Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/F84EB35E0E0611EBB93C4954C4F9AE02.roa
File:                     F84EB35E0E0611EBB93C4954C4F9AE02.roa (raw, json)
Hash identifier:          a5i9G4a6/xdvuJFQrYoP9Gqu1XxI/Xx2sa82MACH20Y=
Subject key identifier:   74:FB:D0:3E:A1:26:F7:93:DF:15:74:5C:FC:5C:9D:98:2B:D9:EF:0A
Certificate issuer:       /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Certificate serial:       6B93
Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/F84EB35E0E0611EBB93C4954C4F9AE02.roa
Signing time:             Wed 10 May 2023 16:20:20 +0000
ROA not before:           Wed 10 May 2023 16:20:20 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     135197
IP address blocks:        103.216.76.0/22 maxlen: 24
                          2001:df1:ee00::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
                          rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 03 May 2024 15:38:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 27539 (0x6b93)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
        Validity
            Not Before: May 10 16:20:20 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=645bc444-6283
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:4e:05:da:73:30:67:6d:e8:94:34:ed:c0:72:
                    10:bb:03:60:c6:cf:66:18:8e:76:67:90:30:ad:c2:
                    52:86:64:5c:38:8f:8b:74:63:96:6a:90:46:69:6e:
                    8f:fb:da:9e:ef:29:04:ab:97:d0:af:6b:d7:79:a0:
                    36:9b:a0:95:4d:1e:15:04:05:db:6c:ad:93:3b:f9:
                    9c:46:c1:73:06:c1:20:2a:36:60:74:76:3d:6d:c5:
                    d1:6f:6e:34:4a:26:7e:a8:7c:8d:ac:fb:4d:42:e1:
                    5d:ec:d8:a8:84:6a:8d:ff:c7:10:68:99:6e:db:f8:
                    cd:d8:66:ac:22:8d:64:5d:4d:dd:8c:5e:97:ec:93:
                    c8:28:6e:40:a3:12:90:3a:96:b3:fd:9a:45:97:bc:
                    a0:e5:7f:64:37:a9:0b:f5:1a:f2:e0:95:d7:bc:2a:
                    67:fe:ac:4a:a2:eb:1c:d2:18:f2:39:e7:de:a5:61:
                    01:ef:30:b1:82:11:cf:13:d9:e4:05:0a:59:00:8f:
                    f2:d3:aa:81:13:ca:55:4c:0b:b1:cf:94:8b:88:fe:
                    43:a4:05:ae:54:0f:cb:6e:6a:93:b4:15:83:a2:b8:
                    49:24:b7:f1:34:dd:8c:72:31:59:43:d3:db:f5:f8:
                    ce:cd:d6:f5:35:9f:fe:a5:a8:db:d5:41:66:8c:80:
                    4e:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                74:FB:D0:3E:A1:26:F7:93:DF:15:74:5C:FC:5C:9D:98:2B:D9:EF:0A
            X509v3 Authority Key Identifier:
                keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/F84EB35E0E0611EBB93C4954C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.216.76.0/22
                IPv6:
                  2001:df1:ee00::/48

    Signature Algorithm: sha256WithRSAEncryption
         31:cb:14:a5:bd:9e:8e:14:fa:a0:e8:c4:05:4d:7f:5b:c7:04:
         e8:d3:05:66:74:4d:33:a4:34:6f:c0:dd:c5:8b:52:fa:1e:43:
         2d:55:4a:f6:17:22:9a:a2:eb:cf:82:9f:ac:b5:48:23:55:dc:
         73:46:1b:b4:0e:78:ca:29:c9:1d:4f:03:98:18:12:75:02:ce:
         a8:a2:19:96:94:4a:21:db:74:7a:75:a1:eb:6d:7a:e0:b6:43:
         90:a6:60:bc:e8:06:b3:a0:c0:2b:5f:b9:fe:09:f8:ff:0f:57:
         05:46:53:92:ed:4c:60:12:62:85:31:c0:ab:3b:00:65:1d:54:
         d6:e1:25:1e:5c:77:de:d4:29:29:dc:8d:42:21:ef:ba:9a:b9:
         b3:a8:80:0f:98:07:75:56:04:45:c7:f4:11:22:15:4c:84:de:
         02:64:a6:7c:67:b5:3f:3e:70:d0:52:29:49:3f:82:c6:b5:48:
         e6:11:cc:a6:13:00:15:16:d9:dd:04:ba:c4:f8:0c:67:ab:a7:
         6e:4b:2b:f2:25:26:3d:d5:b9:53:0b:70:fa:8e:3d:73:01:9d:
         c7:d1:d1:51:da:3b:fb:17:d0:56:54:1a:1f:89:78:f8:0a:cf:
         0b:d0:f8:5b:a5:4c:32:2f:21:20:28:d7:12:dc:2b:6a:d5:5f:
         d8:df:40:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 27 10:19:51 2024 by rpki-client on console-ams.rpki-client.org