Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/E73C735CCA2A11EDBDDF574AC4F9AE02.roa
File:                     E73C735CCA2A11EDBDDF574AC4F9AE02.roa (raw, json)
Hash identifier:          btSbQQmaZEBOaPPhVrIbUDqGBreQuAMv/2n6uyl841A=
Subject key identifier:   CD:B3:1A:41:6A:FB:9A:B0:FD:FB:D2:17:A4:11:F0:1E:65:65:9E:E0
Certificate issuer:       /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Certificate serial:       6F93
Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/E73C735CCA2A11EDBDDF574AC4F9AE02.roa
Signing time:             Wed 10 May 2023 16:39:27 +0000
ROA not before:           Wed 10 May 2023 16:39:27 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     146846
IP address blocks:        103.83.248.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
                          rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 03 May 2024 15:38:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 28563 (0x6f93)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
        Validity
            Not Before: May 10 16:39:27 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=645bc8be-8ee8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:64:5c:52:bb:c1:aa:79:37:3a:7f:06:ee:2b:
                    0e:27:5f:eb:1b:5d:77:47:5c:3b:61:78:b0:e3:88:
                    0b:d1:85:2e:02:09:5f:d0:6f:ff:9b:81:14:a5:80:
                    e5:c2:31:cb:2c:84:ac:ad:e4:d6:bb:ea:0b:4b:c2:
                    bc:9c:30:35:e3:f5:f3:e9:8a:95:53:3f:3f:3f:2c:
                    12:28:52:df:b4:a1:6e:ff:b8:99:b3:18:b7:0e:23:
                    ee:8a:f9:68:32:74:7c:38:f4:a5:f2:70:10:44:a0:
                    8e:37:7a:fa:04:5f:aa:9b:41:10:12:d9:ee:96:29:
                    ff:b3:21:9d:95:c1:f0:4d:3f:93:a6:b3:1f:60:dc:
                    30:34:0e:1d:b1:94:80:31:f1:62:91:8f:d9:7d:5f:
                    34:c0:0e:12:69:c2:46:6c:5f:cb:c3:8d:a9:70:6b:
                    e3:63:09:a4:c2:e3:df:34:b0:7e:93:15:03:2b:a9:
                    43:ea:ff:2b:eb:5c:88:a7:cf:cb:a5:5c:48:f7:c1:
                    dc:08:05:7c:51:80:bd:fb:34:03:90:cf:a6:5f:1e:
                    8f:af:6d:c6:db:33:f6:bf:e5:1b:ba:b2:42:26:e2:
                    f1:ca:73:5d:76:7e:cd:8f:c8:87:fa:c4:b9:ef:27:
                    f1:d3:72:ed:e3:12:f8:22:66:65:3e:b9:cc:be:6a:
                    c9:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CD:B3:1A:41:6A:FB:9A:B0:FD:FB:D2:17:A4:11:F0:1E:65:65:9E:E0
            X509v3 Authority Key Identifier:
                keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/E73C735CCA2A11EDBDDF574AC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.83.248.0/22

    Signature Algorithm: sha256WithRSAEncryption
         69:35:01:ff:ba:1a:2d:76:7a:98:e1:53:11:43:43:45:d1:f6:
         7a:a1:aa:9f:81:3c:48:1e:d8:12:2d:3e:9c:61:23:df:a4:ad:
         39:81:1c:32:c0:6b:07:6b:02:10:36:6c:d6:b6:98:7d:24:81:
         f2:95:9d:4d:cf:91:8a:d7:76:75:06:07:f7:bf:21:44:2c:69:
         f6:f7:38:de:bf:ee:7d:89:07:d9:69:3a:47:a7:23:38:58:24:
         67:90:fd:70:48:be:41:b0:0c:9e:bf:06:aa:cd:e2:26:df:53:
         5f:57:50:27:ff:e8:d5:d8:09:e7:3a:13:ba:be:8b:fa:af:42:
         4e:5f:5a:3f:f2:26:ab:c8:62:80:df:74:80:cf:1c:5d:34:3b:
         8b:30:8c:57:02:f0:8a:49:a9:5c:91:3b:9b:7a:dc:68:29:ad:
         50:c5:77:26:03:36:a3:02:c3:a9:c2:92:ee:6f:a4:94:34:f1:
         d8:92:0b:f1:42:57:12:05:b3:31:f0:11:d9:ea:25:f2:7f:e7:
         eb:14:a7:1e:cd:d6:7a:66:5c:fd:b6:8c:5b:b5:4c:11:d7:ce:
         4f:77:57:0f:c5:d8:ad:f0:3a:42:d2:70:75:a9:ec:a3:cd:99:
         73:a6:9e:e6:ac:a7:84:64:24:87:08:38:c8:01:db:b9:8c:98:
         e7:22:36:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 27 10:19:48 2024 by rpki-client on console-ams.rpki-client.org