Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/FDAC7ECC2E4911EB80FABD0DC4F9AE02.roa
File:                     FDAC7ECC2E4911EB80FABD0DC4F9AE02.roa (raw, json)
Hash identifier:          BtLJJQIYqYwYowB7WAxH0CRWRQcPoDKZb/Ei3mP2pKw=
Subject key identifier:   DB:07:64:32:23:32:28:A0:B8:12:0E:B6:DC:8D:4A:81:8E:AE:CD:AF
Certificate issuer:       /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Certificate serial:       6B5F
Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/FDAC7ECC2E4911EB80FABD0DC4F9AE02.roa
Signing time:             Wed 10 May 2023 16:19:21 +0000
ROA not before:           Wed 10 May 2023 16:19:21 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     134894
IP address blocks:        103.139.195.0/24 maxlen: 27

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
                          rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 02 May 2024 11:49:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 27487 (0x6b5f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
        Validity
            Not Before: May 10 16:19:21 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=645bc409-b47a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e3:42:93:19:98:1c:55:e2:dd:5d:90:50:dd:dd:
                    5f:8a:8a:fa:0a:72:4a:b7:86:64:80:99:f1:f6:48:
                    09:e4:a6:6e:db:5a:e5:8e:2e:27:f7:fa:94:67:8c:
                    83:5b:6a:d6:f3:94:c4:59:b4:a7:a3:bf:de:a0:9a:
                    27:bd:ac:a1:d4:9c:fb:29:ee:cd:54:d5:d5:cc:71:
                    f8:64:2f:d0:c6:47:e8:c4:bb:bd:e7:d6:cc:d2:b6:
                    7e:fa:43:ba:75:54:23:6f:27:14:04:14:b4:35:6c:
                    09:0d:49:11:5e:3c:e8:34:5b:af:f5:e0:bc:72:93:
                    a5:1c:f2:8f:a1:c8:bd:69:bc:b6:40:e9:47:ff:d1:
                    7a:d3:b1:77:71:ca:d4:92:46:82:52:5c:82:a5:a0:
                    fc:b5:62:e0:15:e4:ca:98:1a:b5:62:b3:d6:a1:d7:
                    6d:a1:b0:d7:33:25:60:4f:34:6a:58:89:6d:d9:a8:
                    5d:d3:c2:49:d2:83:1d:01:c4:6a:9b:76:84:9e:da:
                    19:97:6f:99:1f:db:2c:ce:33:48:8b:8b:b6:0c:84:
                    dc:3e:09:30:d6:51:3c:ae:ee:6a:22:d0:ce:01:79:
                    29:2d:92:9a:b7:21:88:5a:03:46:b0:04:22:a0:9a:
                    58:e8:fe:80:cb:fd:15:e5:04:5b:29:01:38:e9:ed:
                    34:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DB:07:64:32:23:32:28:A0:B8:12:0E:B6:DC:8D:4A:81:8E:AE:CD:AF
            X509v3 Authority Key Identifier:
                keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/FDAC7ECC2E4911EB80FABD0DC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.139.195.0/24

    Signature Algorithm: sha256WithRSAEncryption
         27:de:cf:05:b8:cf:4c:68:dc:78:62:e0:16:b9:8a:f3:45:09:
         e0:d2:cb:5c:dc:8c:5e:90:88:c0:02:66:44:cd:af:ac:d0:30:
         db:f4:e6:3b:fe:47:07:03:d7:11:70:4f:08:de:b7:46:50:44:
         c7:67:20:7c:ee:d8:18:e8:0a:2c:71:c8:12:dc:6f:73:cd:bf:
         f0:84:c1:00:93:33:d1:49:15:e8:7e:0a:7c:3b:cf:c8:9a:5a:
         23:81:23:e3:e2:e2:1a:c9:a1:8c:a3:ac:da:b6:a6:6e:a9:7e:
         27:cb:c2:71:45:48:2d:ea:8f:fc:03:38:1c:a3:13:e2:0a:05:
         3a:ea:24:58:82:e5:4f:ba:d4:d6:83:44:1b:0d:e0:a5:54:54:
         31:aa:4b:f8:92:31:32:de:90:3c:ac:c7:64:0e:34:5f:d1:b3:
         40:f2:ff:fa:24:fa:b1:a7:9b:81:1f:05:06:48:04:fb:13:e3:
         e7:0c:c4:1a:1d:85:c0:2a:67:7e:a3:fe:ab:d1:ef:95:05:56:
         eb:26:7e:a7:bf:47:63:88:3e:fd:ca:35:d6:ec:eb:af:8f:11:
         d2:94:42:f4:cb:87:04:25:1f:83:14:92:b2:9b:d6:a1:5a:83:
         65:32:ea:ca:70:5e:db:78:dc:2c:d8:8c:a7:12:1c:6b:14:a2:
         bc:84:c0:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 25 22:34:07 2024 by rpki-client on console-fra.rpki-client.org