Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/26E6FF9CD46E11EEA186F52CC4F9AE02.roa
File:                     26E6FF9CD46E11EEA186F52CC4F9AE02.roa (raw, json)
Hash identifier:          7a70nJHNYO10ORGCyFZBxobG86OAIrQmtAhP3UO12hA=
Subject key identifier:   A9:CF:DB:59:DF:D2:A4:0F:43:CA:11:AC:45:01:21:93:7C:0F:11:EB
Certificate issuer:       /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Certificate serial:       838D
Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/26E6FF9CD46E11EEA186F52CC4F9AE02.roa
Signing time:             Mon 26 Feb 2024 06:13:26 +0000
ROA not before:           Mon 26 Feb 2024 06:13:26 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     135818
IP address blocks:        103.78.12.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
                          rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 03 May 2024 15:38:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 33677 (0x838d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
        Validity
            Not Before: Feb 26 06:13:26 2024 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=65dc2c06-52d6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:7d:7f:aa:5f:76:b6:7f:5e:32:e8:fc:29:ce:
                    99:72:2c:1e:a1:0f:ac:ef:63:15:13:ad:cc:55:ad:
                    56:75:fa:b4:9d:67:68:9f:0b:df:cb:54:8f:76:0f:
                    d2:56:50:b7:97:3e:b4:b5:62:a4:47:e7:60:3e:7c:
                    dc:ee:b9:bf:de:6e:1c:80:d1:e9:be:1c:63:0a:d8:
                    2e:df:60:ac:57:30:31:36:13:4b:a9:8c:93:53:80:
                    84:82:01:d7:db:02:2c:a9:03:f6:00:87:bc:c5:85:
                    ed:f4:d9:09:07:f5:2b:7b:b8:08:d4:f5:6f:b5:f9:
                    48:79:8f:3e:95:21:68:b2:59:dc:e8:8e:69:6e:01:
                    10:b6:71:fd:0e:82:99:1a:2e:65:2c:ea:90:f6:35:
                    7c:f9:30:62:40:66:c2:a8:7c:6f:8d:1b:50:2c:38:
                    36:20:d5:81:34:ff:23:f2:b5:69:44:ef:7a:e7:dc:
                    4c:88:97:a8:e5:50:16:2a:96:59:78:8e:a4:44:64:
                    d7:13:ec:a3:bb:a8:18:82:84:fd:8f:00:6c:99:17:
                    fd:85:d8:1c:4e:37:02:89:1c:06:8b:71:ae:bf:62:
                    df:41:1e:9d:b0:49:6c:66:a4:e7:09:a9:ce:95:f2:
                    f1:90:52:98:41:f6:8c:39:13:4f:1d:2d:6f:54:9d:
                    24:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A9:CF:DB:59:DF:D2:A4:0F:43:CA:11:AC:45:01:21:93:7C:0F:11:EB
            X509v3 Authority Key Identifier:
                keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/26E6FF9CD46E11EEA186F52CC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.78.12.0/22

    Signature Algorithm: sha256WithRSAEncryption
         5f:0e:37:24:c0:24:69:e4:8e:07:71:fe:1b:a4:6c:6b:f4:7d:
         82:dc:68:f4:04:c5:02:54:b5:83:90:5c:d8:8c:82:b7:c5:8d:
         3b:a1:44:8a:f7:cf:a7:3e:72:52:00:20:7a:31:51:4b:c0:61:
         76:68:f5:f4:f0:5b:c2:41:fe:80:27:40:ce:12:ea:4b:22:15:
         00:21:00:15:ab:c3:6c:41:e2:87:81:be:20:e0:53:08:42:cb:
         5b:52:9d:c7:91:cf:28:de:28:ca:db:4c:fb:d9:14:58:c8:11:
         21:d2:60:96:38:11:b0:53:bd:7e:ef:41:99:7b:7e:de:17:d3:
         eb:3e:db:a8:78:30:9d:03:8e:31:a4:f9:ba:60:ff:f1:22:0a:
         64:aa:31:70:55:d7:bb:50:7b:79:98:62:4b:e2:79:66:de:be:
         63:33:e6:3d:ad:f6:9a:99:64:1d:c2:d2:90:08:30:6b:46:0d:
         92:c3:0e:22:64:d8:54:9c:5f:b8:97:94:53:f8:b4:41:ff:d0:
         25:7d:ce:fa:56:7e:22:f9:42:aa:1e:5a:68:02:e5:23:6a:05:
         2b:71:19:fd:18:2c:5f:db:d3:54:50:ec:ce:b0:26:f6:b5:e4:
         60:fb:40:06:a2:25:73:c2:39:d0:83:63:fc:7a:2f:09:4d:f3:
         89:4c:6d:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 27 10:19:28 2024 by rpki-client on console-ams.rpki-client.org