Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A912DC44/29B6BEDAE4FC11E9B13B4860C4F9AE02/36046172FD7211EEA5E7465CC4F9AE02.roa
File:                     36046172FD7211EEA5E7465CC4F9AE02.roa (raw, json)
Hash identifier:          qV9LIbjy2xv3z8fy3D2rRFIHziDC/B8IOhZ3j9oyiYA=
Subject key identifier:   FD:C1:67:6A:F0:E2:DE:63:99:FA:CE:17:50:CD:FF:AA:69:2C:77:2B
Certificate issuer:       /CN=A912DC44/serialNumber=A6421FE13D8C93A7BDDFF8B53719B5808748D0DF
Certificate serial:       0C6A
Authority key identifier: A6:42:1F:E1:3D:8C:93:A7:BD:DF:F8:B5:37:19:B5:80:87:48:D0:DF
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pkIf4T2Mk6e93_i1Nxm1gIdI0N8.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A912DC44/29B6BEDAE4FC11E9B13B4860C4F9AE02/36046172FD7211EEA5E7465CC4F9AE02.roa
Signing time:             Thu 18 Apr 2024 10:55:47 +0000
ROA not before:           Thu 18 Apr 2024 10:55:47 +0000
ROA not after:            Sun 02 Mar 2025 00:00:00 +0000
asID:                     150748
IP address blocks:        103.89.26.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A912DC44/29B6BEDAE4FC11E9B13B4860C4F9AE02/pkIf4T2Mk6e93_i1Nxm1gIdI0N8.crl
                          rsync://rpki.apnic.net/member_repository/A912DC44/29B6BEDAE4FC11E9B13B4860C4F9AE02/pkIf4T2Mk6e93_i1Nxm1gIdI0N8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pkIf4T2Mk6e93_i1Nxm1gIdI0N8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 29 Nov 2024 18:07:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3178 (0xc6a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A912DC44/serialNumber=A6421FE13D8C93A7BDDFF8B53719B5808748D0DF
        Validity
            Not Before: Apr 18 10:55:47 2024 GMT
            Not After : Mar  2 00:00:00 2025 GMT
        Subject: CN=6620fc33-5d70
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:55:79:26:bc:79:7b:f9:0d:30:4d:bf:b5:c0:
                    2e:5b:24:e8:c7:6b:dd:a5:e5:6b:55:11:77:34:35:
                    b4:67:0a:6f:28:f3:cd:0c:da:56:e8:5f:36:e2:f7:
                    51:eb:c1:bf:73:6c:7a:15:73:77:a2:0e:88:a2:3e:
                    b0:bf:71:1d:b6:92:b0:e5:6e:8e:9d:bc:65:ab:ab:
                    61:59:1a:47:d3:82:a2:d0:61:99:5e:8b:62:77:1f:
                    b6:77:d8:48:7b:88:ba:02:75:9b:1b:11:98:f4:18:
                    f9:62:7e:66:ce:73:51:c4:29:4d:37:26:28:fa:76:
                    1e:7b:15:98:86:6f:aa:22:07:4d:d0:38:47:ef:08:
                    ca:e3:bf:42:cc:ae:2d:fe:9f:8a:c4:f9:5f:f6:86:
                    0f:a6:98:48:fa:dd:86:b4:55:20:d0:56:62:e8:b0:
                    68:02:21:6f:2f:68:45:fa:05:ee:bb:0a:8d:c4:08:
                    1f:a0:a4:c5:c0:69:c7:66:59:ad:19:e1:8c:b6:d5:
                    95:ce:42:d6:7c:ad:4f:4e:f6:ec:5c:2f:c9:f5:67:
                    3c:21:74:d3:6e:d2:ce:18:3a:62:5e:3a:c5:27:30:
                    4b:2a:50:53:ed:bd:c1:ab:4e:95:cb:ce:a7:3a:de:
                    6e:ec:e2:06:b7:b9:2e:54:36:fd:a3:53:d6:24:85:
                    c9:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FD:C1:67:6A:F0:E2:DE:63:99:FA:CE:17:50:CD:FF:AA:69:2C:77:2B
            X509v3 Authority Key Identifier:
                keyid:A6:42:1F:E1:3D:8C:93:A7:BD:DF:F8:B5:37:19:B5:80:87:48:D0:DF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A912DC44/29B6BEDAE4FC11E9B13B4860C4F9AE02/pkIf4T2Mk6e93_i1Nxm1gIdI0N8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pkIf4T2Mk6e93_i1Nxm1gIdI0N8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912DC44/29B6BEDAE4FC11E9B13B4860C4F9AE02/36046172FD7211EEA5E7465CC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.89.26.0/24

    Signature Algorithm: sha256WithRSAEncryption
         69:da:4f:fa:03:78:5f:13:bf:a1:9a:19:02:ec:2f:77:40:29:
         36:48:7b:f3:65:54:18:aa:7d:86:c9:d9:e0:60:7b:ae:ee:b3:
         ed:e6:3e:7c:19:1c:74:11:67:59:41:b0:ef:8b:e9:33:b0:02:
         4e:6a:82:04:2e:6c:11:8a:10:60:e0:e5:ba:68:89:2f:99:75:
         b1:09:f8:4b:0a:19:5f:03:38:0c:fc:e8:38:a2:7a:a6:89:63:
         66:b2:c6:84:3f:6b:97:9d:de:d9:55:cd:ed:f8:49:90:c2:6c:
         85:9e:e6:7f:1b:ee:09:5d:a9:a6:0d:41:0a:6a:fa:a5:01:5b:
         92:6f:8b:62:97:be:26:19:48:81:d9:74:b5:73:cc:32:87:d0:
         30:42:29:77:86:df:81:77:01:26:4d:fc:81:12:20:99:4a:20:
         a5:5b:08:4c:8f:f6:a7:c0:f9:a2:11:75:85:cb:94:8a:48:ae:
         cd:cd:9e:ad:70:98:7f:b1:4f:bb:23:6b:1c:57:5b:4b:53:3b:
         bc:d8:ce:3c:aa:be:30:8a:6c:54:4a:1d:e1:92:2f:e0:db:05:
         3c:67:3e:81:3a:79:be:e6:7c:a8:31:a4:01:e1:5b:04:5e:54:
         92:17:8c:52:0f:86:d6:21:f6:20:1b:1e:a5:36:95:12:3e:52:
         87:2b:86:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 19:49:58 2024 by rpki-client on console-ams.rpki-client.org