Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9188811/E03CC654E82611EE95BE714EC4F9AE02/B51FD00AE82711EEB8A9D24FC4F9AE02.roa
File:                     B51FD00AE82711EEB8A9D24FC4F9AE02.roa (raw, json)
Hash identifier:          o8veLlQ9shDH1ccvHhkwopJ92rLYRnjZ4hoJWn9PAqI=
Subject key identifier:   38:1F:4B:87:0E:4E:CA:D2:EA:6D:42:52:C2:6A:C9:05:A9:F7:2A:9D
Certificate issuer:       /CN=A9188811/serialNumber=1BA051DA193C0131B61A0A78806E2F3786CED0C1
Certificate serial:       08
Authority key identifier: 1B:A0:51:DA:19:3C:01:31:B6:1A:0A:78:80:6E:2F:37:86:CE:D0:C1
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/G6BR2hk8ATG2Ggp4gG4vN4bO0ME.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9188811/E03CC654E82611EE95BE714EC4F9AE02/B51FD00AE82711EEB8A9D24FC4F9AE02.roa
Signing time:             Fri 22 Mar 2024 08:41:08 +0000
ROA not before:           Fri 22 Mar 2024 08:41:08 +0000
ROA not after:            Sun 01 Dec 2024 00:00:00 +0000
asID:                     151630
IP address blocks:        103.143.26.0/24 maxlen: 24
                          103.143.27.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9188811/E03CC654E82611EE95BE714EC4F9AE02/G6BR2hk8ATG2Ggp4gG4vN4bO0ME.crl
                          rsync://rpki.apnic.net/member_repository/A9188811/E03CC654E82611EE95BE714EC4F9AE02/G6BR2hk8ATG2Ggp4gG4vN4bO0ME.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/G6BR2hk8ATG2Ggp4gG4vN4bO0ME.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 08 Jun 2024 08:57:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 8 (0x8)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9188811/serialNumber=1BA051DA193C0131B61A0A78806E2F3786CED0C1
        Validity
            Not Before: Mar 22 08:41:08 2024 GMT
            Not After : Dec  1 00:00:00 2024 GMT
        Subject: CN=65fd4424-df01
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:3c:a1:47:36:ce:84:df:bd:5e:df:f5:a0:5c:
                    97:52:cc:ba:2c:d7:51:38:02:74:62:03:5c:5c:39:
                    59:6e:9f:c8:05:80:b1:30:15:e5:13:1a:a9:f6:30:
                    a5:7f:2b:3a:23:6e:67:59:e0:19:2f:88:ae:97:5f:
                    7e:a4:06:e7:73:f9:af:4c:8d:23:76:8f:6d:25:ee:
                    76:31:cd:8c:27:76:ec:87:01:0b:3e:31:f3:2e:44:
                    30:40:2e:bb:cd:87:b3:a8:38:f4:e1:3e:07:3b:c6:
                    a2:50:8d:6f:bb:2c:df:c5:b3:b0:e3:93:cd:9a:23:
                    1a:ab:5e:d1:ee:89:9f:2c:cc:b7:8e:4a:00:ed:90:
                    9b:63:38:a6:5b:64:cb:85:d3:f8:37:1b:19:9b:ef:
                    0d:e6:6e:fb:28:4d:62:f8:50:1d:87:08:7d:85:07:
                    95:03:fb:65:31:54:06:58:51:f8:94:24:a9:3e:ba:
                    2f:7c:ae:cf:ec:31:4b:58:3d:1d:48:b4:ed:be:4f:
                    12:6b:04:bc:a8:87:39:ac:e2:b7:7b:97:ac:62:ed:
                    7a:39:13:59:d9:8b:45:39:9f:0b:30:fa:51:9f:ca:
                    1a:a9:57:5d:0a:62:c0:a6:57:30:42:fe:cb:90:b3:
                    ce:75:54:54:a2:9d:4e:59:6a:73:35:d6:d5:0d:74:
                    bb:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                38:1F:4B:87:0E:4E:CA:D2:EA:6D:42:52:C2:6A:C9:05:A9:F7:2A:9D
            X509v3 Authority Key Identifier:
                keyid:1B:A0:51:DA:19:3C:01:31:B6:1A:0A:78:80:6E:2F:37:86:CE:D0:C1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9188811/E03CC654E82611EE95BE714EC4F9AE02/G6BR2hk8ATG2Ggp4gG4vN4bO0ME.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/G6BR2hk8ATG2Ggp4gG4vN4bO0ME.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9188811/E03CC654E82611EE95BE714EC4F9AE02/B51FD00AE82711EEB8A9D24FC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.143.26.0/23

    Signature Algorithm: sha256WithRSAEncryption
         c6:a7:41:c2:46:cd:61:81:cf:d1:d5:2c:c4:73:29:82:e8:93:
         a9:27:57:ef:6d:57:0e:93:ff:e8:cc:fd:02:d2:b4:cc:30:72:
         de:d5:32:6e:6b:77:81:65:2f:30:f5:07:77:5d:8b:5c:42:da:
         ef:2c:61:e3:af:68:62:16:ea:01:4c:80:07:d9:24:d0:11:c1:
         f3:02:b8:a5:bb:dc:63:a1:ae:00:f9:d8:37:39:f9:1d:ca:d4:
         31:40:8e:2f:d3:99:a3:4c:31:ab:ed:44:30:cb:32:e6:53:aa:
         00:48:07:5f:ad:55:15:db:1f:63:bc:f3:69:a8:4f:3b:53:50:
         67:bb:18:1f:08:29:06:d7:bf:a6:d5:37:9f:80:ef:f3:f5:47:
         63:ce:63:13:96:e1:8f:63:8a:d4:fa:8c:c7:5c:42:ac:0a:a3:
         e0:a5:c8:4c:24:a0:92:c9:d5:40:11:1b:66:33:46:30:db:cd:
         70:ac:19:60:0e:01:50:7a:6e:a6:bb:cc:05:bf:ed:c5:03:82:
         75:02:9d:51:31:9b:bc:d1:32:42:96:b0:72:63:57:66:92:d2:
         90:b6:17:f3:69:c9:0c:24:f2:46:13:6d:ad:99:26:93:f3:15:
         dd:ca:1e:7e:22:6b:5e:60:ee:00:f6:4c:e8:34:4f:9c:26:f0:
         c1:1a:52:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 1 11:14:29 2024 by rpki-client on console-fra.rpki-client.org