Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/ED7CFB7C370C11ECB400034CC4F9AE02.roa
File:                     ED7CFB7C370C11ECB400034CC4F9AE02.roa (raw, json)
Hash identifier:          3kBJlGANKoh8Zv3CnFjmXWxDIPOVD0U5TC98w3uT9iI=
Subject key identifier:   5B:60:E9:7E:FD:F8:6D:12:79:88:E3:38:B0:44:26:ED:FC:A9:34:46
Certificate issuer:       /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Certificate serial:       7589
Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/ED7CFB7C370C11ECB400034CC4F9AE02.roa
Signing time:             Fri 14 Jul 2023 07:37:13 +0000
ROA not before:           Fri 14 Jul 2023 07:37:13 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     147201
IP address blocks:        103.175.28.0/23 maxlen: 24
                          2400:bc20::/32 maxlen: 32

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
                          rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 03 May 2024 15:38:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 30089 (0x7589)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
        Validity
            Not Before: Jul 14 07:37:13 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=64b0fb29-14d7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f2:81:56:41:7e:e7:d5:be:65:76:f6:b4:e3:d1:
                    1a:97:09:b6:26:be:de:1e:c2:dd:ed:ad:9a:c6:10:
                    1a:a7:1e:25:da:4d:cd:1b:29:e2:08:39:16:a1:7d:
                    7a:8b:0f:b5:9f:d6:5a:db:35:f8:5b:1e:df:f0:e2:
                    13:20:3c:98:eb:31:bd:d0:e5:61:37:67:57:a5:7b:
                    f2:7f:31:99:73:7b:02:d0:b1:2f:85:64:48:6d:c6:
                    52:ab:8c:a6:25:e3:21:0e:72:38:ef:24:d1:9f:6b:
                    e2:36:33:24:6e:f2:fc:37:39:03:8e:cd:e9:29:ee:
                    a1:0b:64:42:e2:11:6b:a5:d9:8b:fc:51:47:85:81:
                    bc:af:79:8b:a2:24:c3:43:0c:6b:df:85:c0:c0:03:
                    b0:c4:7b:22:e8:0c:86:50:50:24:07:ec:0b:ca:57:
                    89:10:9b:98:ac:67:74:e6:4e:1a:76:8b:60:51:19:
                    c7:df:db:5c:78:2c:f3:1a:f5:eb:39:a4:3b:99:58:
                    55:23:8b:49:78:c3:ac:c1:35:7a:b2:bf:1a:e1:6f:
                    63:99:e0:b5:32:8f:10:b9:b3:84:9c:02:2b:f5:99:
                    0f:52:f8:39:ff:5f:16:29:94:d8:a2:d0:58:d2:6a:
                    40:05:b2:5f:3c:a0:3c:81:cc:53:ec:09:21:ce:af:
                    a7:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5B:60:E9:7E:FD:F8:6D:12:79:88:E3:38:B0:44:26:ED:FC:A9:34:46
            X509v3 Authority Key Identifier:
                keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/ED7CFB7C370C11ECB400034CC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.175.28.0/23
                IPv6:
                  2400:bc20::/32

    Signature Algorithm: sha256WithRSAEncryption
         22:91:e9:f4:ae:29:02:e5:da:f3:b8:19:8a:ed:c4:8b:3f:f3:
         9d:8f:26:a5:61:3a:7a:17:c5:33:fa:b2:c4:61:11:4b:e5:2e:
         2a:47:e9:35:45:48:a0:03:91:10:01:7a:36:a0:9e:ee:1f:32:
         96:a0:cb:0f:3a:a8:6a:21:a6:5d:90:91:a5:91:2d:4a:28:5c:
         df:a1:ce:93:58:1f:22:26:c0:db:cf:01:fd:51:0a:15:1f:fb:
         93:ea:f2:9f:c5:f7:15:2b:63:3c:07:a4:07:39:1d:e8:53:f3:
         20:e2:95:a9:75:aa:8e:99:be:f1:d9:4d:b6:a0:0b:7e:02:aa:
         63:db:a3:be:a8:b1:0c:4f:f7:75:d3:38:98:85:3a:c0:a3:02:
         1c:e0:51:87:53:d0:67:47:7b:33:ef:58:7d:4c:e5:e8:08:b0:
         c6:17:48:4d:0a:86:d9:a5:35:d6:47:88:6a:30:6a:1b:e9:80:
         5b:49:ba:44:ef:b0:b9:cf:62:91:37:60:9d:f6:42:7c:07:92:
         9d:ce:14:67:15:37:02:b1:76:26:b1:31:f5:51:16:0e:2f:29:
         56:b3:6a:a5:b4:04:28:56:0c:44:35:5a:a1:92:78:5a:16:75:
         e6:a3:c9:c6:e3:33:f3:25:1a:1e:91:46:18:e6:73:e5:14:3b:
         21:43:dc:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 27 10:19:49 2024 by rpki-client on console-ams.rpki-client.org