Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A915B598/812CE9D4047111EAB6AD8775C4F9AE02/ED6D9A0C047211EAA9BAFB77C4F9AE02.roa
File:                     ED6D9A0C047211EAA9BAFB77C4F9AE02.roa (raw, json)
Hash identifier:          jKTKGdkANXZVlrLeHH7OepSq70NIAtohryIKS45aoIY=
Subject key identifier:   01:ED:5F:B0:B4:D5:43:68:81:67:E6:7B:39:27:05:61:BA:E0:9D:E1
Certificate issuer:       /CN=A915B598/serialNumber=7DC462AF3E6278A8218905A1B3E7DB37F2EF7A82
Certificate serial:       0AE9
Authority key identifier: 7D:C4:62:AF:3E:62:78:A8:21:89:05:A1:B3:E7:DB:37:F2:EF:7A:82
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fcRirz5ieKghiQWhs-fbN_LveoI.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A915B598/812CE9D4047111EAB6AD8775C4F9AE02/ED6D9A0C047211EAA9BAFB77C4F9AE02.roa
Signing time:             Fri 14 Jul 2023 18:56:03 +0000
ROA not before:           Fri 14 Jul 2023 18:56:03 +0000
ROA not after:            Mon 30 Sep 2024 00:00:00 +0000
asID:                     58946
IP address blocks:        103.26.136.0/23 maxlen: 23
                          103.26.136.0/24 maxlen: 24
                          103.26.137.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A915B598/812CE9D4047111EAB6AD8775C4F9AE02/fcRirz5ieKghiQWhs-fbN_LveoI.crl
                          rsync://rpki.apnic.net/member_repository/A915B598/812CE9D4047111EAB6AD8775C4F9AE02/fcRirz5ieKghiQWhs-fbN_LveoI.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fcRirz5ieKghiQWhs-fbN_LveoI.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 15 May 2024 02:42:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2793 (0xae9)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A915B598/serialNumber=7DC462AF3E6278A8218905A1B3E7DB37F2EF7A82
        Validity
            Not Before: Jul 14 18:56:03 2023 GMT
            Not After : Sep 30 00:00:00 2024 GMT
        Subject: CN=64b19a42-e650
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:2b:69:b2:3f:63:56:cd:95:9c:21:ad:d5:28:
                    0c:92:09:a7:df:c9:2b:25:99:1d:4c:06:2c:b2:d6:
                    fc:4f:8c:b6:d0:20:59:3a:73:c1:7d:90:18:44:15:
                    1e:44:03:52:07:05:71:2f:8c:10:38:1c:66:f7:75:
                    1d:9e:a1:02:63:32:28:eb:9e:92:80:c5:77:18:d4:
                    24:45:c6:dc:41:d2:df:1a:59:82:c5:39:46:0d:7f:
                    de:9b:bb:6e:40:a9:8e:84:5e:71:36:1b:e3:27:de:
                    f2:52:4b:d1:f2:b3:b4:f9:b4:54:40:84:12:6c:07:
                    e9:e1:47:45:70:89:e3:93:29:f9:f9:ad:75:e2:61:
                    f5:2d:4e:04:a4:41:49:dc:c9:91:8b:89:41:0f:28:
                    9d:34:7a:93:d5:d4:a7:a3:83:ae:00:b8:b9:28:0b:
                    26:bb:f6:1f:25:62:de:18:62:36:fb:2f:3d:19:fa:
                    57:ca:d9:59:57:42:5f:4b:ac:61:22:9a:37:a5:2a:
                    ce:59:1c:27:77:07:f1:1f:2d:07:31:d7:43:1f:6c:
                    5b:16:50:41:ca:d3:6d:f8:27:78:51:7a:15:4d:11:
                    c2:e8:a1:62:49:b9:fe:ef:69:c3:6f:db:09:d2:cf:
                    68:29:10:ad:cb:d0:2c:8e:76:4f:41:e7:77:80:80:
                    55:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                01:ED:5F:B0:B4:D5:43:68:81:67:E6:7B:39:27:05:61:BA:E0:9D:E1
            X509v3 Authority Key Identifier:
                keyid:7D:C4:62:AF:3E:62:78:A8:21:89:05:A1:B3:E7:DB:37:F2:EF:7A:82

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A915B598/812CE9D4047111EAB6AD8775C4F9AE02/fcRirz5ieKghiQWhs-fbN_LveoI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fcRirz5ieKghiQWhs-fbN_LveoI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915B598/812CE9D4047111EAB6AD8775C4F9AE02/ED6D9A0C047211EAA9BAFB77C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.26.136.0/23

    Signature Algorithm: sha256WithRSAEncryption
         0b:9b:67:91:86:86:04:dd:17:02:16:24:0b:b8:68:e9:2e:38:
         a3:d2:5c:6d:59:48:bf:b9:f7:82:d2:d7:17:e0:61:74:2a:0d:
         dd:da:33:cd:48:de:76:b5:4f:a4:a0:b6:00:dc:60:bd:5d:9a:
         4e:ed:36:d2:9c:13:96:62:94:d2:9b:0c:1e:7c:e9:eb:29:7c:
         60:8b:f6:2f:42:8a:48:91:3a:3f:b8:51:ab:49:61:25:1e:f6:
         34:8d:cc:e1:94:0c:35:79:66:0b:27:9b:f2:4f:5a:67:bd:59:
         2e:a1:1e:df:38:84:3d:81:0f:c6:34:9e:af:60:47:aa:a6:a1:
         1f:3c:d7:0e:0d:a6:25:d3:17:fc:5a:58:b2:ec:58:07:a3:d5:
         86:98:e5:34:ec:d2:6a:5f:a7:94:ca:b4:fa:db:04:23:c4:e7:
         26:1d:4d:cc:59:8a:4c:d0:37:32:4e:1d:a1:06:89:0d:ff:72:
         ac:5f:7c:70:be:a9:39:1f:ff:4b:12:0e:b5:22:2b:4e:9f:eb:
         c7:d1:4c:fb:d2:c5:61:7d:be:cf:e9:26:b5:d7:b1:48:2d:40:
         99:3e:00:de:8f:12:98:a2:ba:c6:bc:9b:81:50:2c:4a:f4:7a:
         db:a2:50:8f:0c:d0:09:7b:98:59:ab:f0:8d:97:bf:24:b9:75:
         f5:66:c4:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 12 20:26:24 2024 by rpki-client on console-ams.rpki-client.org