Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/EB4C036EDF6311EEB15F0859C4F9AE02.roa
File:                     EB4C036EDF6311EEB15F0859C4F9AE02.roa (raw, json)
Hash identifier:          vxBa9/oY0AE5+2tDRyCmgM9fXULWqpcq+Q7GatT64nw=
Subject key identifier:   FA:89:10:46:87:36:F6:40:6E:0E:0F:F4:CE:7A:1F:77:5C:B6:EA:DB
Certificate issuer:       /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Certificate serial:       8460
Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/EB4C036EDF6311EEB15F0859C4F9AE02.roa
Signing time:             Mon 11 Mar 2024 04:57:54 +0000
ROA not before:           Mon 11 Mar 2024 04:57:54 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     151714
IP address blocks:        103.67.92.0/23 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
                          rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 03 May 2024 15:38:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 33888 (0x8460)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
        Validity
            Not Before: Mar 11 04:57:54 2024 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=65ee8f52-e0b5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:c6:bc:5d:7f:8c:73:de:f2:f4:db:64:9c:25:
                    d8:fe:aa:12:f5:09:fd:76:7a:dd:5a:f6:0f:fc:56:
                    c5:b0:55:13:09:4b:8d:86:8e:e8:33:63:3f:38:1d:
                    1e:0d:f0:58:8d:51:26:08:b1:bb:f0:ae:5c:63:31:
                    82:e8:e9:32:35:d8:b5:70:36:74:73:a0:26:d3:d9:
                    e7:3d:5a:b2:2c:20:74:5e:ab:5c:59:24:55:16:2d:
                    90:13:f8:ac:53:4d:b1:c0:83:11:7c:43:0f:9a:36:
                    9f:ef:93:76:fe:bc:9d:1c:08:10:79:f2:60:da:e7:
                    f3:40:12:c8:75:0d:86:8c:02:96:16:4c:1d:76:55:
                    88:03:80:6a:f6:32:e7:17:fd:63:0b:e6:40:c0:1a:
                    2f:a9:76:b2:3b:90:7a:ed:6f:6b:2f:e7:7c:b6:5c:
                    2e:45:62:a4:ac:a0:f3:6d:d9:d6:42:30:5b:0f:47:
                    1d:1e:12:c5:03:0a:13:29:57:8b:28:8d:94:29:f7:
                    6f:8c:2f:2e:cd:f5:07:fc:d8:fd:86:e8:d1:4c:06:
                    cc:21:01:43:b8:bf:2f:ac:31:aa:86:fc:5d:ce:34:
                    e8:7d:c6:8f:98:6a:fa:19:d1:60:0c:df:e0:1b:ac:
                    eb:3c:af:c4:77:d9:b8:ab:8b:9e:09:df:18:3b:9c:
                    4c:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FA:89:10:46:87:36:F6:40:6E:0E:0F:F4:CE:7A:1F:77:5C:B6:EA:DB
            X509v3 Authority Key Identifier:
                keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/EB4C036EDF6311EEB15F0859C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.67.92.0/23

    Signature Algorithm: sha256WithRSAEncryption
         9d:f8:10:6c:ec:89:24:09:a7:85:f7:78:35:6b:75:34:b0:c9:
         88:62:a2:7a:03:92:28:46:c2:b0:b9:9b:fb:cf:94:ea:3c:b2:
         ac:0c:cf:fa:d8:19:c9:42:1a:58:97:7e:7e:5e:af:8a:9a:ff:
         d7:9d:d2:8f:55:4c:a6:db:4d:71:f1:0f:5d:49:85:c3:e6:f8:
         af:96:fa:47:3f:1f:16:19:fd:18:c1:7e:c4:70:ce:bf:dd:7b:
         e0:f2:80:52:37:a8:2f:a6:8e:5e:00:45:ac:3b:1c:ee:22:0f:
         87:fd:12:5c:4a:93:56:58:99:b1:b6:4b:f0:5d:3e:13:6c:2b:
         ab:56:1e:b3:ce:25:ec:b5:73:e8:11:3e:6a:2b:b1:ac:99:fc:
         a7:ce:62:a8:65:2c:b7:d8:53:17:e8:01:73:f6:54:2c:42:f7:
         14:d2:85:4d:f9:ac:a5:96:e3:b5:07:34:be:85:bc:c9:bb:a9:
         b2:1a:69:e3:64:e6:8b:0a:18:08:a3:7f:b7:7c:25:d3:21:e7:
         a0:18:55:d4:31:7c:46:18:e8:ae:b0:c5:25:0e:da:99:c3:a1:
         08:5d:d5:7d:5f:92:c6:b2:cf:d0:9d:51:6d:73:3b:42:57:72:
         73:ef:e9:bc:dd:fe:13:2f:6d:ff:d2:6a:ec:d5:b8:41:e0:29:
         02:37:10:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 27 10:19:48 2024 by rpki-client on console-ams.rpki-client.org