Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A917F241/EB2136880BF611EF9CA9C151C4F9AE02/7434811060E211EFBAE0C52FC4F9AE02.roa
File:                     7434811060E211EFBAE0C52FC4F9AE02.roa (raw, json)
Hash identifier:          182l8b9p/OlfyaygMCMB4sCC54jSfxtVFJlOaiNG5UI=
Subject key identifier:   73:A5:74:4B:38:74:0E:37:81:91:99:90:87:50:13:78:D8:18:67:0C
Certificate issuer:       /CN=A917F241/serialNumber=29CD8DF8806E11674CBC5F9DF4DBF8D23E0C2283
Certificate serial:       3E
Authority key identifier: 29:CD:8D:F8:80:6E:11:67:4C:BC:5F:9D:F4:DB:F8:D2:3E:0C:22:83
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Kc2N-IBuEWdMvF-d9Nv40j4MIoM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A917F241/EB2136880BF611EF9CA9C151C4F9AE02/7434811060E211EFBAE0C52FC4F9AE02.roa
Signing time:             Thu 22 Aug 2024 23:58:40 +0000
ROA not before:           Thu 22 Aug 2024 23:58:40 +0000
ROA not after:            Mon 30 Dec 2024 00:00:00 +0000
asID:                     136953
IP address blocks:        103.100.26.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A917F241/EB2136880BF611EF9CA9C151C4F9AE02/Kc2N-IBuEWdMvF-d9Nv40j4MIoM.crl
                          rsync://rpki.apnic.net/member_repository/A917F241/EB2136880BF611EF9CA9C151C4F9AE02/Kc2N-IBuEWdMvF-d9Nv40j4MIoM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Kc2N-IBuEWdMvF-d9Nv40j4MIoM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 24 Sep 2024 04:46:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 62 (0x3e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A917F241/serialNumber=29CD8DF8806E11674CBC5F9DF4DBF8D23E0C2283
        Validity
            Not Before: Aug 22 23:58:40 2024 GMT
            Not After : Dec 30 00:00:00 2024 GMT
        Subject: CN=66c7d0b0-e27b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f9:c4:6c:4e:d7:be:95:a2:a3:97:2e:ab:4f:5a:
                    a3:e7:fb:a1:82:05:93:e6:e6:5d:e9:20:31:18:4f:
                    83:ca:79:f2:3c:80:1b:bb:f8:c6:c0:97:73:51:e2:
                    00:48:3f:4f:c7:a5:73:24:9d:cf:96:09:af:1f:80:
                    f3:d0:c9:65:d6:ac:af:78:0c:cf:15:ef:1f:02:05:
                    68:dc:1f:de:7d:6a:8d:a7:44:28:11:95:9b:cc:36:
                    71:88:c5:a3:e0:7b:1f:0b:a2:c5:00:53:43:b3:15:
                    cf:3d:79:b6:48:4a:88:ab:1c:25:ce:46:fa:aa:9b:
                    6d:58:45:ff:14:d9:b6:f1:ff:41:7a:e1:42:95:aa:
                    2b:4a:81:dd:0a:4f:ae:25:d0:8d:f5:5a:4f:cc:59:
                    8f:e4:7a:47:ec:ea:bb:30:a9:bf:d1:94:9b:c3:35:
                    1c:c5:e2:ad:b2:75:7a:d6:5a:a3:81:2f:d6:c9:7a:
                    fc:ae:d0:36:23:ec:33:ac:4b:66:07:87:98:9e:48:
                    22:91:56:c3:4c:94:d5:57:df:b7:6a:a6:8b:cf:74:
                    76:56:32:4b:c9:da:ce:bf:6b:51:eb:38:2d:3e:23:
                    93:cd:a9:c0:08:28:8e:9a:48:71:48:03:a8:24:bd:
                    a0:27:6d:dc:16:68:3e:3d:9d:df:14:9b:90:bc:d7:
                    bd:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                73:A5:74:4B:38:74:0E:37:81:91:99:90:87:50:13:78:D8:18:67:0C
            X509v3 Authority Key Identifier:
                keyid:29:CD:8D:F8:80:6E:11:67:4C:BC:5F:9D:F4:DB:F8:D2:3E:0C:22:83

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A917F241/EB2136880BF611EF9CA9C151C4F9AE02/Kc2N-IBuEWdMvF-d9Nv40j4MIoM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Kc2N-IBuEWdMvF-d9Nv40j4MIoM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917F241/EB2136880BF611EF9CA9C151C4F9AE02/7434811060E211EFBAE0C52FC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.100.26.0/24

    Signature Algorithm: sha256WithRSAEncryption
         2c:a7:c6:0f:59:8a:09:67:70:7f:9a:3a:f7:64:4e:38:60:1c:
         19:fb:c1:ff:ab:ee:46:95:4b:57:00:22:3d:f7:04:1c:99:09:
         dd:64:82:ee:6e:51:47:f6:f7:06:3e:02:27:17:0b:91:29:fd:
         4e:da:b7:75:95:85:c1:6a:51:f5:ed:fe:e5:ad:9c:5f:f8:40:
         40:1a:ef:02:e1:86:94:cd:ac:40:8f:29:ae:6e:8b:9c:91:0b:
         7b:2b:9f:ef:a8:15:e1:f0:07:55:9d:95:fa:35:1a:2f:2b:53:
         5d:ff:d4:92:bd:2d:0f:c2:7c:9f:2d:bf:39:b2:ce:06:e4:9f:
         c5:1d:70:13:3c:34:a1:26:6f:42:ab:56:1c:72:2b:3e:b8:2e:
         e1:cf:9d:41:1f:b0:17:7d:0d:44:22:94:53:55:47:fa:9c:eb:
         f1:6a:f4:57:01:6f:29:ef:00:99:a0:d1:38:d9:d5:91:6d:40:
         f6:4f:36:43:e8:e0:b3:09:ae:22:ab:f0:91:f8:fb:a5:05:fb:
         49:8a:b1:00:9b:b7:1f:ce:de:e8:8b:34:7a:12:18:36:7f:a4:
         ca:db:2a:d0:25:ad:36:ee:ec:48:8d:ea:cd:4f:ba:98:bc:2d:
         f6:0f:0c:e6:97:a4:41:97:ef:bc:c9:40:64:ac:f3:2a:d9:1a:
         2e:5a:1e:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 17 06:07:29 2024 by rpki-client on console-fra.rpki-client.org