Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9149F3E/AC52B7481D8211E2BC6417D708B02CD2/26C39BB6010511EE8C750D39C4F9AE02.roa
File:                     26C39BB6010511EE8C750D39C4F9AE02.roa (raw, json)
Hash identifier:          DjvQLdiIzOY0nVw9IlD1GUoeV8ePxWoZz2SsmCMWqkI=
Subject key identifier:   50:36:6C:01:05:4B:C3:5B:56:7D:4A:08:41:CF:81:19:BA:D6:BA:91
Certificate issuer:       /CN=A9149F3E/serialNumber=EB389FB339B3908D549A65390C92E15F9DF7C54B
Certificate serial:       34E1
Authority key identifier: EB:38:9F:B3:39:B3:90:8D:54:9A:65:39:0C:92:E1:5F:9D:F7:C5:4B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6zifszmzkI1UmmU5DJLhX533xUs.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9149F3E/AC52B7481D8211E2BC6417D708B02CD2/26C39BB6010511EE8C750D39C4F9AE02.roa
Signing time:             Tue 26 Sep 2023 14:30:26 +0000
ROA not before:           Tue 26 Sep 2023 14:30:26 +0000
ROA not after:            Sat 31 Aug 2024 00:00:00 +0000
asID:                     38393
IP address blocks:        103.143.79.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9149F3E/AC52B7481D8211E2BC6417D708B02CD2/6zifszmzkI1UmmU5DJLhX533xUs.crl
                          rsync://rpki.apnic.net/member_repository/A9149F3E/AC52B7481D8211E2BC6417D708B02CD2/6zifszmzkI1UmmU5DJLhX533xUs.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6zifszmzkI1UmmU5DJLhX533xUs.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 25 May 2024 14:23:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 13537 (0x34e1)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9149F3E/serialNumber=EB389FB339B3908D549A65390C92E15F9DF7C54B
        Validity
            Not Before: Sep 26 14:30:26 2023 GMT
            Not After : Aug 31 00:00:00 2024 GMT
        Subject: CN=6512eb01-fc9a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:cf:32:cb:dd:51:d8:44:b4:09:21:b9:03:a2:
                    6d:e6:e3:36:12:c1:b8:49:31:95:73:ac:8e:28:de:
                    57:a9:4d:ff:ea:cf:b5:3f:f7:0d:25:65:c3:0f:89:
                    8a:ac:1c:a7:f2:1c:da:7c:d1:95:47:48:1c:2d:8c:
                    16:59:ab:03:96:0c:4f:3a:aa:6b:40:4c:5c:a7:ff:
                    c4:d4:96:b6:4f:8c:4f:40:07:1f:de:a4:30:b6:21:
                    b7:db:1a:58:39:3b:e2:50:42:a6:5c:b4:6b:f6:2d:
                    4d:02:a5:2a:29:a7:d7:58:fc:0a:2e:30:bc:6f:88:
                    0c:a8:63:7b:75:5a:75:86:5c:8c:ad:54:7b:0f:e6:
                    25:f1:9c:8e:66:71:d7:9e:6e:bf:79:d1:ca:ff:dc:
                    23:6e:b0:ab:1c:99:99:77:df:c1:41:ad:16:d7:68:
                    e0:6a:d0:80:d5:a6:86:5a:5e:43:31:e7:60:ec:00:
                    52:02:39:21:da:2d:3f:dd:60:51:bf:31:fd:a0:88:
                    c7:61:83:90:5d:62:26:4a:68:1a:8d:33:76:03:f5:
                    0c:0b:10:24:07:04:8b:bc:53:88:72:75:81:93:44:
                    3d:aa:eb:ae:5e:d9:ce:cf:c3:38:3a:d3:0c:07:4d:
                    c6:d2:68:61:ae:98:a8:15:78:df:47:f7:aa:90:f5:
                    9a:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                50:36:6C:01:05:4B:C3:5B:56:7D:4A:08:41:CF:81:19:BA:D6:BA:91
            X509v3 Authority Key Identifier:
                keyid:EB:38:9F:B3:39:B3:90:8D:54:9A:65:39:0C:92:E1:5F:9D:F7:C5:4B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9149F3E/AC52B7481D8211E2BC6417D708B02CD2/6zifszmzkI1UmmU5DJLhX533xUs.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6zifszmzkI1UmmU5DJLhX533xUs.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9149F3E/AC52B7481D8211E2BC6417D708B02CD2/26C39BB6010511EE8C750D39C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.143.79.0/24

    Signature Algorithm: sha256WithRSAEncryption
         3d:eb:c2:12:a3:12:21:1b:31:f1:3f:72:53:2b:22:f4:01:4a:
         e2:0d:61:82:be:43:5e:dc:c4:45:f7:45:03:a9:d2:59:6c:ff:
         59:02:e1:14:16:9c:80:72:fa:52:56:5d:95:33:6f:b3:d7:47:
         08:47:06:f5:1a:b7:c5:1a:71:ae:2a:9b:9b:9c:72:74:aa:34:
         6b:e4:84:77:f8:07:64:e9:43:2c:d5:28:8b:52:46:54:89:8b:
         c6:41:a8:f4:04:0f:70:98:cf:3d:e7:3d:4a:1e:ff:f1:e7:58:
         95:9e:36:10:28:28:e4:a6:05:ff:61:7d:d8:54:95:30:9b:12:
         91:83:a4:a0:08:4b:13:f2:c7:ed:e4:be:94:d8:9c:6b:1e:3a:
         7c:c2:47:cd:8f:13:9d:83:c2:71:ef:58:6c:21:22:f1:dc:26:
         48:42:a2:fb:b6:4f:b6:7b:f7:91:a3:00:16:8c:f5:05:f0:8b:
         b2:40:88:9e:d7:75:29:0a:fa:5f:cc:d6:16:da:c1:24:87:21:
         60:b4:98:be:e2:83:06:58:cc:2b:b9:f2:9e:91:b6:04:53:e1:
         2e:99:c4:21:4f:df:b1:f6:09:47:b5:71:4f:ca:0d:99:2a:89:
         71:3a:18:2f:9a:5c:31:e0:1b:83:a1:37:26:f2:c7:af:02:7e:
         ac:fd:8d:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 18 15:58:22 2024 by rpki-client on console-ams.rpki-client.org