Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A915BFDA/68127E200F4B11EAADA37977C4F9AE02/26F408FA027011EB98FEC44BC4F9AE02.roa
File:                     26F408FA027011EB98FEC44BC4F9AE02.roa (raw, json)
Hash identifier:          33YWKCkd+q28/qlexqwhaZMF81ot789FXZXqEdaVWjk=
Subject key identifier:   7F:D3:36:D6:91:A1:FE:04:C1:B7:28:97:56:84:DD:40:5C:E9:68:E8
Certificate issuer:       /CN=A915BFDA/serialNumber=5AC7615C459B7881037D75E5651A4CEC36F7EF91
Certificate serial:       0B2C
Authority key identifier: 5A:C7:61:5C:45:9B:78:81:03:7D:75:E5:65:1A:4C:EC:36:F7:EF:91
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WsdhXEWbeIEDfXXlZRpM7Db375E.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A915BFDA/68127E200F4B11EAADA37977C4F9AE02/26F408FA027011EB98FEC44BC4F9AE02.roa
Signing time:             Sat 20 Jan 2024 19:27:28 +0000
ROA not before:           Sat 20 Jan 2024 19:27:28 +0000
ROA not after:            Sun 02 Mar 2025 00:00:00 +0000
asID:                     137443
IP address blocks:        103.145.38.0/23 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A915BFDA/68127E200F4B11EAADA37977C4F9AE02/WsdhXEWbeIEDfXXlZRpM7Db375E.crl
                          rsync://rpki.apnic.net/member_repository/A915BFDA/68127E200F4B11EAADA37977C4F9AE02/WsdhXEWbeIEDfXXlZRpM7Db375E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WsdhXEWbeIEDfXXlZRpM7Db375E.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 01 Dec 2024 17:11:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2860 (0xb2c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A915BFDA/serialNumber=5AC7615C459B7881037D75E5651A4CEC36F7EF91
        Validity
            Not Before: Jan 20 19:27:28 2024 GMT
            Not After : Mar  2 00:00:00 2025 GMT
        Subject: CN=65ac1ea0-bf4b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:ea:45:d2:23:07:a2:6a:f3:ff:2d:2f:89:4d:
                    35:49:5f:4c:e0:1e:3e:f2:50:b5:3f:11:a3:7d:e0:
                    6e:aa:81:53:68:c6:7f:8c:b6:2f:f7:04:b0:1c:98:
                    ae:df:3d:2c:4e:0a:a6:7b:a9:72:a4:4b:f5:eb:15:
                    02:fb:78:63:2a:e4:5d:47:d5:19:a8:cf:f5:d7:f0:
                    1f:ae:c0:cc:90:b4:30:48:08:28:0a:96:5c:10:8e:
                    19:29:b4:a6:90:8d:9c:0e:3d:f8:4e:d6:90:71:55:
                    c3:f6:17:21:f2:59:9c:0a:9a:70:1f:39:96:d3:bb:
                    cc:b8:0b:98:2f:76:16:d5:ea:64:07:59:6a:7a:ae:
                    e1:7a:11:b4:4a:3c:9b:4c:b9:d5:ca:7f:d8:37:aa:
                    c9:dd:dd:60:ce:61:09:d2:41:77:7f:95:97:a3:e6:
                    23:4e:eb:ae:9c:9a:3f:60:97:e2:5f:2f:67:f6:f3:
                    10:33:68:29:aa:4e:26:e1:7b:a9:5b:84:2a:59:e8:
                    99:8e:c0:1a:f6:a2:5f:f1:95:b2:95:b1:07:0f:8b:
                    89:2d:f3:01:4f:11:ca:b2:00:22:c5:09:f4:5b:2e:
                    e3:f6:e1:c5:18:e1:16:81:e2:fc:6e:80:55:8b:09:
                    d8:6a:0d:01:d8:af:ab:ea:a3:01:47:a5:14:b7:97:
                    0e:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7F:D3:36:D6:91:A1:FE:04:C1:B7:28:97:56:84:DD:40:5C:E9:68:E8
            X509v3 Authority Key Identifier:
                keyid:5A:C7:61:5C:45:9B:78:81:03:7D:75:E5:65:1A:4C:EC:36:F7:EF:91

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A915BFDA/68127E200F4B11EAADA37977C4F9AE02/WsdhXEWbeIEDfXXlZRpM7Db375E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WsdhXEWbeIEDfXXlZRpM7Db375E.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915BFDA/68127E200F4B11EAADA37977C4F9AE02/26F408FA027011EB98FEC44BC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.145.38.0/23

    Signature Algorithm: sha256WithRSAEncryption
         1d:1b:53:ea:7e:f6:49:1b:13:2b:62:c9:a3:a9:1c:83:43:25:
         97:0b:ea:02:22:59:6a:51:9f:29:d0:8d:bc:11:f1:3a:03:42:
         31:96:4d:4f:5c:3c:d4:c6:d6:67:39:79:95:df:f3:07:3b:e6:
         a2:b9:19:be:7d:54:39:c6:53:93:7c:47:8d:9a:7b:5e:6c:d5:
         ae:a9:77:6b:8d:20:95:71:a2:f0:ac:6e:78:6d:95:30:1a:cb:
         52:5a:40:b6:5f:3e:61:25:0a:ff:7b:72:37:83:4e:e0:93:2c:
         1d:b2:13:93:c3:01:5c:19:a4:0a:17:4e:19:e1:38:99:7b:11:
         6c:4e:8d:7b:77:03:04:3c:64:dc:40:34:30:a2:94:c7:53:ad:
         70:a7:27:30:58:64:dc:f5:e1:71:ec:e3:43:54:72:0e:30:52:
         37:c4:f0:32:42:b8:86:f9:6a:f5:66:50:87:ad:7f:92:60:32:
         da:d5:d4:5e:b5:e2:39:e6:5e:77:83:90:10:af:18:9d:fe:45:
         5b:1f:98:50:d2:15:51:84:f0:00:32:67:bb:57:74:23:10:77:
         d4:9f:f9:e5:50:1d:80:ec:f0:c4:0e:be:f3:9d:2e:3a:07:0f:
         aa:8a:ee:62:33:af:bb:b3:69:9e:4f:9d:a8:ef:b1:e1:03:f5:
         ee:9c:aa:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 24 19:46:56 2024 by rpki-client on console-fra.rpki-client.org