Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91478C3/E3D9194C9D2C11E980221829C4F9AE02/36477FF69D2E11E99A95DC2AC4F9AE02.roa
File:                     36477FF69D2E11E99A95DC2AC4F9AE02.roa (raw, json)
Hash identifier:          3ATWfniZagbwXrzzSjogNdEqrQHRXjVZAQ8fSZkSCBY=
Subject key identifier:   EB:E6:38:DB:4E:EB:E7:E3:A8:BD:DC:AE:AA:C0:3B:87:F7:DF:CF:B8
Certificate issuer:       /CN=A91478C3/serialNumber=912AB39FC7BBCBEF1CF267E9D3F719C9A4F0A114
Certificate serial:       0D47
Authority key identifier: 91:2A:B3:9F:C7:BB:CB:EF:1C:F2:67:E9:D3:F7:19:C9:A4:F0:A1:14
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kSqzn8e7y-8c8mfp0_cZyaTwoRQ.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91478C3/E3D9194C9D2C11E980221829C4F9AE02/36477FF69D2E11E99A95DC2AC4F9AE02.roa
Signing time:             Sat 16 Dec 2023 18:26:19 +0000
ROA not before:           Sat 16 Dec 2023 18:26:19 +0000
ROA not after:            Sun 02 Mar 2025 00:00:00 +0000
asID:                     138468
IP address blocks:        103.126.27.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91478C3/E3D9194C9D2C11E980221829C4F9AE02/kSqzn8e7y-8c8mfp0_cZyaTwoRQ.crl
                          rsync://rpki.apnic.net/member_repository/A91478C3/E3D9194C9D2C11E980221829C4F9AE02/kSqzn8e7y-8c8mfp0_cZyaTwoRQ.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kSqzn8e7y-8c8mfp0_cZyaTwoRQ.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 29 Nov 2024 17:45:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3399 (0xd47)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91478C3/serialNumber=912AB39FC7BBCBEF1CF267E9D3F719C9A4F0A114
        Validity
            Not Before: Dec 16 18:26:19 2023 GMT
            Not After : Mar  2 00:00:00 2025 GMT
        Subject: CN=657debcb-29f6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:a6:49:ac:0b:67:7b:12:46:27:01:cc:bd:89:
                    ac:86:39:40:66:51:01:11:a6:aa:69:f0:56:55:57:
                    bf:82:c2:ad:20:ab:89:92:26:e2:a0:06:d0:b7:02:
                    8e:b5:c9:ba:49:a9:5d:17:9f:cc:9d:15:00:9d:bb:
                    80:bb:16:26:85:76:86:f5:0d:19:81:16:0b:d0:29:
                    e4:2b:9e:91:9c:d6:06:dc:1b:44:f4:9a:09:2d:a4:
                    2c:e3:50:8d:ee:61:1f:ff:30:e9:89:59:31:d7:ee:
                    82:2a:d6:b0:5a:b9:d0:9b:82:85:a4:6a:b2:ad:5c:
                    66:13:99:75:d8:d9:82:21:ef:52:30:92:12:26:82:
                    08:d4:22:b1:91:a6:f7:93:ef:71:82:64:2f:12:88:
                    69:9d:b7:cb:d1:c4:e4:e6:85:b8:f2:73:bb:07:1e:
                    d6:8c:a8:79:7a:d5:2f:54:c6:a2:b3:21:ab:47:e0:
                    02:cd:ca:f2:83:1f:3e:96:4f:8c:dc:77:74:81:25:
                    5f:c5:7e:5e:03:f9:e1:37:e2:76:d1:a9:3a:8a:ba:
                    e1:86:8b:0d:73:c1:d2:eb:a6:d4:28:f2:52:17:f0:
                    81:43:24:c7:d7:d7:20:06:7e:c9:30:88:aa:b6:61:
                    1c:08:66:9f:eb:ab:8b:ba:5d:ac:0d:d7:14:42:e3:
                    01:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EB:E6:38:DB:4E:EB:E7:E3:A8:BD:DC:AE:AA:C0:3B:87:F7:DF:CF:B8
            X509v3 Authority Key Identifier:
                keyid:91:2A:B3:9F:C7:BB:CB:EF:1C:F2:67:E9:D3:F7:19:C9:A4:F0:A1:14

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91478C3/E3D9194C9D2C11E980221829C4F9AE02/kSqzn8e7y-8c8mfp0_cZyaTwoRQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kSqzn8e7y-8c8mfp0_cZyaTwoRQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91478C3/E3D9194C9D2C11E980221829C4F9AE02/36477FF69D2E11E99A95DC2AC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.126.27.0/24

    Signature Algorithm: sha256WithRSAEncryption
         7f:96:04:56:a2:a1:fb:e9:c8:4b:57:6c:e3:67:8a:02:54:ec:
         c5:15:3f:52:c5:aa:1b:05:1e:d1:43:4e:d8:25:ba:4a:43:af:
         10:db:23:71:4c:bf:44:89:a4:e3:08:18:a7:77:a0:1f:f3:03:
         e8:4e:7e:97:f0:da:54:95:d5:9f:5e:7a:12:6d:eb:35:ab:67:
         07:a0:d7:2f:53:01:69:02:81:c1:ae:1b:a2:ec:9e:82:9c:0d:
         f7:89:0e:1f:c7:fe:fd:8a:c5:27:d4:7a:ba:40:08:25:65:b9:
         b6:c2:6e:86:d2:1d:b0:67:6f:dc:3b:f8:cd:b9:c4:d7:c6:d0:
         0d:51:17:cb:e5:ab:1f:41:af:88:6a:47:9d:e6:86:0c:7e:21:
         3a:fd:75:29:be:24:aa:9c:a7:b9:ef:11:87:cc:3b:ad:05:82:
         42:03:06:4c:d9:aa:de:11:76:f4:7e:0b:05:ea:42:22:60:99:
         cb:3f:14:b6:88:b1:54:71:9b:30:8d:ab:63:40:4e:e8:73:72:
         32:a5:8f:aa:f4:a8:96:d8:76:f8:26:c2:8f:93:8f:0e:d5:11:
         52:4d:8f:45:e3:0d:f1:c4:72:8a:a6:c0:9f:81:36:ab:74:21:
         9f:21:a4:21:55:48:ce:87:82:c6:94:79:51:b3:85:d2:ca:e9:
         64:d3:8f:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 19:44:57 2024 by rpki-client on console-fra.rpki-client.org