Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/F544A5EA9B8811EC826E9357C4F9AE02.roa
File:                     F544A5EA9B8811EC826E9357C4F9AE02.roa (raw, json)
Hash identifier:          buLQew/cjWF8bdr2da+F8mmmaieHVGtZN5f3y7eqPbw=
Subject key identifier:   97:25:67:61:1B:75:CD:E4:61:F0:4C:BD:66:11:BD:71:49:38:38:B7
Certificate issuer:       /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Certificate serial:       6DB9
Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/F544A5EA9B8811EC826E9357C4F9AE02.roa
Signing time:             Wed 10 May 2023 16:30:44 +0000
ROA not before:           Wed 10 May 2023 16:30:44 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     138774
IP address blocks:        103.164.140.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
                          rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 03 May 2024 15:38:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 28089 (0x6db9)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
        Validity
            Not Before: May 10 16:30:44 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=645bc6b4-d45e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:c1:c2:56:ee:a5:a5:85:1f:8d:5a:74:a7:69:
                    69:16:bc:85:64:4d:5e:91:fd:73:28:6c:87:14:b9:
                    b8:04:ea:1b:be:ee:0d:44:c8:ce:83:48:66:fb:1f:
                    58:8e:36:3e:51:df:b6:fd:28:73:19:f0:32:83:d2:
                    d5:d8:13:cc:13:48:2c:d9:de:ac:3d:c9:2f:1e:ee:
                    ac:d7:fd:26:4d:f0:3b:26:aa:cd:84:26:d0:cd:d8:
                    66:19:d3:20:7c:36:84:82:c5:52:c0:4e:10:d4:4e:
                    55:67:8a:e0:b3:cd:1d:66:f9:65:da:66:ea:ae:17:
                    24:cf:4a:5c:b7:1d:17:52:8f:6e:db:77:10:eb:fe:
                    bf:b3:ea:04:81:47:3a:ce:61:a2:70:73:40:8c:c0:
                    ab:1c:18:c1:84:18:c8:7c:a0:55:3f:6a:8e:3e:74:
                    00:be:b9:c9:6b:f0:dc:b8:71:d9:39:bc:b8:b5:2c:
                    a3:6b:be:bb:03:20:f3:ee:c0:d0:8f:f0:a5:a2:c8:
                    eb:57:b1:ce:bb:79:69:97:19:cc:de:43:c6:56:73:
                    4f:57:e4:56:30:ce:67:f8:d1:3d:dc:b5:7c:ee:97:
                    47:06:d1:dd:28:86:ae:dc:98:83:0d:54:72:c4:f2:
                    2f:a0:eb:12:90:9d:20:31:54:37:b1:71:63:16:ba:
                    4a:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                97:25:67:61:1B:75:CD:E4:61:F0:4C:BD:66:11:BD:71:49:38:38:B7
            X509v3 Authority Key Identifier:
                keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/F544A5EA9B8811EC826E9357C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.164.140.0/24

    Signature Algorithm: sha256WithRSAEncryption
         07:ed:f0:ea:bd:a0:a1:04:d9:6d:de:60:7c:57:d2:af:b2:39:
         83:48:45:c3:2e:5d:05:45:db:ff:39:35:45:34:1e:5d:6b:bf:
         4c:85:e7:b0:c1:81:00:81:01:fc:a8:2a:fa:05:a8:83:6b:73:
         68:eb:2e:a7:9f:44:35:e4:09:96:ab:c4:55:3a:99:c0:03:5d:
         d3:75:6b:a5:94:b3:d9:78:c3:3d:2b:a7:2e:ab:37:8f:e6:6d:
         66:9b:cd:14:1b:db:fc:7c:b7:14:07:23:c7:38:d0:bd:44:d0:
         af:f2:b7:c7:08:9c:f4:22:27:56:d8:dc:b9:07:5b:b1:56:cb:
         15:13:3c:30:0c:b6:38:71:11:b8:8c:db:69:a7:d3:71:07:db:
         80:ad:4f:73:0f:fd:2d:01:38:6a:95:bb:f7:db:4a:76:bd:8c:
         f8:38:0a:87:f5:27:a0:6b:c9:21:69:87:97:a5:45:88:d4:83:
         01:26:9e:20:c3:69:37:12:4f:c2:87:35:dd:92:ba:22:48:67:
         a1:8c:19:c6:ec:36:55:0d:b7:ef:76:38:37:e0:ee:bb:46:55:
         09:88:8f:06:27:8c:71:b3:c2:1d:f4:39:30:10:e1:f2:3f:ec:
         d0:0e:75:38:b8:57:d2:a9:fa:7e:22:fa:44:38:0b:ef:11:70:
         08:73:48:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 27 10:19:50 2024 by rpki-client on console-ams.rpki-client.org