Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91450A4/DD4736980C3611EBA4E49E21C4F9AE02/26BEAB3245B511EB969B596DC4F9AE02.roa
File:                     26BEAB3245B511EB969B596DC4F9AE02.roa (raw, json)
Hash identifier:          tliY3jYSQTp9oDGVfpmIPpl+OwdK9L8yQ5Ak8KCyoLM=
Subject key identifier:   46:CB:60:3A:C6:86:15:12:F5:61:24:6D:05:D4:90:3A:C6:AB:8C:9E
Certificate issuer:       /CN=A91450A4/serialNumber=3D1D6A332AEA4EC502037A0909F4CC19D42DB198
Certificate serial:       06D4
Authority key identifier: 3D:1D:6A:33:2A:EA:4E:C5:02:03:7A:09:09:F4:CC:19:D4:2D:B1:98
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PR1qMyrqTsUCA3oJCfTMGdQtsZg.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91450A4/DD4736980C3611EBA4E49E21C4F9AE02/26BEAB3245B511EB969B596DC4F9AE02.roa
Signing time:             Fri 02 Feb 2024 23:11:20 +0000
ROA not before:           Fri 02 Feb 2024 23:11:20 +0000
ROA not after:            Mon 31 Mar 2025 00:00:00 +0000
asID:                     2764
IP address blocks:        118.107.144.0/24 maxlen: 24
                          118.107.151.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91450A4/DD4736980C3611EBA4E49E21C4F9AE02/PR1qMyrqTsUCA3oJCfTMGdQtsZg.crl
                          rsync://rpki.apnic.net/member_repository/A91450A4/DD4736980C3611EBA4E49E21C4F9AE02/PR1qMyrqTsUCA3oJCfTMGdQtsZg.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PR1qMyrqTsUCA3oJCfTMGdQtsZg.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 27 Nov 2024 20:33:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1748 (0x6d4)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91450A4/serialNumber=3D1D6A332AEA4EC502037A0909F4CC19D42DB198
        Validity
            Not Before: Feb  2 23:11:20 2024 GMT
            Not After : Mar 31 00:00:00 2025 GMT
        Subject: CN=65bd7698-57f4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:b7:97:2b:12:2d:54:c3:c2:c1:bd:02:ee:21:
                    45:ef:c0:69:c9:03:33:21:29:da:41:39:b8:6f:54:
                    b3:23:e0:59:6f:3c:b8:1f:71:c0:e4:64:b1:62:3c:
                    66:bf:36:6a:ef:2e:aa:a7:0c:97:c1:e6:c7:f8:1a:
                    8e:ba:b1:3f:0a:a4:9c:9d:51:98:7e:b7:dc:57:68:
                    a6:ff:fe:84:ae:8b:8b:d7:bd:6b:68:39:24:4a:ee:
                    c6:52:c9:0f:1c:65:ef:d9:a4:7e:9d:56:f5:dc:ac:
                    bc:21:d8:a1:54:46:35:77:e0:80:65:09:c1:63:5e:
                    77:03:2a:c0:01:1b:e1:49:84:7c:8d:6a:00:bd:4e:
                    bc:bb:d6:8f:50:ca:90:2c:e2:c7:db:e2:61:ed:8b:
                    41:5f:3a:65:2c:b2:3c:43:98:3a:9f:e1:79:91:b7:
                    82:32:13:9e:b7:33:f6:ec:d1:72:2a:3c:5b:16:21:
                    b8:7e:24:f5:83:99:ee:30:06:26:18:72:2c:8a:70:
                    76:24:c7:cc:25:fe:4b:82:8b:f5:dd:6f:31:15:96:
                    b9:20:c6:18:db:97:07:69:7b:4f:68:a2:5b:e9:c0:
                    b0:05:a4:48:b4:1e:a7:a0:77:33:81:cd:ef:be:f8:
                    e1:65:55:f1:38:50:da:f8:fa:ce:f3:12:f2:9b:23:
                    56:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                46:CB:60:3A:C6:86:15:12:F5:61:24:6D:05:D4:90:3A:C6:AB:8C:9E
            X509v3 Authority Key Identifier:
                keyid:3D:1D:6A:33:2A:EA:4E:C5:02:03:7A:09:09:F4:CC:19:D4:2D:B1:98

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91450A4/DD4736980C3611EBA4E49E21C4F9AE02/PR1qMyrqTsUCA3oJCfTMGdQtsZg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PR1qMyrqTsUCA3oJCfTMGdQtsZg.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91450A4/DD4736980C3611EBA4E49E21C4F9AE02/26BEAB3245B511EB969B596DC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  118.107.144.0/24
                  118.107.151.0/24

    Signature Algorithm: sha256WithRSAEncryption
         ab:86:ac:8a:dc:76:0e:66:28:76:74:f6:5e:02:2a:90:11:c2:
         b0:7e:e9:22:58:e0:6c:4f:79:51:8e:20:c8:85:9f:18:34:b2:
         a1:18:7e:f3:49:3f:bd:b8:7e:ea:0a:8d:b8:95:4f:55:d4:fa:
         dc:6c:a3:f8:fa:cf:1f:66:35:56:ec:34:ca:71:bb:21:66:ca:
         cd:16:7c:82:f1:fd:5b:23:9e:f5:eb:9d:ec:b4:3b:34:c1:63:
         a7:bf:1f:fd:27:2a:66:be:f7:3c:4d:36:9f:46:5a:e0:81:91:
         25:fe:5c:1d:36:4a:9d:aa:7b:84:d1:e3:ab:b2:81:7a:cc:9a:
         6c:3f:09:77:44:0d:0b:22:84:5f:7d:d8:8f:e8:c8:2c:03:de:
         ec:19:68:df:1a:89:04:a1:2b:08:b7:ac:90:86:66:f2:14:73:
         42:36:02:1a:3e:9e:f5:0a:d8:36:28:8c:23:bb:07:ad:06:e3:
         81:71:d7:a9:7b:cb:1c:44:d9:0d:83:1a:e9:51:0a:fa:a1:18:
         12:e2:68:18:84:09:5b:d0:70:51:8a:01:aa:97:86:81:a5:53:
         e8:af:d5:09:c1:bf:85:24:56:c3:7b:f9:f3:8d:ad:cf:18:8d:
         74:80:cc:49:44:4b:91:48:19:37:64:8b:b4:ec:25:72:4c:72:
         2c:2b:b4:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 20 21:52:38 2024 by rpki-client on console-fra.rpki-client.org