Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A911D1A9/8F916948328811EEB29D3042C4F9AE02/26F0D1C6328D11EEA04CD046C4F9AE02.roa
File:                     26F0D1C6328D11EEA04CD046C4F9AE02.roa (raw, json)
Hash identifier:          abfqQV0s4z8RiwN1WmYH7XQJ0kzx0TA1S9FP7en+qbk=
Subject key identifier:   74:01:F7:C3:77:6B:EA:AD:0D:F6:5D:CF:91:A7:A9:01:FF:11:F0:03
Certificate issuer:       /CN=A911D1A9/serialNumber=742174F32E6CC6E8D1F965BFA1D40A10D6E3E7C9
Certificate serial:       03
Authority key identifier: 74:21:74:F3:2E:6C:C6:E8:D1:F9:65:BF:A1:D4:0A:10:D6:E3:E7:C9
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dCF08y5sxujR-WW_odQKENbj58k.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A911D1A9/8F916948328811EEB29D3042C4F9AE02/26F0D1C6328D11EEA04CD046C4F9AE02.roa
Signing time:             Fri 04 Aug 2023 06:07:12 +0000
ROA not before:           Fri 04 Aug 2023 06:07:12 +0000
ROA not after:            Sun 01 Dec 2024 00:00:00 +0000
asID:                     57406
IP address blocks:        103.248.48.0/23 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A911D1A9/8F916948328811EEB29D3042C4F9AE02/dCF08y5sxujR-WW_odQKENbj58k.crl
                          rsync://rpki.apnic.net/member_repository/A911D1A9/8F916948328811EEB29D3042C4F9AE02/dCF08y5sxujR-WW_odQKENbj58k.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dCF08y5sxujR-WW_odQKENbj58k.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 14 Jun 2024 07:17:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3 (0x3)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A911D1A9/serialNumber=742174F32E6CC6E8D1F965BFA1D40A10D6E3E7C9
        Validity
            Not Before: Aug  4 06:07:12 2023 GMT
            Not After : Dec  1 00:00:00 2024 GMT
        Subject: CN=64cc9590-964b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:17:f4:07:f1:68:6e:29:9e:3f:07:99:d4:ba:
                    39:60:a7:1c:97:ad:1a:47:8d:e6:5e:10:40:93:9e:
                    4d:90:9f:9e:61:0b:2d:43:61:7e:84:d9:09:4b:90:
                    f4:34:cc:08:72:32:d7:04:5f:bd:3d:f5:4b:00:b8:
                    d4:4b:ed:78:dd:11:6a:5b:f5:e6:78:b1:4d:3b:48:
                    1c:de:3d:79:a6:4e:52:ad:e7:d0:d3:03:03:0f:f1:
                    84:eb:0b:b1:42:86:db:7b:18:87:71:55:8b:c7:66:
                    55:77:e7:cc:0e:d1:3b:39:46:2f:83:f3:df:6c:4e:
                    c3:9e:b7:ee:98:bd:2b:cb:1f:2a:a5:03:6a:6f:72:
                    94:7a:7b:02:47:84:58:dd:f8:1d:2a:4e:d8:92:b6:
                    03:56:a4:43:00:eb:21:39:f5:7f:58:9c:cf:a2:f6:
                    fc:35:ba:92:12:4f:cb:d2:6f:9a:f5:87:46:bc:7a:
                    d3:40:b8:6a:f0:98:bf:b0:4f:f8:a1:bd:bd:9e:0b:
                    7b:d0:61:bc:3f:74:93:49:4e:11:33:cd:04:40:38:
                    11:26:f3:0e:8a:77:fe:19:0e:b2:e3:5e:f4:bd:0b:
                    88:a2:9f:36:c3:fa:a8:e3:66:01:f7:fe:0a:58:33:
                    d8:b9:71:62:30:2a:ce:72:7b:dd:5f:f2:17:cb:02:
                    62:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                74:01:F7:C3:77:6B:EA:AD:0D:F6:5D:CF:91:A7:A9:01:FF:11:F0:03
            X509v3 Authority Key Identifier:
                keyid:74:21:74:F3:2E:6C:C6:E8:D1:F9:65:BF:A1:D4:0A:10:D6:E3:E7:C9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A911D1A9/8F916948328811EEB29D3042C4F9AE02/dCF08y5sxujR-WW_odQKENbj58k.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dCF08y5sxujR-WW_odQKENbj58k.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911D1A9/8F916948328811EEB29D3042C4F9AE02/26F0D1C6328D11EEA04CD046C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.248.48.0/23

    Signature Algorithm: sha256WithRSAEncryption
         c3:d9:16:cc:51:18:e0:1a:58:5b:78:2b:55:82:ea:8c:92:f5:
         b0:a7:ad:a3:ec:97:bc:79:9f:d7:18:aa:10:17:ca:6f:bd:51:
         5d:2f:40:f6:06:fe:b8:c1:b7:8c:32:3e:8d:f5:03:cb:df:43:
         06:e3:7c:f5:fa:78:44:21:58:f4:99:ad:63:16:39:43:36:aa:
         b4:ba:2c:5a:de:45:8f:16:dc:ae:9d:ab:ce:72:6f:a7:cd:38:
         ef:e7:f3:3c:94:57:1b:69:bd:a0:8c:b5:b1:f8:08:92:fc:da:
         8a:d5:94:ae:58:39:e9:a6:3a:a6:c7:4f:96:69:27:4b:1c:d6:
         11:27:8e:a8:df:cc:09:30:7c:58:68:18:00:3e:39:4e:86:1b:
         e9:b8:5e:94:e3:b6:ef:f4:20:d1:06:fc:87:36:54:76:91:0c:
         af:bf:98:df:40:a6:b1:82:96:06:18:1b:9d:c6:21:9e:e2:eb:
         36:52:5a:ce:87:c9:c9:ea:ad:61:f6:c3:ea:75:2b:b9:7e:7d:
         95:9b:d0:27:1f:ad:bd:df:7c:1d:d4:6a:2b:31:07:49:6e:01:
         ad:28:23:34:b2:0a:33:9b:2e:bf:94:99:cb:2f:f3:3d:30:30:
         5b:4b:a4:e0:66:72:da:cc:4c:a0:ab:00:a7:3b:e9:aa:c0:9d:
         da:1e:21:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 7 08:56:37 2024 by rpki-client on console-fra.rpki-client.org