Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A912A646/2F639EB0F58511EC87F6FE13C4F9AE02/E26E62FC008211EE9714031BC4F9AE02.roa
File:                     E26E62FC008211EE9714031BC4F9AE02.roa (raw, json)
Hash identifier:          +KyX9vvCwN+wQz/+dPxZBeEKewfgwPoob9Rj+QTsatE=
Subject key identifier:   60:AA:76:D1:A4:BE:E6:EA:15:11:58:3F:C3:34:7F:ED:AD:C1:0A:47
Certificate issuer:       /CN=A912A646/serialNumber=3FB3582470ED03F19435E69B2C19B4074770F097
Certificate serial:       022A
Authority key identifier: 3F:B3:58:24:70:ED:03:F1:94:35:E6:9B:2C:19:B4:07:47:70:F0:97
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/P7NYJHDtA_GUNeabLBm0B0dw8Jc.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A912A646/2F639EB0F58511EC87F6FE13C4F9AE02/E26E62FC008211EE9714031BC4F9AE02.roa
Signing time:             Wed 17 Jul 2024 03:25:04 +0000
ROA not before:           Wed 17 Jul 2024 03:25:04 +0000
ROA not after:            Tue 30 Sep 2025 00:00:00 +0000
asID:                     150750
IP address blocks:        103.190.22.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A912A646/2F639EB0F58511EC87F6FE13C4F9AE02/P7NYJHDtA_GUNeabLBm0B0dw8Jc.crl
                          rsync://rpki.apnic.net/member_repository/A912A646/2F639EB0F58511EC87F6FE13C4F9AE02/P7NYJHDtA_GUNeabLBm0B0dw8Jc.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/P7NYJHDtA_GUNeabLBm0B0dw8Jc.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 30 Nov 2024 01:16:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 554 (0x22a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A912A646/serialNumber=3FB3582470ED03F19435E69B2C19B4074770F097
        Validity
            Not Before: Jul 17 03:25:04 2024 GMT
            Not After : Sep 30 00:00:00 2025 GMT
        Subject: CN=66973990-2275
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:40:f6:84:fc:bd:79:d6:61:da:d6:26:6e:25:
                    b9:bb:b2:fe:21:91:b8:a5:4d:42:41:0f:85:d1:f4:
                    5d:c7:3d:6c:a4:fa:5e:50:e9:ff:38:fd:51:13:33:
                    80:4e:89:e0:c9:2a:05:58:c0:28:1f:0a:b9:f3:20:
                    b0:7c:e9:b0:e1:4c:37:c4:47:d6:5e:c6:4a:2b:87:
                    7c:21:af:36:02:37:dc:bc:32:22:0b:fc:0f:36:cb:
                    09:cf:e6:fe:03:ad:98:af:1f:d4:c2:44:52:2b:89:
                    b3:60:20:08:27:85:14:45:8c:a2:12:10:0b:8b:83:
                    bd:8c:66:39:73:99:fb:05:d5:74:38:73:b7:d5:d3:
                    f0:10:89:3b:b5:2e:7b:63:bb:00:82:0a:a9:3d:71:
                    36:dd:fb:96:86:25:7c:69:4a:cb:e4:47:63:64:a6:
                    e8:e9:80:45:8d:0a:22:f3:b5:8a:3e:60:45:2e:02:
                    c0:6a:df:40:93:98:27:0f:dc:6b:b3:a5:fa:83:44:
                    0a:07:80:89:6a:9c:86:35:59:64:e7:9d:ce:14:5f:
                    fc:9d:e9:f6:25:91:5c:bc:1e:80:47:29:27:44:20:
                    68:d6:df:b5:0c:80:fb:ae:34:c4:6a:18:68:e4:98:
                    d8:8b:21:9b:a1:c4:8e:d8:f8:77:f4:3f:6b:6f:cb:
                    2c:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                60:AA:76:D1:A4:BE:E6:EA:15:11:58:3F:C3:34:7F:ED:AD:C1:0A:47
            X509v3 Authority Key Identifier:
                keyid:3F:B3:58:24:70:ED:03:F1:94:35:E6:9B:2C:19:B4:07:47:70:F0:97

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A912A646/2F639EB0F58511EC87F6FE13C4F9AE02/P7NYJHDtA_GUNeabLBm0B0dw8Jc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/P7NYJHDtA_GUNeabLBm0B0dw8Jc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912A646/2F639EB0F58511EC87F6FE13C4F9AE02/E26E62FC008211EE9714031BC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.190.22.0/24

    Signature Algorithm: sha256WithRSAEncryption
         d6:96:ab:fc:a0:b2:59:c6:a1:c8:c4:94:e6:f9:07:a0:63:2e:
         c3:df:04:f6:5d:51:8a:3d:66:5b:8b:ab:e7:c0:b6:5b:49:a1:
         6f:db:d8:2f:35:fc:bd:67:50:62:32:0c:f7:84:c1:53:41:91:
         2c:69:74:5b:49:23:1b:f3:0c:a7:5e:ab:d4:82:4b:23:d6:d9:
         2d:69:d7:63:97:1d:fc:6d:bf:0d:b5:90:80:be:67:7e:86:a0:
         7d:f4:1a:5e:f1:e9:de:d6:be:11:92:cd:1c:21:3c:e0:1b:c8:
         a1:54:12:4d:63:f4:7d:6a:d7:ff:91:dd:13:c4:dd:a4:77:a7:
         25:f7:f5:5b:72:cc:3b:2e:56:75:88:2e:d8:4d:dd:c5:c8:21:
         ed:af:b5:16:5e:9b:47:f2:d6:5e:07:7b:e9:c5:2a:b7:85:84:
         fe:07:fa:95:5d:c2:3c:21:8d:a2:75:b5:02:79:4f:8f:94:08:
         ab:c6:1d:20:2b:76:2b:07:4e:5e:f1:ae:a7:5a:28:2f:8a:1d:
         27:e1:1c:26:bb:bf:be:cb:07:2a:57:ef:05:96:7f:77:d7:09:
         d5:e5:d3:0c:16:4e:34:46:b4:aa:00:4e:fc:d9:af:3e:22:68:
         be:36:b7:a0:54:93:71:86:c5:d0:b8:ac:f5:06:69:9a:54:7e:
         f7:12:b1:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 03:58:36 2024 by rpki-client on console-ams.rpki-client.org