Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A913DEDF/B2D6099E2B2711EE942ED240C4F9AE02/26D3006C2BBF11EE929D0D30C4F9AE02.roa
File:                     26D3006C2BBF11EE929D0D30C4F9AE02.roa (raw, json)
Hash identifier:          SKZ/nxRfbR8iQlRgyalR7EWE5ysRXQunYxWOu0F2dCs=
Subject key identifier:   FD:AE:28:06:B4:AA:D7:5E:46:A0:DB:7D:75:50:CC:33:DD:96:D2:FB
Certificate issuer:       /CN=A913DEDF/serialNumber=B192AD444DE1F2DE75BEBA1EEFD122EECF7D77CC
Certificate serial:       03
Authority key identifier: B1:92:AD:44:4D:E1:F2:DE:75:BE:BA:1E:EF:D1:22:EE:CF:7D:77:CC
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sZKtRE3h8t51vroe79Ei7s99d8w.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A913DEDF/B2D6099E2B2711EE942ED240C4F9AE02/26D3006C2BBF11EE929D0D30C4F9AE02.roa
Signing time:             Wed 26 Jul 2023 14:17:29 +0000
ROA not before:           Wed 26 Jul 2023 14:17:29 +0000
ROA not after:            Thu 31 Oct 2024 00:00:00 +0000
asID:                     1239
IP address blocks:        103.239.148.0/23 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A913DEDF/B2D6099E2B2711EE942ED240C4F9AE02/sZKtRE3h8t51vroe79Ei7s99d8w.crl
                          rsync://rpki.apnic.net/member_repository/A913DEDF/B2D6099E2B2711EE942ED240C4F9AE02/sZKtRE3h8t51vroe79Ei7s99d8w.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sZKtRE3h8t51vroe79Ei7s99d8w.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 14 May 2024 06:52:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3 (0x3)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A913DEDF/serialNumber=B192AD444DE1F2DE75BEBA1EEFD122EECF7D77CC
        Validity
            Not Before: Jul 26 14:17:29 2023 GMT
            Not After : Oct 31 00:00:00 2024 GMT
        Subject: CN=64c12af8-40fa
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:12:ba:01:4c:fb:de:d0:de:18:78:76:99:78:
                    c7:8d:06:70:a8:92:9f:76:9e:02:0b:88:70:a8:cf:
                    25:04:8a:1a:50:1f:01:48:7c:e1:0a:7d:a8:85:66:
                    0e:a5:d0:08:a9:1e:16:f1:63:a4:77:f7:c1:d8:84:
                    76:35:e7:bc:71:a8:34:dd:f5:be:e9:1c:db:77:79:
                    73:6d:2f:b6:75:15:27:27:c3:69:55:13:43:fa:b6:
                    11:e3:08:81:1f:1d:73:8b:83:c4:a6:f9:3d:41:a4:
                    7f:8d:8a:7e:99:e0:50:72:ee:2e:9f:c4:f9:07:04:
                    56:80:50:ba:a6:4c:dc:e7:5e:26:d9:1d:be:27:63:
                    49:82:24:ea:83:0c:da:e4:52:44:aa:22:88:c4:b1:
                    78:4f:65:1b:a9:e1:af:64:be:8e:3f:7e:a4:4d:54:
                    31:dd:98:f7:40:0c:83:6f:72:08:b3:dd:32:1e:04:
                    a2:0a:d8:8c:01:f5:31:48:aa:55:a1:f5:95:2f:75:
                    f8:aa:27:2c:03:b2:7b:a4:54:bd:04:a3:bd:fa:84:
                    a7:27:bf:17:6c:78:bf:db:e2:8b:99:5f:d2:96:4d:
                    3d:b2:9f:4c:26:49:d6:cf:57:62:39:15:12:bf:11:
                    07:f9:3e:b1:31:4f:93:fd:ae:d3:02:54:f2:1b:73:
                    e5:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FD:AE:28:06:B4:AA:D7:5E:46:A0:DB:7D:75:50:CC:33:DD:96:D2:FB
            X509v3 Authority Key Identifier:
                keyid:B1:92:AD:44:4D:E1:F2:DE:75:BE:BA:1E:EF:D1:22:EE:CF:7D:77:CC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A913DEDF/B2D6099E2B2711EE942ED240C4F9AE02/sZKtRE3h8t51vroe79Ei7s99d8w.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sZKtRE3h8t51vroe79Ei7s99d8w.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913DEDF/B2D6099E2B2711EE942ED240C4F9AE02/26D3006C2BBF11EE929D0D30C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.239.148.0/23

    Signature Algorithm: sha256WithRSAEncryption
         b8:4e:db:6f:17:59:b6:0e:b8:ca:e4:c2:f9:9a:86:40:dc:86:
         b9:f5:5b:63:e2:85:19:e3:15:74:ea:c8:2c:88:97:ea:3a:a1:
         04:ee:22:b6:b1:82:47:a1:eb:af:e2:ce:02:af:4f:f8:9c:bd:
         8b:a9:0f:27:3e:4f:92:d1:e2:06:16:15:e5:af:7d:e7:2c:84:
         95:23:67:74:83:8a:49:fd:24:4c:ff:38:97:b6:a9:2a:5d:28:
         cc:34:6b:17:8e:b6:7e:44:26:d4:4e:61:35:00:97:3b:c9:40:
         9e:cf:a8:dd:80:3c:8a:c0:75:42:c9:7e:64:79:5a:cc:16:b1:
         73:51:eb:cc:92:69:18:52:55:6f:70:fd:9b:fa:a5:b1:6f:ad:
         10:e9:b2:19:59:a5:fc:c0:81:85:1a:f8:2e:6e:79:c5:74:a6:
         35:bb:42:62:68:7d:4e:0a:95:80:36:81:bd:06:5c:20:74:36:
         1a:61:dc:95:76:c7:2b:9d:aa:e7:ef:43:0e:9a:6c:c5:a5:be:
         19:90:aa:be:0b:70:52:09:91:82:4d:02:85:d3:86:96:6c:8a:
         32:5b:7d:5b:4a:43:2d:de:f5:62:00:40:df:82:cd:35:ad:bc:
         46:58:6a:5c:39:f7:4a:b5:cd:62:bb:86:20:b2:bf:2f:72:b1:
         52:9b:d4:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 7 09:19:45 2024 by rpki-client on console-ams.rpki-client.org