzdiWlBPdmJwMllDVExvRnZsWmctT3J5
Q00uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0tXN2JaUE92YnAyWUNUTG9GdmxaZy1PcnlDTS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
OEVEQjIvMkE0M0UzMEM3MEU5MTFFMkIzNkQ0QjZCMjk3OUJCMjAvRTRFREE2OTRB
Mzg4MTFFQ0EzM0I5QzczQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E
EDAOMAwEAgABMAYDBAFntyowDQYJKoZIhvcNAQELBQADggEBAGBkuI9qDpqz6nAs
/Bcs2YJf3CLtVLWOM7h5x94Kek2mO337diz/llHlFZfG4ye1DdaHZw+8kU9bm4h/
n3twjq36hWQbFbZqW3ZC4evJY3yTzOcleSbtZ+rglwe9cuQ3XcyOfW5gq0KaRiPe
tdQ7b8ZsM6yg4fNDBWVMh8WLLzqdv9d8icy5T+xRohEumAfqgy0c2WWPoQSApmBG
ajEyFKwyf/rV6YZzcKyCdT3li7Qg1q3wOD5NGP9d7NQFPiZo4Wr29nh0G+5kWb8t
tvc+s8DWV/l2jjPAP+JKsYBcpDk1awxdvUnFNgQhOFM8feRovI5HZX6mvTxySr8O
Qfk2pnw=
-----END CERTIFICATE-----
Generated at Sat Apr 27 10:19:48 2024 by rpki-client on console-ams.rpki-client.org