Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9186A4B/5DA5C2763EEA11E997B79831C4F9AE02/98783026EB5F11ECB4060F86C4F9AE02.roa
File:                     98783026EB5F11ECB4060F86C4F9AE02.roa (raw, json)
Hash identifier:          5KLzaxwqFiAw/m64WegkLhB0ZcHulm0eyER2YrcckJw=
Subject key identifier:   63:E7:AD:F3:80:FE:74:F3:21:03:48:F0:35:AB:D4:26:E0:3D:D8:EA
Certificate issuer:       /CN=A9186A4B/serialNumber=1563CCE89C5BAC3C104DED362B39F3B2F259F010
Certificate serial:       0F6F
Authority key identifier: 15:63:CC:E8:9C:5B:AC:3C:10:4D:ED:36:2B:39:F3:B2:F2:59:F0:10
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FWPM6JxbrDwQTe02KznzsvJZ8BA.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9186A4B/5DA5C2763EEA11E997B79831C4F9AE02/98783026EB5F11ECB4060F86C4F9AE02.roa
Signing time:             Sat 06 Apr 2024 18:26:42 +0000
ROA not before:           Sat 06 Apr 2024 18:26:42 +0000
ROA not after:            Wed 28 May 2025 00:00:00 +0000
asID:                     54574
IP address blocks:        103.135.248.0/22 maxlen: 24
                          2404:8840::/32 maxlen: 128

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9186A4B/5DA5C2763EEA11E997B79831C4F9AE02/FWPM6JxbrDwQTe02KznzsvJZ8BA.crl
                          rsync://rpki.apnic.net/member_repository/A9186A4B/5DA5C2763EEA11E997B79831C4F9AE02/FWPM6JxbrDwQTe02KznzsvJZ8BA.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FWPM6JxbrDwQTe02KznzsvJZ8BA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 27 Nov 2024 17:13:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3951 (0xf6f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9186A4B/serialNumber=1563CCE89C5BAC3C104DED362B39F3B2F259F010
        Validity
            Not Before: Apr  6 18:26:42 2024 GMT
            Not After : May 28 00:00:00 2025 GMT
        Subject: CN=661193e2-474d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f6:d5:88:38:cc:4e:b3:a7:a9:c9:5b:7d:8e:fd:
                    94:bb:ee:e0:82:7e:f0:aa:3f:3c:26:fb:0a:45:39:
                    5d:71:05:ae:72:4e:ff:8a:b8:3a:08:56:ee:e4:15:
                    fb:e9:45:80:c0:ff:48:6d:18:98:fd:c6:ed:25:73:
                    92:c6:ff:aa:ec:cd:c0:8e:96:00:5b:9f:38:39:16:
                    eb:c7:f1:91:40:08:f3:d7:97:a9:69:31:d8:bb:9c:
                    dc:25:9a:41:82:f4:68:67:d5:bd:f8:87:09:dd:10:
                    5c:c5:b4:82:e7:0f:65:88:03:9e:2f:0e:d7:fb:8c:
                    ce:78:c4:63:d7:48:d4:f3:61:ed:4e:00:f6:27:f3:
                    ba:fa:4b:cd:2c:d3:17:28:5a:6a:5a:af:f9:a6:65:
                    a2:ab:3f:28:3f:cd:67:50:e4:d3:26:15:fc:a3:6e:
                    97:ad:8c:d3:42:4f:81:a3:52:a5:4d:c8:58:b4:27:
                    8b:55:30:75:8a:f8:ce:d3:02:4b:bb:95:dd:85:35:
                    74:5c:08:09:9d:08:9a:98:2d:b1:e7:45:8c:61:c2:
                    30:d0:8a:e5:ba:5d:55:25:45:47:00:b9:9c:ce:db:
                    87:f4:07:c8:78:da:ff:be:c0:35:9b:60:51:eb:89:
                    1c:96:cb:11:9c:fc:37:af:f5:c8:d8:ee:ac:3d:06:
                    a4:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                63:E7:AD:F3:80:FE:74:F3:21:03:48:F0:35:AB:D4:26:E0:3D:D8:EA
            X509v3 Authority Key Identifier:
                keyid:15:63:CC:E8:9C:5B:AC:3C:10:4D:ED:36:2B:39:F3:B2:F2:59:F0:10

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9186A4B/5DA5C2763EEA11E997B79831C4F9AE02/FWPM6JxbrDwQTe02KznzsvJZ8BA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FWPM6JxbrDwQTe02KznzsvJZ8BA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9186A4B/5DA5C2763EEA11E997B79831C4F9AE02/98783026EB5F11ECB4060F86C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.135.248.0/22
                IPv6:
                  2404:8840::/32

    Signature Algorithm: sha256WithRSAEncryption
         98:45:9b:13:7d:0b:b9:d2:d4:c4:38:e4:5b:fa:be:ea:35:db:
         ac:1d:a4:b1:54:be:37:63:2b:01:54:a8:0d:c3:c7:6e:68:5a:
         f5:a0:ad:c5:85:b5:d9:e6:a4:c9:17:e7:3f:70:55:19:17:d1:
         ae:62:44:d6:da:1e:3b:6f:41:2c:e2:80:fe:a0:36:8f:6b:0b:
         92:f6:83:48:cb:5b:ac:ff:78:16:ea:2f:ba:66:3a:ff:c7:6f:
         3d:e9:48:42:63:d4:94:59:24:c8:aa:af:75:6d:ba:05:0b:30:
         72:78:ad:45:e7:d8:36:4c:d5:89:9a:1c:2e:1d:4a:b4:f6:50:
         18:b8:10:f5:a4:16:78:1c:38:fa:c3:0f:e6:01:35:74:bb:b0:
         f2:e4:5e:dd:e5:ff:e2:fe:52:46:4c:9a:93:c8:05:a0:cd:33:
         61:70:af:b5:f4:33:a0:83:bc:35:ef:91:b5:29:68:cb:81:9c:
         5f:a5:49:82:3d:60:54:9f:a3:c2:65:29:e6:24:5a:f7:a0:e7:
         ac:d0:6d:c0:8f:75:37:e9:6a:7f:43:8c:31:25:fd:1c:ac:63:
         fb:c9:11:3c:56:4d:92:81:4a:e5:33:2d:c6:86:df:bf:71:52:
         4c:9f:87:23:5a:15:f1:57:b1:8b:35:67:ca:04:8a:3c:f3:ce:
         a1:93:b3:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 20 18:45:01 2024 by rpki-client on console-fra.rpki-client.org