Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9168B4A/0ADB17C0800A11E89B483E7CC4F9AE02/26F19BD2EFFE11EDA34BD84DC4F9AE02.roa
File:                     26F19BD2EFFE11EDA34BD84DC4F9AE02.roa (raw, json)
Hash identifier:          B5wGaPh3BXLhyJKchvo76mn/Myg3sojTpyVDrMgifgs=
Subject key identifier:   23:52:FE:A8:2A:4E:1D:B1:F0:26:05:55:B9:9F:8F:99:DC:28:8E:99
Certificate issuer:       /CN=A9168B4A/serialNumber=AF02511F7C80DFC0E8ED506F6630F67BD6400E09
Certificate serial:       12A6
Authority key identifier: AF:02:51:1F:7C:80:DF:C0:E8:ED:50:6F:66:30:F6:7B:D6:40:0E:09
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rwJRH3yA38Do7VBvZjD2e9ZADgk.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9168B4A/0ADB17C0800A11E89B483E7CC4F9AE02/26F19BD2EFFE11EDA34BD84DC4F9AE02.roa
Signing time:             Tue 04 Jul 2023 17:24:10 +0000
ROA not before:           Tue 04 Jul 2023 17:24:10 +0000
ROA not after:            Mon 30 Sep 2024 00:00:00 +0000
asID:                     18013
IP address blocks:        103.106.188.0/22 maxlen: 24
                          103.116.244.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9168B4A/0ADB17C0800A11E89B483E7CC4F9AE02/rwJRH3yA38Do7VBvZjD2e9ZADgk.crl
                          rsync://rpki.apnic.net/member_repository/A9168B4A/0ADB17C0800A11E89B483E7CC4F9AE02/rwJRH3yA38Do7VBvZjD2e9ZADgk.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rwJRH3yA38Do7VBvZjD2e9ZADgk.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 04 Jun 2024 17:38:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4774 (0x12a6)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9168B4A/serialNumber=AF02511F7C80DFC0E8ED506F6630F67BD6400E09
        Validity
            Not Before: Jul  4 17:24:10 2023 GMT
            Not After : Sep 30 00:00:00 2024 GMT
        Subject: CN=64a455ba-e5e7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:ed:99:42:b3:b3:e7:54:57:93:10:7d:d3:7d:
                    cb:c5:7f:2b:aa:cd:77:86:d4:9f:5b:eb:4e:e6:c8:
                    f5:58:eb:77:26:d2:a6:f3:fb:f8:87:d3:b8:87:87:
                    b8:49:79:86:2a:03:ae:d5:82:6d:db:d6:59:aa:a3:
                    4a:ba:69:4e:dc:07:99:43:7d:0f:76:6e:b2:2e:2f:
                    3f:9a:7a:d0:da:48:48:e3:d6:11:2a:45:a6:18:3a:
                    63:ac:9b:fc:72:1d:f0:8e:50:26:f3:47:e0:d4:18:
                    a4:1d:c9:8e:2d:85:ea:5f:fb:ef:e7:ca:c0:d1:52:
                    a6:1b:c5:e8:ab:21:15:ed:19:ff:c2:02:49:06:5a:
                    7e:53:15:e7:03:c0:2c:ef:8a:3d:b8:b5:80:da:b4:
                    16:47:14:1f:84:6c:37:67:05:f9:54:4f:37:4f:bc:
                    b5:b3:d5:bd:16:27:51:d1:d4:f4:86:86:41:8a:15:
                    93:5b:7a:82:1a:d9:2e:3a:67:f6:b0:37:48:c3:5c:
                    1c:32:b2:bf:83:23:ac:a1:46:56:f3:d6:72:c2:46:
                    f6:b1:5f:07:e8:e1:f1:db:52:1f:c6:7d:af:64:6f:
                    0d:c6:19:26:1c:98:87:fc:83:60:af:c3:e1:a0:2e:
                    7e:dd:b7:4c:a3:96:43:e0:41:d3:9d:c2:6b:b6:2e:
                    6f:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                23:52:FE:A8:2A:4E:1D:B1:F0:26:05:55:B9:9F:8F:99:DC:28:8E:99
            X509v3 Authority Key Identifier:
                keyid:AF:02:51:1F:7C:80:DF:C0:E8:ED:50:6F:66:30:F6:7B:D6:40:0E:09

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9168B4A/0ADB17C0800A11E89B483E7CC4F9AE02/rwJRH3yA38Do7VBvZjD2e9ZADgk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rwJRH3yA38Do7VBvZjD2e9ZADgk.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9168B4A/0ADB17C0800A11E89B483E7CC4F9AE02/26F19BD2EFFE11EDA34BD84DC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.106.188.0/22
                  103.116.244.0/22

    Signature Algorithm: sha256WithRSAEncryption
         65:ad:b7:3f:8e:6a:f9:77:91:88:6c:c0:b5:1b:62:ce:a6:1f:
         47:5f:8c:90:5c:bd:21:d3:7c:c7:d1:a4:6b:9c:7a:79:a4:7b:
         0b:68:04:b0:00:ad:4e:ec:50:66:2f:69:e3:8c:7c:77:58:37:
         98:35:84:83:18:a0:9e:64:51:b3:a8:70:99:0c:7e:df:0a:97:
         fd:bc:07:1c:69:93:25:65:96:38:14:68:bd:cb:d9:fd:ae:3b:
         85:61:68:f0:b6:07:ba:56:81:10:7d:69:34:b0:5c:e5:37:57:
         5c:54:cc:68:44:2b:2d:d4:d6:e6:b6:62:50:40:e4:67:46:aa:
         b5:be:f5:cf:7b:6a:f6:26:43:c7:b9:01:d7:ca:69:e7:cf:0f:
         2c:c3:70:69:32:74:c3:0a:37:cb:e6:b7:11:6e:49:2a:1b:27:
         54:c2:6e:d9:e1:4c:8d:35:7c:f3:e6:6c:08:c9:3f:fb:a6:bf:
         24:73:f9:b5:19:55:c8:13:a8:3c:f8:e1:7c:47:4f:1a:8f:67:
         46:56:70:b9:12:bb:b4:e3:f8:6e:08:27:93:cc:de:fa:bc:65:
         8a:bc:92:ab:1e:d1:f3:38:76:0a:bc:c3:36:95:d0:e8:31:b1:
         7d:93:48:65:7d:13:db:40:2f:68:d1:1d:bc:72:6d:d9:a0:ef:
         26:00:d7:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 28 19:32:34 2024 by rpki-client on console-ams.rpki-client.org