Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/F3F763CC4B2111EEACA66255C4F9AE02.roa
File:                     F3F763CC4B2111EEACA66255C4F9AE02.roa (raw, json)
Hash identifier:          PAH4s+Lrc+krdjOSCSY0tBUjz0CJ1kPgHtFhVCz73Ew=
Subject key identifier:   DE:47:5C:4C:84:20:5A:3E:76:CD:03:BB:65:E6:C2:95:2A:85:C5:C7
Certificate issuer:       /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Certificate serial:       7A30
Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/F3F763CC4B2111EEACA66255C4F9AE02.roa
Signing time:             Wed 13 Sep 2023 07:12:31 +0000
ROA not before:           Wed 13 Sep 2023 07:12:30 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     134039
IP address blocks:        103.51.232.0/22 maxlen: 24
                          103.51.239.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
                          rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 03 May 2024 15:38:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 31280 (0x7a30)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
        Validity
            Not Before: Sep 13 07:12:30 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=650160de-ce3d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f1:b7:b7:26:92:39:45:a9:7b:99:33:d2:39:13:
                    2e:0c:16:8e:60:e1:02:d5:95:8c:95:be:ea:c2:5e:
                    b4:d1:42:8c:81:99:d1:86:de:92:1a:fc:f2:1a:b6:
                    ed:98:81:f9:53:7d:0f:f2:76:23:f7:1c:db:98:6b:
                    02:88:0d:a0:d5:2d:17:c7:7e:66:96:a1:63:96:0e:
                    2e:46:d0:fa:2b:49:ea:b7:d1:73:3a:2e:69:18:be:
                    a4:f9:71:19:e8:96:a2:96:28:b8:d7:55:65:7e:db:
                    75:2c:55:76:f3:b6:c0:1e:a3:cb:82:08:51:2d:01:
                    c6:fd:a0:5e:0c:f9:ca:1f:95:fb:40:29:68:dd:a5:
                    25:a9:10:1c:55:76:db:f2:33:56:b3:26:c8:06:5e:
                    84:91:54:e9:1a:3e:e8:e9:b9:e2:da:62:35:bb:32:
                    94:75:5a:23:3d:48:cf:fa:86:8c:ff:74:ab:79:ec:
                    86:2b:c3:01:0a:75:2d:61:c9:67:19:0a:72:a2:fe:
                    85:a5:40:b0:19:64:98:ca:8f:6f:4d:b9:21:b1:f8:
                    1f:ed:eb:e1:88:55:6e:d7:87:b9:6d:91:9a:07:ab:
                    16:86:06:02:18:99:f2:0f:4a:78:03:a6:46:f2:9d:
                    0a:56:35:31:39:4c:1c:5c:77:c2:1f:82:c5:15:87:
                    87:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DE:47:5C:4C:84:20:5A:3E:76:CD:03:BB:65:E6:C2:95:2A:85:C5:C7
            X509v3 Authority Key Identifier:
                keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/F3F763CC4B2111EEACA66255C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.51.232.0/22
                  103.51.239.0/24

    Signature Algorithm: sha256WithRSAEncryption
         26:7b:48:1b:81:33:43:a9:31:03:c4:17:75:ef:fa:b2:54:7a:
         60:9b:8b:81:ba:11:1c:bd:69:6b:0f:96:da:09:35:e1:69:aa:
         4c:f5:1f:0d:72:ed:54:e7:43:8a:ea:d4:8c:72:b3:3d:59:6c:
         b2:7f:7f:dd:46:45:ce:39:b6:e1:90:f0:67:7b:ed:7b:b5:73:
         1c:ad:89:5b:2d:5f:4e:5f:01:c8:d4:ba:9e:6c:3c:90:cd:42:
         37:ac:91:13:c3:46:56:d3:a8:fa:17:8a:2c:2b:f3:ef:d7:65:
         bc:16:b2:ea:3a:74:19:a9:6e:35:e3:b0:ef:fe:66:83:ad:5e:
         04:d0:b3:4f:73:62:13:ed:96:b1:2e:5f:7c:75:4b:02:58:7c:
         b7:c7:65:32:f1:b1:43:0a:c1:40:8b:b5:d1:f5:0f:0a:ac:bc:
         4d:68:60:de:1a:db:db:8f:42:fc:d9:90:4e:99:78:51:1f:f8:
         f2:6a:c1:08:38:ea:70:7c:64:59:3a:10:ab:93:ce:a8:f7:86:
         1a:de:c4:b2:6f:1c:29:88:fb:54:3a:24:ae:9f:5a:48:84:ef:
         46:c8:ba:e1:c6:98:50:fd:a4:8c:1d:2b:8c:95:8d:bf:a5:c8:
         2e:2c:48:c8:7d:49:df:81:5c:4a:5e:a4:f0:91:df:4a:69:31:
         18:83:96:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 27 10:19:50 2024 by rpki-client on console-ams.rpki-client.org