Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9116B5E/F58C5694A6E011EBAC1DEB57C4F9AE02/26C5F4148FC111EF84928A68C4F9AE02.roa
File:                     26C5F4148FC111EF84928A68C4F9AE02.roa (raw, json)
Hash identifier:          di22BJ89CyNvXX8KWOJjF74io2ApmuDcmIs52yldMJE=
Subject key identifier:   AB:90:77:4F:58:F3:CE:6E:4C:A3:5B:EB:37:20:78:F3:39:20:9B:45
Certificate issuer:       /CN=A9116B5E/serialNumber=FA356029FC772A5B43269C316AD685C4BB5A656D
Certificate serial:       05AA
Authority key identifier: FA:35:60:29:FC:77:2A:5B:43:26:9C:31:6A:D6:85:C4:BB:5A:65:6D
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-jVgKfx3KltDJpwxataFxLtaZW0.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9116B5E/F58C5694A6E011EBAC1DEB57C4F9AE02/26C5F4148FC111EF84928A68C4F9AE02.roa
Signing time:             Mon 21 Oct 2024 15:28:41 +0000
ROA not before:           Mon 21 Oct 2024 15:28:41 +0000
ROA not after:            Fri 31 Jan 2025 00:00:00 +0000
asID:                     141434
IP address blocks:        103.159.4.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9116B5E/F58C5694A6E011EBAC1DEB57C4F9AE02/-jVgKfx3KltDJpwxataFxLtaZW0.crl
                          rsync://rpki.apnic.net/member_repository/A9116B5E/F58C5694A6E011EBAC1DEB57C4F9AE02/-jVgKfx3KltDJpwxataFxLtaZW0.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-jVgKfx3KltDJpwxataFxLtaZW0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 29 Nov 2024 20:43:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1450 (0x5aa)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9116B5E/serialNumber=FA356029FC772A5B43269C316AD685C4BB5A656D
        Validity
            Not Before: Oct 21 15:28:41 2024 GMT
            Not After : Jan 31 00:00:00 2025 GMT
        Subject: CN=67167329-4181
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:8b:03:36:a4:ca:23:9d:8c:80:7a:37:6e:92:
                    f8:0a:1b:3e:f5:31:6e:d7:5d:6c:d9:63:cf:47:75:
                    d1:b4:4b:34:6f:94:a5:e1:f8:4b:44:d1:f0:8e:95:
                    a3:1c:4a:20:9a:f8:bf:c2:dc:ed:e0:1a:01:e3:04:
                    ec:5b:61:df:f1:e1:86:49:14:cc:02:a1:4a:b3:67:
                    d7:90:ec:c8:6c:3f:54:bd:b2:2e:20:91:15:4b:e7:
                    77:ac:5f:50:c0:a6:5f:52:9f:55:ee:cf:d9:b7:3c:
                    0a:1e:c6:e0:9b:73:09:ef:bd:38:64:53:54:ed:2e:
                    f3:10:87:67:61:a8:d5:68:5d:51:77:6c:49:43:3f:
                    d4:4d:93:3d:a5:f1:05:a8:bc:27:93:89:c5:a6:a0:
                    b9:b3:a6:b0:54:25:e6:2d:46:08:60:4b:ac:15:4e:
                    a6:d7:3c:33:92:d0:84:73:14:1e:e6:2f:6b:84:aa:
                    df:1b:43:d3:18:c1:39:69:fd:d3:4d:7e:77:d3:1a:
                    77:9c:a0:bc:72:1e:cd:30:d6:43:c9:40:0a:20:cc:
                    7a:b2:d5:34:d9:8b:97:c5:80:29:3a:43:14:52:66:
                    6c:87:7f:48:64:87:92:8b:c0:d0:c0:00:ce:e1:c9:
                    4b:4e:30:65:a9:1b:15:cd:5c:14:93:64:4c:36:7c:
                    8a:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AB:90:77:4F:58:F3:CE:6E:4C:A3:5B:EB:37:20:78:F3:39:20:9B:45
            X509v3 Authority Key Identifier:
                keyid:FA:35:60:29:FC:77:2A:5B:43:26:9C:31:6A:D6:85:C4:BB:5A:65:6D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9116B5E/F58C5694A6E011EBAC1DEB57C4F9AE02/-jVgKfx3KltDJpwxataFxLtaZW0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-jVgKfx3KltDJpwxataFxLtaZW0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9116B5E/F58C5694A6E011EBAC1DEB57C4F9AE02/26C5F4148FC111EF84928A68C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.159.4.0/24

    Signature Algorithm: sha256WithRSAEncryption
         69:49:7f:9b:79:bf:a3:ef:50:06:59:9c:65:a3:82:f3:04:92:
         71:5f:45:01:c9:f9:b5:8e:cb:76:0b:28:8a:c9:b2:0a:0b:db:
         d5:fd:74:e3:1f:cc:b3:25:58:00:4a:90:1d:cf:84:61:58:95:
         d2:03:af:72:2f:ed:6c:1c:c9:55:b0:2b:cb:7a:50:0c:15:d6:
         e6:db:e4:f2:ed:ad:88:98:86:6b:f7:4e:15:9e:4c:a0:c2:e3:
         32:b9:03:d0:6a:d8:b2:96:13:e8:8b:ed:0b:72:38:94:53:e4:
         99:66:c2:93:ce:af:c2:b4:d4:9f:fd:12:43:81:5a:22:62:c0:
         ff:1c:13:7e:9b:46:02:eb:b8:da:b8:e4:f1:ea:0b:cc:23:19:
         5d:68:05:fa:e2:92:4e:3c:06:1b:44:e9:41:de:79:6a:5d:1c:
         96:d9:0c:0b:df:f4:2d:29:02:66:40:cd:f3:48:15:83:ab:aa:
         3c:4e:30:07:7a:1c:49:4f:d4:69:30:25:1f:5e:cb:89:af:b6:
         22:b4:cc:3a:c3:a4:e4:ae:86:29:61:73:a2:de:c9:61:47:b7:
         c3:5a:bc:d9:d4:fc:73:bf:cb:ad:d1:75:6d:70:b6:d6:c0:69:
         35:df:e2:52:5e:45:4b:cf:73:23:65:dc:28:27:22:fc:87:b2:
         9f:2a:34:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 23:39:22 2024 by rpki-client on console-fra.rpki-client.org