Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/EEA7528249C711EB917F581DC4F9AE02.roa
File:                     EEA7528249C711EB917F581DC4F9AE02.roa (raw, json)
Hash identifier:          goE97JM2oi7ulHaUg96UHdwnOmB2nTWCL1IlsT7g960=
Subject key identifier:   FD:3D:5B:01:B9:5E:FA:CC:61:C4:57:7A:18:E8:ED:6B:ED:F4:B8:72
Certificate issuer:       /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Certificate serial:       6B29
Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/EEA7528249C711EB917F581DC4F9AE02.roa
Signing time:             Wed 10 May 2023 16:18:18 +0000
ROA not before:           Wed 10 May 2023 16:18:18 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     134320
IP address blocks:        103.158.65.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
                          rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 03 May 2024 15:38:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 27433 (0x6b29)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
        Validity
            Not Before: May 10 16:18:18 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=645bc3ca-03cf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ec:3d:99:43:fc:f8:d0:c6:d5:1d:d5:54:f8:c4:
                    cf:c0:e7:71:aa:d6:0c:a4:e1:0f:4a:c9:b0:bc:d3:
                    3d:11:ad:f1:67:eb:98:65:31:22:f5:21:17:74:25:
                    1d:76:4e:72:42:f9:2c:01:c7:40:d8:1b:23:d9:9c:
                    70:8b:9a:52:32:a0:01:ca:3c:ed:c0:ec:bb:4c:66:
                    aa:29:24:2c:b5:9c:77:6b:db:40:d6:06:43:09:f1:
                    4f:43:b5:6e:bb:ef:bf:78:1f:87:47:4e:0a:c5:d7:
                    67:ab:2e:14:70:8a:61:0e:bd:3f:cb:4d:4a:6c:64:
                    99:a7:24:8f:85:8f:b7:29:f4:3d:5d:02:6c:aa:50:
                    44:66:64:ce:0a:b4:45:06:f7:48:13:ce:73:11:b4:
                    ac:4c:ee:83:c1:f4:a8:fd:54:bf:7b:b5:ca:06:35:
                    89:21:bf:4f:36:68:8e:2c:ff:14:13:02:c1:3d:38:
                    c8:85:22:e4:97:33:8b:1a:8e:e4:7b:94:48:eb:d9:
                    e6:0e:e8:88:60:0b:94:2d:bd:47:15:ab:9b:a2:3a:
                    50:1e:db:f9:44:4f:fe:bd:78:d8:cb:15:c2:a4:69:
                    ac:73:6b:63:4b:83:8c:79:7d:43:bc:b6:12:61:35:
                    85:5c:c8:44:37:2a:b5:a9:21:b0:fd:58:ac:9b:ce:
                    a5:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FD:3D:5B:01:B9:5E:FA:CC:61:C4:57:7A:18:E8:ED:6B:ED:F4:B8:72
            X509v3 Authority Key Identifier:
                keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/EEA7528249C711EB917F581DC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.158.65.0/24

    Signature Algorithm: sha256WithRSAEncryption
         7f:be:91:5c:5f:8d:d6:50:ba:d8:bd:97:e0:fb:64:40:84:89:
         02:45:3f:73:ba:9c:86:85:b3:c8:51:99:be:7b:3f:76:51:33:
         56:b0:7d:40:3a:54:c0:b8:d5:0c:a6:0a:7e:38:e1:08:1e:b9:
         67:ae:df:ce:54:d3:f9:3d:a3:5c:97:ed:53:e2:b2:67:0b:c2:
         78:ed:09:a2:ec:c5:f8:50:22:96:9d:a4:e3:b2:49:1c:fa:dc:
         fb:e9:39:3d:39:0d:a9:a2:c6:8a:fb:68:36:58:1d:81:cb:49:
         79:97:f7:e9:02:a6:87:85:90:1a:92:eb:22:99:b1:84:f5:10:
         f5:42:45:bf:15:50:dd:01:a4:e9:3d:40:ed:29:64:c5:fb:8a:
         e4:5f:2c:72:e4:56:9b:d8:80:50:7d:c4:de:9b:15:e5:87:2d:
         7f:4f:d5:45:d9:70:c6:4e:ce:0a:0e:54:01:02:2d:c9:e5:42:
         ab:46:08:79:13:c3:b7:de:e7:c0:3c:b9:95:c5:b5:f6:45:ed:
         79:dc:9e:09:b9:91:61:38:11:71:e7:fb:fe:e0:fa:7f:9b:94:
         84:ac:ba:15:a5:70:15:ba:f7:af:19:e5:5b:45:0b:7e:d8:f7:
         ef:3b:b3:42:50:5b:82:94:1b:48:32:14:5e:46:af:0a:78:02:
         37:2a:c7:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 27 10:19:49 2024 by rpki-client on console-ams.rpki-client.org