Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A913CBB2/B40322303B1111EE9619BB80C4F9AE02/26D3EB963B1211EE8ED76E25C4F9AE02.roa
File:                     26D3EB963B1211EE8ED76E25C4F9AE02.roa (raw, json)
Hash identifier:          qv3tAt9BON7buTRTVhuMsm15F4b64BUNH1NHpvJGTQM=
Subject key identifier:   07:AB:7A:DF:07:36:27:D1:34:7E:4E:14:95:4D:71:A7:83:12:71:B0
Certificate issuer:       /CN=A913CBB2/serialNumber=6B887E7A58B10FEDE2804B5E29ECE2C299C27FA1
Certificate serial:       BC
Authority key identifier: 6B:88:7E:7A:58:B1:0F:ED:E2:80:4B:5E:29:EC:E2:C2:99:C2:7F:A1
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/a4h-elixD-3igEteKeziwpnCf6E.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A913CBB2/B40322303B1111EE9619BB80C4F9AE02/26D3EB963B1211EE8ED76E25C4F9AE02.roa
Signing time:             Wed 07 Aug 2024 05:46:44 +0000
ROA not before:           Wed 07 Aug 2024 05:46:44 +0000
ROA not after:            Fri 31 Oct 2025 00:00:00 +0000
asID:                     151631
IP address blocks:        103.243.233.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A913CBB2/B40322303B1111EE9619BB80C4F9AE02/a4h-elixD-3igEteKeziwpnCf6E.crl
                          rsync://rpki.apnic.net/member_repository/A913CBB2/B40322303B1111EE9619BB80C4F9AE02/a4h-elixD-3igEteKeziwpnCf6E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/a4h-elixD-3igEteKeziwpnCf6E.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 30 Nov 2024 02:50:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 188 (0xbc)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A913CBB2/serialNumber=6B887E7A58B10FEDE2804B5E29ECE2C299C27FA1
        Validity
            Not Before: Aug  7 05:46:44 2024 GMT
            Not After : Oct 31 00:00:00 2025 GMT
        Subject: CN=66b30a44-911e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:c1:39:b3:5f:50:97:52:66:a0:74:53:a5:cb:
                    df:5d:51:24:56:c3:d8:bb:92:5e:c1:57:f8:d5:2d:
                    9a:83:42:4d:95:3a:0f:de:bd:0f:bd:3b:42:eb:a8:
                    ae:1c:6d:97:66:46:4e:f5:25:5e:be:8f:9d:a7:f7:
                    1c:e6:b6:8a:99:17:d4:f0:d4:66:ef:43:b1:41:32:
                    ff:75:12:d3:22:25:52:a4:c4:e5:7b:19:55:90:76:
                    f2:1a:91:18:74:08:09:47:e6:76:85:9a:81:83:48:
                    c8:dc:d6:f7:5b:19:49:94:1d:d2:6b:bc:b9:a2:ef:
                    29:9c:90:39:a0:91:db:73:b8:cf:6c:7d:4e:f4:4f:
                    03:a2:23:3f:9e:ee:9d:de:78:dc:30:1c:18:ad:91:
                    3a:fd:3a:6b:73:a7:37:ac:df:92:98:45:79:88:1d:
                    41:5f:7c:1e:3b:bb:7f:db:62:7c:31:42:2f:76:46:
                    2a:1a:b0:fc:11:ee:a3:5b:fe:35:e0:a4:63:e0:ec:
                    77:18:64:3e:d5:29:b9:11:b0:c4:25:34:44:67:de:
                    1b:b8:f9:ac:7e:e7:fd:36:73:f8:dd:b8:05:24:0a:
                    75:2e:f7:b2:51:db:2c:92:bd:c4:e2:10:77:a9:6c:
                    06:ab:71:ed:1d:91:a3:3f:cd:c1:c2:2b:68:73:42:
                    7e:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                07:AB:7A:DF:07:36:27:D1:34:7E:4E:14:95:4D:71:A7:83:12:71:B0
            X509v3 Authority Key Identifier:
                keyid:6B:88:7E:7A:58:B1:0F:ED:E2:80:4B:5E:29:EC:E2:C2:99:C2:7F:A1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A913CBB2/B40322303B1111EE9619BB80C4F9AE02/a4h-elixD-3igEteKeziwpnCf6E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/a4h-elixD-3igEteKeziwpnCf6E.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913CBB2/B40322303B1111EE9619BB80C4F9AE02/26D3EB963B1211EE8ED76E25C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.243.233.0/24

    Signature Algorithm: sha256WithRSAEncryption
         01:f1:4e:c9:11:10:fb:21:ab:45:7c:14:64:b3:7f:29:22:c3:
         3d:ea:31:2d:85:7e:f5:bf:9b:3a:e8:bc:c7:4a:43:7f:35:04:
         10:74:be:8f:0a:84:fc:19:96:ac:73:28:fe:9f:26:3a:8f:d8:
         76:4e:a1:67:2a:56:ad:61:c7:82:d5:30:2e:56:d7:cf:58:55:
         40:35:63:eb:1d:08:5a:56:2e:77:2d:d2:32:9f:f5:34:8e:01:
         51:57:46:16:88:af:c6:fa:14:4f:b9:7d:35:51:58:6d:f8:2f:
         97:23:5c:e6:94:27:76:dc:b0:fe:a3:61:bb:74:11:9c:f5:bf:
         d2:c6:84:3f:9c:65:d2:bd:cd:fa:c5:a2:ca:cb:0d:4a:12:17:
         59:d6:3c:f2:25:ee:9e:0f:4b:7e:9f:c6:fe:21:14:5c:be:37:
         69:61:07:e9:14:c5:fd:5e:f8:f1:03:e2:eb:a5:63:18:e7:56:
         4d:41:ce:64:56:6d:e4:3a:8a:36:bd:e9:c0:4b:c9:61:01:d0:
         c3:cb:2e:2d:be:0c:58:20:8d:48:62:e7:b1:9b:0b:ca:06:8f:
         e9:c2:a3:66:41:c8:ed:1e:20:91:41:0d:61:28:75:a4:dc:f2:
         8b:0d:cf:d7:05:c8:1a:7e:41:78:3e:4a:97:1f:80:6e:c8:20:
         bd:9d:d3:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 06:13:05 2024 by rpki-client on console-ams.rpki-client.org