Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/C92B915CF5F711EC9B35372AC4F9AE02.roa
File:                     C92B915CF5F711EC9B35372AC4F9AE02.roa (raw, json)
Hash identifier:          TGWD7nae0bOlxRzO31HzpkVaDyJL7XLG6t8ih2rjimg=
Subject key identifier:   F9:59:26:2F:1D:5D:87:E7:CA:E1:AF:D0:68:1E:9B:EC:F3:61:14:22
Certificate issuer:       /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Certificate serial:       708C
Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/C92B915CF5F711EC9B35372AC4F9AE02.roa
Signing time:             Wed 10 May 2023 16:44:06 +0000
ROA not before:           Wed 10 May 2023 16:44:05 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     149588
IP address blocks:        103.190.26.0/23 maxlen: 24
                          2001:df0:e2c0::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
                          rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 05 May 2024 15:26:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 28812 (0x708c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
        Validity
            Not Before: May 10 16:44:05 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=645bc9d5-16f9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ec:e6:78:6d:97:06:15:fe:22:07:dc:0c:03:8b:
                    ee:40:2a:e8:71:93:c7:f0:9c:c7:dd:26:f0:a0:4b:
                    9c:5f:2d:fb:25:95:be:0a:e3:f0:29:54:eb:f6:ea:
                    e0:19:0d:09:cc:3b:5a:b0:4c:c0:0d:9c:ab:68:d8:
                    57:73:22:f4:0f:d1:73:fd:8c:51:b9:ab:cc:48:84:
                    ca:60:64:78:90:b8:93:6e:a4:6d:fc:c4:82:a5:6d:
                    38:b7:46:a0:86:97:ec:20:b2:8e:b0:ed:be:12:4a:
                    ed:2e:2d:16:ea:44:dc:42:35:c8:d2:55:7c:df:f4:
                    0c:a8:45:b1:ee:0a:21:01:d0:0d:6a:4a:f2:4a:8a:
                    06:2c:c4:35:e1:5e:00:e7:c5:c4:4c:ac:a9:71:c1:
                    1c:ce:dc:43:f0:8e:e6:92:9c:f9:3b:f5:d0:d4:43:
                    ba:e8:87:95:e2:aa:22:ab:8c:b7:60:12:87:70:68:
                    0d:fa:17:32:30:f3:60:ef:b2:33:37:b1:6d:bb:d8:
                    0d:f1:8f:55:ea:ad:9c:23:6d:49:89:4b:2b:e3:8d:
                    d0:c2:cf:af:4c:ab:1f:7d:35:7d:df:0a:f6:43:54:
                    56:b8:d0:34:8b:17:95:8a:b3:ce:66:db:d1:f2:b8:
                    a7:9c:34:e9:8a:32:36:53:59:99:ac:89:f5:f6:d2:
                    86:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F9:59:26:2F:1D:5D:87:E7:CA:E1:AF:D0:68:1E:9B:EC:F3:61:14:22
            X509v3 Authority Key Identifier:
                keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/C92B915CF5F711EC9B35372AC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.190.26.0/23
                IPv6:
                  2001:df0:e2c0::/48

    Signature Algorithm: sha256WithRSAEncryption
         ba:2f:69:a6:87:03:88:36:7b:72:06:b2:bb:b1:57:32:df:34:
         44:c1:3d:26:99:90:52:f5:b8:05:20:19:61:e5:22:5f:e5:02:
         d8:b5:c4:a1:3a:92:ca:20:7b:45:a3:3f:04:9f:61:d0:65:b2:
         f8:6b:0c:37:26:40:d1:4f:fc:c5:f3:35:24:a0:61:71:cc:24:
         99:df:05:57:6b:66:42:10:d4:ba:5d:ce:80:17:45:93:89:1a:
         24:27:17:59:97:05:fb:7c:d3:0d:22:96:36:a7:86:52:d9:1e:
         ce:51:f0:b4:27:f0:f0:99:1d:4e:66:ba:04:fc:dd:3f:f0:e6:
         5c:bc:9f:e2:5f:8f:c6:ca:af:59:a3:c9:f6:71:c9:b3:89:e2:
         1f:28:2c:96:f7:5b:73:93:94:51:5a:cf:45:bc:90:ee:9d:75:
         64:bd:ed:3d:1d:37:b2:e2:c8:d1:a1:1e:56:85:51:f1:5e:16:
         41:ff:ed:6d:b8:97:14:a6:57:7e:11:7b:34:7a:15:a2:c6:55:
         57:7a:50:ea:93:fb:b9:bc:b5:28:b6:9a:34:2b:17:40:2f:f6:
         e8:3a:9b:66:f0:39:19:00:e0:ea:dd:52:2b:a7:f1:c5:2c:23:
         65:89:39:29:2d:10:b4:93:0c:8f:d2:a4:6f:2c:0b:5b:dd:40:
         87:7e:73:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 28 16:49:33 2024 by rpki-client on console-ams.rpki-client.org