Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/FE2F77DECDF211EB886D6D80C4F9AE02.roa
File:                     FE2F77DECDF211EB886D6D80C4F9AE02.roa (raw, json)
Hash identifier:          np5cXTKWNZ230H23qv5dMaHRQ+0bngn3nUwvzP8UGrg=
Subject key identifier:   60:0F:74:F7:F3:4F:06:3F:11:52:AF:38:6B:EA:E8:8E:C7:0F:B8:71
Certificate issuer:       /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Certificate serial:       6F39
Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/FE2F77DECDF211EB886D6D80C4F9AE02.roa
Signing time:             Wed 10 May 2023 16:37:47 +0000
ROA not before:           Wed 10 May 2023 16:37:47 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     141871
IP address blocks:        103.165.64.0/23 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
                          rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 03 May 2024 15:38:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 28473 (0x6f39)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
        Validity
            Not Before: May 10 16:37:47 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=645bc85b-bcb9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:e2:5f:1a:d4:d1:e6:51:d8:23:fc:ed:f1:d7:
                    1c:70:49:1b:ce:23:b2:19:27:2e:5f:e0:6b:57:ee:
                    a1:dc:ae:82:a7:f7:87:4f:84:f0:dd:9f:02:d1:74:
                    c2:dc:e9:ea:fd:ac:ea:63:1c:35:13:14:9f:ea:0a:
                    cc:0a:84:3d:b6:f2:d8:85:65:d2:5f:a0:7d:39:67:
                    07:bc:77:b9:77:63:12:db:6a:93:0e:64:fd:c3:3f:
                    d4:d3:24:6f:7c:db:fd:47:d7:31:aa:c0:d2:3b:f1:
                    2d:5d:02:00:81:f1:60:8d:8f:79:9e:46:92:ce:5d:
                    68:83:aa:56:0d:5c:4f:96:83:e4:ab:99:52:2b:d1:
                    7c:28:42:7e:c5:83:5f:68:9b:49:ea:93:6d:da:5d:
                    e1:39:1e:59:65:e4:bf:47:3b:04:10:e9:0a:3e:93:
                    a3:5f:f6:3e:68:47:52:64:a2:90:cc:1e:5b:af:8b:
                    10:68:df:bc:7e:e1:f3:ab:83:33:78:b2:2d:c6:e6:
                    02:54:4a:05:0f:d0:a3:dc:1f:aa:bf:bf:b2:a6:53:
                    38:b5:c9:40:b3:44:1e:01:12:8c:b4:31:a1:a7:51:
                    35:f3:02:b2:d7:f6:41:d6:06:e6:76:b4:79:2c:af:
                    6f:71:1e:1c:8a:f0:83:6e:06:d2:37:3e:a8:3e:eb:
                    76:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                60:0F:74:F7:F3:4F:06:3F:11:52:AF:38:6B:EA:E8:8E:C7:0F:B8:71
            X509v3 Authority Key Identifier:
                keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/FE2F77DECDF211EB886D6D80C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.165.64.0/23

    Signature Algorithm: sha256WithRSAEncryption
         0c:4e:45:bb:f9:33:39:8b:f5:02:d3:66:55:73:ae:fe:5c:ec:
         e0:3f:4c:17:3e:6a:85:c6:04:22:0a:8c:74:8b:a9:82:f4:e3:
         ae:52:ed:08:17:73:69:70:9c:8b:cc:57:94:04:2b:3f:c7:2f:
         80:d8:97:de:b9:a2:b0:2d:20:be:41:45:8d:a9:21:04:69:b3:
         c0:3d:46:d0:0d:1b:d2:bd:bf:49:27:87:b1:4a:e1:4c:c2:0c:
         67:31:21:94:b8:f1:e3:5b:0b:16:30:89:a5:a3:16:d2:e0:28:
         78:c7:fb:26:95:82:67:4f:9d:f1:b8:95:48:e7:bf:b1:7d:73:
         6c:60:1e:16:1f:a2:ad:7a:59:36:a3:c0:b2:27:39:cd:7e:ae:
         20:84:06:30:e8:96:ec:85:c3:b5:00:f0:76:a0:7c:76:1a:ac:
         c7:41:a1:1f:e5:f7:a4:78:83:72:e3:42:c2:84:fe:76:cc:2b:
         8a:a5:6c:53:0f:98:10:99:bf:61:8d:f8:43:ac:70:3b:a8:35:
         bf:59:e9:c5:06:18:b2:79:15:c0:7b:21:1c:b2:d3:5a:82:ad:
         a4:e1:b4:c5:80:e2:26:b5:85:dd:8c:24:4f:87:4b:49:75:fc:
         b8:42:89:8c:01:9d:6d:c0:92:01:9f:78:ce:4e:53:58:f4:23:
         67:bc:70:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 27 10:19:51 2024 by rpki-client on console-ams.rpki-client.org