Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91580D2/EBC1AC2C184F11EDADBC3C65C4F9AE02/4D608CC0800211EF81167A23C4F9AE02.roa
File:                     4D608CC0800211EF81167A23C4F9AE02.roa (raw, json)
Hash identifier:          ZQQKFp5iiDEIGLxVFz3G6lECRRriefFnadRp8yKcQoY=
Subject key identifier:   AB:41:EE:3C:CF:2C:BD:D4:E2:1F:A6:F3:FF:CF:4C:49:7F:0B:39:D3
Certificate issuer:       /CN=A91580D2/serialNumber=CA90D4D2125F0336B5398EE09977296F2E4092B4
Certificate serial:       0236
Authority key identifier: CA:90:D4:D2:12:5F:03:36:B5:39:8E:E0:99:77:29:6F:2E:40:92:B4
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ypDU0hJfAza1OY7gmXcpby5AkrQ.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91580D2/EBC1AC2C184F11EDADBC3C65C4F9AE02/4D608CC0800211EF81167A23C4F9AE02.roa
Signing time:             Fri 29 Nov 2024 01:54:39 +0000
ROA not before:           Fri 29 Nov 2024 01:54:38 +0000
ROA not after:            Sat 31 Jan 2026 00:00:00 +0000
asID:                     214766
IP address blocks:        103.102.126.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91580D2/EBC1AC2C184F11EDADBC3C65C4F9AE02/ypDU0hJfAza1OY7gmXcpby5AkrQ.crl
                          rsync://rpki.apnic.net/member_repository/A91580D2/EBC1AC2C184F11EDADBC3C65C4F9AE02/ypDU0hJfAza1OY7gmXcpby5AkrQ.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ypDU0hJfAza1OY7gmXcpby5AkrQ.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 05 Apr 2025 02:08:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 566 (0x236)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91580D2
        Validity
            Not Before: Nov 29 01:54:38 2024 GMT
            Not After : Jan 31 00:00:00 2026 GMT
        Subject: CN=67491ede-fc47
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:36:f0:3e:41:2c:6d:15:89:8a:13:10:45:2c:
                    2a:b6:8d:a1:6f:27:dc:9b:19:89:3c:31:b1:d5:95:
                    fa:07:31:c4:8f:c9:fc:ee:93:4b:b8:ab:fc:a8:35:
                    08:fa:df:67:c6:fa:92:44:fa:34:88:02:6a:ee:aa:
                    98:2e:b8:e6:f7:3b:14:9b:08:0a:16:60:84:03:b2:
                    8a:a7:cb:f3:a3:9b:ab:aa:82:b5:0b:09:48:56:e4:
                    43:8b:85:4d:f8:c4:70:9d:bf:82:fa:af:cd:fd:62:
                    64:2c:37:e1:76:60:1b:30:5f:9b:2e:7c:6a:1d:ca:
                    2c:d1:ab:fe:db:a4:f8:3d:65:3f:eb:cf:43:f5:bb:
                    b4:9d:70:35:a3:c4:4f:f8:f9:5d:20:6f:28:f5:71:
                    5f:ce:fd:d7:0d:86:86:6b:c5:17:5e:03:2d:5f:6b:
                    ed:53:7d:d3:a7:c1:19:1f:62:a2:2e:68:64:e5:19:
                    fc:ee:43:11:ee:f6:06:26:8b:dd:ab:c8:38:57:f2:
                    d7:7b:3d:2e:6e:91:98:37:e6:e6:76:30:21:85:6d:
                    26:f3:b9:2b:34:45:28:54:12:32:fa:bc:a0:12:3d:
                    6d:18:71:8f:97:fe:6c:f2:1a:1f:19:44:1f:9d:9b:
                    fd:f5:1a:e5:b5:88:14:8c:92:72:aa:33:8b:f7:fc:
                    ee:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AB:41:EE:3C:CF:2C:BD:D4:E2:1F:A6:F3:FF:CF:4C:49:7F:0B:39:D3
            X509v3 Authority Key Identifier:
                keyid:CA:90:D4:D2:12:5F:03:36:B5:39:8E:E0:99:77:29:6F:2E:40:92:B4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91580D2/EBC1AC2C184F11EDADBC3C65C4F9AE02/ypDU0hJfAza1OY7gmXcpby5AkrQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ypDU0hJfAza1OY7gmXcpby5AkrQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91580D2/EBC1AC2C184F11EDADBC3C65C4F9AE02/4D608CC0800211EF81167A23C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.102.126.0/24

    Signature Algorithm: sha256WithRSAEncryption
         68:1f:ec:a3:1e:7a:6e:ad:a2:e0:95:66:36:21:88:40:d8:07:
         f9:b9:19:f3:e4:3c:11:d0:4a:0a:fe:46:8d:81:37:f7:36:69:
         4c:19:40:b0:6c:75:0c:2e:6b:a2:b9:20:a1:92:5d:71:81:3c:
         d0:b3:1d:a7:ff:48:2b:21:7d:a7:b4:de:8d:55:08:66:e5:5e:
         fc:ad:4c:96:30:5f:d8:10:de:b2:a5:1e:51:52:4c:8e:1f:e6:
         d0:dd:b0:e7:58:2f:e6:c6:4f:44:78:bb:fe:da:21:6c:30:ca:
         0f:5c:86:24:b0:7c:31:27:19:ee:16:66:33:e7:89:e6:94:ec:
         4a:40:09:ca:51:29:0e:13:a4:0a:8b:4a:26:d4:3f:db:52:95:
         ed:b6:c0:ba:f8:f4:71:3c:36:e3:d2:7e:da:64:6c:cc:b6:c4:
         15:34:f3:4c:91:ab:bd:c8:1e:2a:10:9b:3e:e9:32:95:b8:66:
         b0:21:76:3e:a2:d5:60:15:62:77:25:92:5a:98:29:4d:5c:30:
         1e:95:84:f8:57:84:4b:0f:4a:45:d2:79:cf:bb:50:f2:c8:d7:
         2d:9b:6e:4c:cd:c8:db:23:64:d3:e3:87:a8:95:92:75:e6:a9:
         6a:12:27:74:66:0d:d2:03:5e:8f:6b:e0:04:dd:f4:dd:f1:da:
         54:f9:4d:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 01:58:06 2025 by rpki-client