Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/E6C73620781D11EB808A544BC4F9AE02.roa
File:                     E6C73620781D11EB808A544BC4F9AE02.roa (raw, json)
Hash identifier:          n8CpDIioMCCV3Krxyzx4nmvqp78Mz5HbM0Tlwuxj1AQ=
Subject key identifier:   52:EE:65:A8:07:58:F6:DE:5F:48:0A:CA:4E:34:60:FF:D5:43:47:4E
Certificate issuer:       /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Certificate serial:       6ED1
Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/E6C73620781D11EB808A544BC4F9AE02.roa
Signing time:             Wed 10 May 2023 16:35:51 +0000
ROA not before:           Wed 10 May 2023 16:35:51 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     141532
IP address blocks:        103.162.188.0/23 maxlen: 24
                          2407:2140::/32 maxlen: 32
                          2407:2140::/33 maxlen: 33
                          2407:2140:8000::/33 maxlen: 33

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
                          rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 03 May 2024 15:38:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 28369 (0x6ed1)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
        Validity
            Not Before: May 10 16:35:51 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=645bc7e7-b26d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:3e:fd:8f:55:6e:5a:15:08:38:b3:67:fc:c4:
                    d5:df:83:02:80:51:2b:20:6b:bf:7a:60:56:f0:c9:
                    2a:5e:c6:e7:98:9d:4e:a4:17:3a:fc:98:22:95:d7:
                    3d:5d:d1:bb:d5:cd:c0:f5:fa:5d:6d:e3:7f:51:26:
                    2f:0d:a3:df:a4:83:0f:43:3c:b3:37:49:4d:6c:e1:
                    95:e4:94:4c:cb:e4:f2:ae:77:fa:4c:e3:9f:10:46:
                    e2:18:5c:1a:2a:47:86:06:3a:aa:02:16:83:50:ff:
                    fe:24:6f:e0:d9:36:31:bd:f1:33:a5:7d:c6:16:dd:
                    69:45:54:26:53:38:6c:32:c7:15:87:9b:cf:f3:a8:
                    de:d4:40:d9:7a:ca:03:a7:32:d0:71:7d:3f:73:b1:
                    52:b1:bc:02:d2:36:36:ba:00:6d:e0:b4:5e:40:40:
                    d0:b2:53:76:3d:6e:d9:30:8f:71:45:0d:7b:ee:1e:
                    7c:28:90:41:3c:02:bf:1b:4e:36:7e:52:16:35:c6:
                    d8:6b:4a:84:f5:dd:77:e6:5d:88:1d:a4:be:35:77:
                    a4:86:80:7d:b6:bf:d1:e6:d1:e3:ae:c5:d2:38:e6:
                    a2:16:e5:44:e3:6f:85:31:a6:8d:34:3a:6f:cf:c5:
                    d9:bd:26:f0:e7:5a:38:89:3d:aa:a6:55:2e:98:3f:
                    ac:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                52:EE:65:A8:07:58:F6:DE:5F:48:0A:CA:4E:34:60:FF:D5:43:47:4E
            X509v3 Authority Key Identifier:
                keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/E6C73620781D11EB808A544BC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.162.188.0/23
                IPv6:
                  2407:2140::/32

    Signature Algorithm: sha256WithRSAEncryption
         47:23:e2:d3:6d:95:d4:ba:5f:5c:66:07:af:69:df:ee:f2:79:
         7b:c5:ba:59:13:84:76:65:be:c4:bc:b5:f6:0a:fe:d3:42:69:
         e4:34:f1:ae:86:42:7b:88:a9:c5:e4:10:bd:68:8d:41:b1:c2:
         5f:95:ab:27:23:54:d6:4c:fa:53:e3:2f:35:11:cb:86:6d:ea:
         e2:4e:a3:16:2f:3c:ca:a8:d3:9c:02:35:94:1f:e1:79:18:2b:
         f3:5c:78:c5:a2:2b:e6:49:78:e2:39:fb:59:9c:a9:0b:04:b1:
         a0:8b:97:9b:b1:c4:33:64:5c:7c:40:f8:1f:0d:95:8a:0a:ef:
         f4:89:b6:3d:40:17:44:ad:cb:2c:99:b9:c3:9f:cd:10:1f:79:
         8d:04:bb:d3:d9:d2:c9:87:e0:aa:53:81:2f:c8:97:1d:d3:8a:
         3d:68:4f:cc:a3:a5:97:ac:ce:35:72:86:d2:96:cd:6a:c6:52:
         aa:e3:eb:55:4f:69:59:e3:d5:93:c3:bf:b3:2a:ff:72:0d:69:
         56:ff:37:9f:a9:58:5c:da:6e:78:9c:f3:a4:de:0c:aa:28:1f:
         89:38:48:a6:36:c1:e5:1b:25:cb:c9:f0:2f:f3:42:3f:1c:1e:
         ea:0f:a0:b1:e6:e0:b1:07:8a:db:8a:02:2f:1a:fa:b5:18:07:
         5f:b3:6c:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 27 10:19:48 2024 by rpki-client on console-ams.rpki-client.org