Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/F44DE9A8687011ECA192E768C4F9AE02.roa
File:                     F44DE9A8687011ECA192E768C4F9AE02.roa (raw, json)
Hash identifier:          zQ63eGSkNlF1ztwWGDitPzSeBj8qAbpTZFk1rkdQrzw=
Subject key identifier:   B1:1F:3F:AE:A3:33:D0:85:47:9A:39:9C:74:7C:57:89:66:D5:5D:74
Certificate issuer:       /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Certificate serial:       6CC0
Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/F44DE9A8687011ECA192E768C4F9AE02.roa
Signing time:             Wed 10 May 2023 16:26:04 +0000
ROA not before:           Wed 10 May 2023 16:26:04 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     136722
IP address blocks:        103.101.134.0/24 maxlen: 24
                          103.185.179.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
                          rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 03 May 2024 15:38:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 27840 (0x6cc0)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
        Validity
            Not Before: May 10 16:26:04 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=645bc59c-e746
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:b8:6a:44:a2:60:23:7c:d0:48:88:51:54:41:
                    83:f7:08:31:98:6a:7d:e8:bb:d5:93:f3:c5:31:5a:
                    7b:8a:96:d6:fc:d9:ce:b6:a2:9c:e2:ff:76:b6:ab:
                    4b:54:f8:47:b1:fd:65:95:06:b7:a0:3f:ec:21:13:
                    1a:63:db:dc:46:0e:79:34:f9:c3:5f:4b:e3:ea:bc:
                    80:fd:ad:04:cd:2d:fd:4e:5b:90:a5:26:ae:7a:1c:
                    54:b3:cc:fc:d2:ec:1d:49:85:c4:97:2b:69:2e:ab:
                    94:a2:08:82:7f:22:06:91:61:15:50:c7:1a:b5:5a:
                    e2:dd:5d:59:dc:04:d9:a6:d1:0f:73:93:d3:42:97:
                    69:76:13:37:3f:ab:a7:7a:b3:1a:4b:a2:51:15:7d:
                    aa:42:7f:c4:29:99:64:22:78:6f:4b:55:52:87:cf:
                    20:f5:5c:db:56:00:15:aa:27:be:52:4b:e6:5e:eb:
                    ab:3d:f5:44:67:23:9e:11:60:c1:0a:50:c2:f5:57:
                    60:85:70:13:78:d8:46:97:da:71:91:06:59:e5:6f:
                    35:8a:47:6d:d5:ce:60:19:5e:9d:7d:2b:d5:75:84:
                    79:1f:fa:55:cb:53:ff:b7:f3:45:f7:a3:de:a7:c0:
                    1d:f9:72:2c:42:cb:aa:1c:e6:b2:49:d8:1c:43:3a:
                    2e:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B1:1F:3F:AE:A3:33:D0:85:47:9A:39:9C:74:7C:57:89:66:D5:5D:74
            X509v3 Authority Key Identifier:
                keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/F44DE9A8687011ECA192E768C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.101.134.0/24
                  103.185.179.0/24

    Signature Algorithm: sha256WithRSAEncryption
         66:3a:68:30:51:88:54:a3:fd:63:96:bc:81:6c:70:9b:a1:c5:
         1a:40:80:09:2b:83:b0:1d:ab:da:6d:5a:b0:7b:09:61:7f:d9:
         d3:cf:ef:94:d6:3d:07:00:be:9e:a2:f6:b1:f6:25:21:9c:8d:
         39:90:f6:d0:61:d8:84:a8:c7:e7:03:80:a6:f9:f9:5d:1f:69:
         75:8d:c1:1f:6b:4b:64:eb:a4:11:ea:db:db:82:84:8f:60:5a:
         c9:a4:38:ae:70:ad:6c:2d:4b:d7:f7:b7:b2:2c:19:38:6b:8f:
         3c:9d:3f:dd:91:ed:63:67:04:de:2f:6b:67:9e:48:00:3c:e2:
         a2:ce:1b:68:f6:7c:4a:14:dc:0b:f7:b4:1b:ea:75:f7:ca:ad:
         60:5a:97:7e:dc:17:3c:07:2f:7c:49:c7:e4:12:16:47:aa:22:
         9a:52:9e:c4:fc:d5:86:91:17:5c:70:f9:41:e1:68:1e:6e:0f:
         e1:cd:d2:56:11:44:3e:5d:49:89:1e:0f:87:8d:32:69:2f:f3:
         50:42:5b:2b:8e:78:ba:d2:83:04:4c:c4:4f:a0:cd:f6:f1:f2:
         3c:fe:cb:db:66:22:cc:a7:b9:d1:4a:6e:77:9c:e1:2a:77:84:
         f3:9b:fc:17:3c:aa:07:9d:7a:2c:3c:d9:8b:fb:8d:9c:0b:15:
         b4:eb:d5:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 27 10:19:50 2024 by rpki-client on console-ams.rpki-client.org