Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/50E451164DB911ECA260B286C4F9AE02.roa
File:                     50E451164DB911ECA260B286C4F9AE02.roa (raw, json)
Hash identifier:          l6NFLjJPrzyP3sY1JatqTQ7NgVKmkDjUTujWAlsFdfA=
Subject key identifier:   C8:86:BB:85:6C:DF:B6:AE:C3:51:91:38:21:49:23:EF:89:FB:51:FF
Certificate issuer:       /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Certificate serial:       6D14
Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/50E451164DB911ECA260B286C4F9AE02.roa
Signing time:             Wed 10 May 2023 16:27:35 +0000
ROA not before:           Wed 10 May 2023 16:27:35 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     137590
IP address blocks:        103.116.26.0/23 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
                          rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 03 May 2024 15:38:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 27924 (0x6d14)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
        Validity
            Not Before: May 10 16:27:35 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=645bc5f7-2f2f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:0f:10:4d:6c:66:5b:8f:e0:98:e5:cd:db:40:
                    89:bf:4b:85:07:70:0e:90:4a:06:e3:c5:07:86:c1:
                    f6:2b:e1:20:51:a7:0c:1c:fa:94:ed:65:87:8e:f4:
                    eb:06:fa:a4:4a:33:a0:54:a4:9f:c5:db:a4:fb:00:
                    12:7e:09:f2:06:39:12:0b:0f:55:95:23:4b:ba:cb:
                    e7:a8:13:3c:c9:cb:35:ba:0a:d8:fc:60:e5:64:8a:
                    ef:e2:80:04:93:73:14:d3:f8:62:d3:7e:45:b5:8f:
                    78:6e:ab:90:e4:e5:5f:5f:3b:91:88:58:68:2d:bf:
                    3c:99:1c:a2:34:9e:5e:c0:d9:48:39:6f:86:71:39:
                    fc:4c:78:f7:ef:e6:b4:98:c9:ef:b2:92:83:52:b8:
                    0d:19:9c:bf:f7:66:38:0d:53:64:d1:28:c5:b3:b7:
                    ab:b0:6d:83:ab:62:70:ed:79:10:da:d7:dc:be:eb:
                    a2:79:e9:74:d7:29:45:a6:aa:95:7d:fd:4c:a1:0e:
                    19:6e:6c:25:63:1b:21:25:6c:a4:bf:e4:f9:e1:f0:
                    11:aa:8a:56:d6:79:8e:c0:5b:4b:e3:22:3a:32:1d:
                    a4:ae:12:32:78:6f:2d:f1:b7:2e:ab:e4:34:ee:e4:
                    94:6e:e4:2b:65:d0:7c:85:49:d9:ab:00:14:bc:52:
                    1b:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C8:86:BB:85:6C:DF:B6:AE:C3:51:91:38:21:49:23:EF:89:FB:51:FF
            X509v3 Authority Key Identifier:
                keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/50E451164DB911ECA260B286C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.116.26.0/23

    Signature Algorithm: sha256WithRSAEncryption
         3d:29:00:87:51:c3:18:88:fb:a2:99:ad:af:31:6d:64:3d:db:
         9e:3c:02:66:24:5d:68:bd:0b:4d:6c:eb:3b:a2:8f:2d:bd:dc:
         9b:35:90:59:a3:c4:1b:14:56:cf:e8:8d:7a:0c:8a:b4:3c:ce:
         96:8b:ce:69:8a:c5:c0:fd:22:55:2f:0f:02:2b:f1:92:0c:eb:
         e2:ab:2e:31:02:c1:19:10:a3:34:e4:17:de:8f:51:a4:c8:0a:
         42:7a:ef:28:ee:92:f5:e9:5b:db:89:24:e4:02:30:0a:92:1c:
         4e:dc:6e:16:e6:c8:c5:2d:e4:be:03:49:d2:c6:35:9e:3d:42:
         ad:e2:70:c5:55:0a:31:64:da:82:b3:29:a9:08:27:0b:6c:71:
         4a:59:b9:81:ee:34:73:08:fe:75:10:12:11:1c:d6:e2:84:23:
         b9:83:6e:11:b2:26:ba:bd:2b:6a:d9:ca:de:ee:8c:37:0e:00:
         a5:a2:66:89:a7:0b:63:e8:ff:ff:71:4d:db:68:30:eb:81:15:
         de:5e:be:f3:13:44:b8:e3:5b:08:a8:09:a2:4f:98:9c:df:b6:
         bd:01:69:f8:10:45:38:24:a9:97:90:e8:4d:fb:12:87:e0:5a:
         c4:5a:a3:dc:96:b1:c7:ad:eb:5e:30:2e:e6:44:be:df:46:37:
         9e:5f:fd:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 27 10:19:33 2024 by rpki-client on console-ams.rpki-client.org