Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91415FB/7F488968735D11E788DA4F14C4F9AE02/226DEC1275D511E88D5FDF24C4F9AE02.roa
File:                     226DEC1275D511E88D5FDF24C4F9AE02.roa (raw, json)
Hash identifier:          o5SO9tKeP7v01iWZOT6KVzpN6EM1lVisy9/tFg9OhXE=
Subject key identifier:   05:74:FC:86:39:48:E4:7C:83:68:85:65:91:90:AA:15:E0:38:69:D8
Certificate issuer:       /CN=A91415FB/serialNumber=37D3374985F3BAA82D0BE04C6D87A3A035E20DEA
Certificate serial:       1885
Authority key identifier: 37:D3:37:49:85:F3:BA:A8:2D:0B:E0:4C:6D:87:A3:A0:35:E2:0D:EA
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/N9M3SYXzuqgtC-BMbYejoDXiDeo.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91415FB/7F488968735D11E788DA4F14C4F9AE02/226DEC1275D511E88D5FDF24C4F9AE02.roa
Signing time:             Wed 28 Feb 2024 16:54:54 +0000
ROA not before:           Wed 28 Feb 2024 16:54:54 +0000
ROA not after:            Thu 01 May 2025 00:00:00 +0000
asID:                     38851
IP address blocks:        103.246.208.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91415FB/7F488968735D11E788DA4F14C4F9AE02/N9M3SYXzuqgtC-BMbYejoDXiDeo.crl
                          rsync://rpki.apnic.net/member_repository/A91415FB/7F488968735D11E788DA4F14C4F9AE02/N9M3SYXzuqgtC-BMbYejoDXiDeo.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/N9M3SYXzuqgtC-BMbYejoDXiDeo.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 29 Nov 2024 16:26:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 6277 (0x1885)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91415FB/serialNumber=37D3374985F3BAA82D0BE04C6D87A3A035E20DEA
        Validity
            Not Before: Feb 28 16:54:54 2024 GMT
            Not After : May  1 00:00:00 2025 GMT
        Subject: CN=65df655e-064a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:85:db:9f:58:f7:c5:3b:10:f1:02:0f:12:6e:
                    6a:1a:86:1d:44:33:e1:ff:c7:f9:2f:40:40:0d:bb:
                    f1:6c:7a:a6:2a:8f:fa:89:65:7a:b4:5d:dc:23:93:
                    1d:cd:57:09:a8:cb:9b:75:81:13:a7:04:d1:6a:65:
                    e9:ff:73:87:be:21:44:d2:bb:02:9a:b6:b4:59:3a:
                    0e:13:8d:fc:65:a9:a6:93:55:41:a4:32:5f:62:47:
                    73:b0:88:ea:c8:fd:d0:1d:fd:fd:e3:2b:fc:6c:c8:
                    6e:0a:64:9f:b4:53:86:cf:ec:70:c9:b5:2b:8d:b3:
                    48:0c:8a:66:a7:84:1b:d8:24:67:b4:22:97:54:10:
                    07:14:df:39:36:d1:3a:35:b3:46:a2:c3:a3:f9:22:
                    44:b6:c9:83:09:ad:9a:4a:0b:83:9d:69:79:2c:06:
                    71:b0:88:f6:2a:67:48:fe:37:fe:29:ba:cf:39:59:
                    d3:7d:12:6d:bd:81:70:31:e9:8b:2e:6c:c5:71:61:
                    18:06:93:d2:7f:23:8d:62:be:73:a6:17:e5:79:0a:
                    93:4e:a5:e9:ff:99:38:d4:1c:c9:c0:70:56:c1:2a:
                    a1:3b:53:4f:cd:aa:91:36:e8:ed:b2:41:5b:34:14:
                    cb:39:87:bc:2d:a4:1f:37:78:11:ad:ca:87:44:2c:
                    2e:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                05:74:FC:86:39:48:E4:7C:83:68:85:65:91:90:AA:15:E0:38:69:D8
            X509v3 Authority Key Identifier:
                keyid:37:D3:37:49:85:F3:BA:A8:2D:0B:E0:4C:6D:87:A3:A0:35:E2:0D:EA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91415FB/7F488968735D11E788DA4F14C4F9AE02/N9M3SYXzuqgtC-BMbYejoDXiDeo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/N9M3SYXzuqgtC-BMbYejoDXiDeo.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91415FB/7F488968735D11E788DA4F14C4F9AE02/226DEC1275D511E88D5FDF24C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.246.208.0/22

    Signature Algorithm: sha256WithRSAEncryption
         9a:42:79:dd:ce:ee:47:91:68:1d:dc:24:35:2d:1b:15:13:94:
         88:42:40:e2:7b:1c:55:72:68:04:87:a3:27:55:6d:07:07:e3:
         3f:67:03:36:f5:f5:02:2f:e7:a4:7f:c7:df:0c:29:9e:23:24:
         57:95:d3:12:ba:ba:0b:c9:4b:e9:49:ff:68:94:b8:8f:0e:93:
         4f:a1:e4:3f:75:47:42:4a:1b:27:50:63:e0:61:7f:be:81:cc:
         61:f7:9f:11:f3:e6:13:60:1e:a5:7e:32:c5:36:50:7d:0d:77:
         f2:55:d1:90:d6:c3:e8:88:8b:86:4b:73:63:a8:e1:82:1a:69:
         c3:d0:9b:35:ed:93:ab:e8:45:9b:e7:39:bf:e7:75:15:39:df:
         f3:47:9e:08:48:51:81:08:0d:d8:a6:70:07:e0:5f:8c:c9:c7:
         e6:33:70:6d:44:52:64:73:ef:04:74:7b:d6:42:21:a6:2d:90:
         02:19:96:de:d1:54:43:9f:30:82:8b:fd:a1:b9:2f:0e:ea:c9:
         6f:16:82:ab:ca:3c:67:99:ad:df:1a:b7:a8:98:eb:3a:35:24:
         e9:f7:89:c6:a8:8e:5f:fa:28:f3:2a:c8:67:7b:66:e8:a1:d4:
         55:2f:73:9a:18:9b:44:71:23:c4:65:ad:09:0f:65:b1:f4:59:
         60:cb:72:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 17:55:42 2024 by rpki-client on console-fra.rpki-client.org