Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9131612/E3B84C8CBE8611E99A6C011FC4F9AE02/26F281DEDDF811EAA553705EC4F9AE02.roa
File:                     26F281DEDDF811EAA553705EC4F9AE02.roa (raw, json)
Hash identifier:          yfx8lsCL6G/ov0fWwE1WTE6uXL656onMX4rdjMifJrY=
Subject key identifier:   4C:C1:5D:2E:38:F2:16:48:63:AF:A4:72:E8:A5:E5:18:E1:55:5A:D0
Certificate issuer:       /CN=A9131612/serialNumber=E4E101EEF443150C62110ACAFA881554C089FC53
Certificate serial:       0D13
Authority key identifier: E4:E1:01:EE:F4:43:15:0C:62:11:0A:CA:FA:88:15:54:C0:89:FC:53
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5OEB7vRDFQxiEQrK-ogVVMCJ_FM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9131612/E3B84C8CBE8611E99A6C011FC4F9AE02/26F281DEDDF811EAA553705EC4F9AE02.roa
Signing time:             Thu 04 Jul 2024 18:36:20 +0000
ROA not before:           Thu 04 Jul 2024 18:36:20 +0000
ROA not after:            Tue 30 Sep 2025 00:00:00 +0000
asID:                     14618
IP address blocks:        103.24.134.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9131612/E3B84C8CBE8611E99A6C011FC4F9AE02/5OEB7vRDFQxiEQrK-ogVVMCJ_FM.crl
                          rsync://rpki.apnic.net/member_repository/A9131612/E3B84C8CBE8611E99A6C011FC4F9AE02/5OEB7vRDFQxiEQrK-ogVVMCJ_FM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5OEB7vRDFQxiEQrK-ogVVMCJ_FM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 27 Nov 2024 17:13:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3347 (0xd13)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9131612/serialNumber=E4E101EEF443150C62110ACAFA881554C089FC53
        Validity
            Not Before: Jul  4 18:36:20 2024 GMT
            Not After : Sep 30 00:00:00 2025 GMT
        Subject: CN=6686eba4-ac8d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:00:e5:5a:69:5b:29:12:e1:a7:6d:da:4f:fb:
                    18:e0:96:1f:a9:41:e0:4f:c5:a8:64:e2:a4:1d:59:
                    02:1a:2d:f1:6e:c9:d5:dd:7e:65:b1:31:9a:c6:97:
                    ab:e3:16:12:25:84:13:3b:fe:64:da:9d:63:f9:4d:
                    57:7a:c2:d8:cb:31:f7:45:9e:d8:e1:9c:20:5c:b1:
                    44:bb:1b:1b:4a:c7:e3:8a:7e:bf:86:6b:83:af:29:
                    bc:f4:fe:aa:3a:6f:cd:65:ca:df:3e:a9:3e:ff:a1:
                    7f:d1:31:57:01:b5:ab:7c:30:47:85:1e:e3:aa:03:
                    5e:a9:5f:fa:52:5a:9b:3b:8c:83:17:b7:26:79:90:
                    f0:3e:10:c9:54:23:32:1f:92:4d:6c:03:a9:a1:95:
                    b9:79:65:02:ca:16:54:c4:02:12:56:be:ec:5a:54:
                    ab:e6:be:24:2c:d8:90:a3:62:a4:4c:37:e8:e6:6b:
                    39:e3:53:d8:66:87:0b:a5:e8:f2:85:0f:fc:92:ef:
                    60:14:56:a9:6c:c3:30:db:81:b5:2c:7f:0b:9b:1d:
                    4a:7f:d6:c6:ab:c5:c0:93:3e:b5:68:8a:18:4e:dc:
                    ae:df:6d:0b:bb:87:49:dc:e0:73:ec:7c:35:51:5c:
                    15:f3:2a:b8:c0:42:74:51:37:5e:eb:ea:38:67:e0:
                    fc:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4C:C1:5D:2E:38:F2:16:48:63:AF:A4:72:E8:A5:E5:18:E1:55:5A:D0
            X509v3 Authority Key Identifier:
                keyid:E4:E1:01:EE:F4:43:15:0C:62:11:0A:CA:FA:88:15:54:C0:89:FC:53

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9131612/E3B84C8CBE8611E99A6C011FC4F9AE02/5OEB7vRDFQxiEQrK-ogVVMCJ_FM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5OEB7vRDFQxiEQrK-ogVVMCJ_FM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9131612/E3B84C8CBE8611E99A6C011FC4F9AE02/26F281DEDDF811EAA553705EC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.24.134.0/24

    Signature Algorithm: sha256WithRSAEncryption
         96:a1:a2:a2:0d:b4:57:f5:55:fe:c9:57:89:e5:08:c3:35:15:
         bb:0d:a6:00:a2:4c:bc:bc:1b:34:f5:fa:c7:57:24:fb:aa:45:
         e9:1e:f8:43:43:cd:fd:99:7c:e1:33:da:9c:40:d6:c9:24:e8:
         2c:1e:e7:d0:c8:fb:70:5e:0a:cc:36:2c:19:14:24:95:c6:83:
         95:1c:7a:c0:a0:88:c8:46:c7:22:fb:e8:b5:2d:61:84:11:28:
         1e:76:07:4b:29:71:a1:5d:17:eb:1d:3b:bf:75:5a:d0:8b:7b:
         48:bc:e2:a7:c8:68:40:69:fd:72:9e:85:3a:6c:78:9a:0c:3a:
         4c:e9:e7:33:09:94:5e:84:a4:2c:aa:78:e0:f7:93:96:ad:5d:
         11:84:3a:90:fa:bd:7c:7e:a7:9a:cc:ef:d0:c6:4f:3b:05:5d:
         6a:b1:dd:45:07:a1:d2:b0:de:3a:0b:16:ac:57:60:2c:00:23:
         0b:94:d0:6b:f9:f0:23:6c:c5:53:ea:1c:e8:f8:5d:d6:8d:6e:
         61:f0:7b:05:44:f3:e3:c8:a5:8e:f1:59:34:c4:20:38:3d:0b:
         a3:85:84:bc:56:ce:9f:05:46:57:22:8c:1f:d2:72:95:a5:2f:
         6d:d2:35:25:46:a7:81:e1:1f:c0:87:db:11:1e:92:3c:a8:70:
         49:ad:fb:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 20 18:44:49 2024 by rpki-client on console-fra.rpki-client.org