Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A918F550/8B9BD2021D8511E2B41230DC08B02CD2/9A31551A007911EFB9E2570FC4F9AE02.roa
File:                     9A31551A007911EFB9E2570FC4F9AE02.roa (raw, json)
Hash identifier:          /WkI9P2YYh4Vg+ygrnYMsFRJwTBS5KbFAzWLwGmGka8=
Subject key identifier:   4E:6C:F9:D2:EF:83:A1:96:36:27:02:D1:19:D8:D1:ED:B9:5A:58:66
Certificate issuer:       /CN=A918F550/serialNumber=A24B6A62044B70065F0506388460E4AF2F17F3FF
Certificate serial:       3426
Authority key identifier: A2:4B:6A:62:04:4B:70:06:5F:05:06:38:84:60:E4:AF:2F:17:F3:FF
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oktqYgRLcAZfBQY4hGDkry8X8_8.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918F550/8B9BD2021D8511E2B41230DC08B02CD2/9A31551A007911EFB9E2570FC4F9AE02.roa
Signing time:             Mon 22 Apr 2024 07:26:15 +0000
ROA not before:           Mon 22 Apr 2024 07:26:15 +0000
ROA not after:            Mon 30 Sep 2024 00:00:00 +0000
asID:                     136908
IP address blocks:        103.250.134.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918F550/8B9BD2021D8511E2B41230DC08B02CD2/oktqYgRLcAZfBQY4hGDkry8X8_8.crl
                          rsync://rpki.apnic.net/member_repository/A918F550/8B9BD2021D8511E2B41230DC08B02CD2/oktqYgRLcAZfBQY4hGDkry8X8_8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oktqYgRLcAZfBQY4hGDkry8X8_8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 23 May 2024 14:26:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 13350 (0x3426)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918F550/serialNumber=A24B6A62044B70065F0506388460E4AF2F17F3FF
        Validity
            Not Before: Apr 22 07:26:15 2024 GMT
            Not After : Sep 30 00:00:00 2024 GMT
        Subject: CN=66261117-b82a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:52:8e:e1:e7:70:72:14:c3:76:3f:1d:69:6a:
                    e6:7f:26:df:83:94:e0:1c:13:e9:80:14:54:2b:06:
                    6a:71:38:b5:95:a0:d7:bd:3d:3e:2c:19:c8:d7:41:
                    eb:4d:e5:57:21:df:9e:1b:51:0c:9f:82:53:03:4f:
                    a4:62:e1:f2:ac:63:84:4b:e4:d6:16:5a:23:4e:5a:
                    ac:b1:eb:42:71:b3:d1:ed:d9:3d:72:a8:7c:ad:5c:
                    ed:24:6a:f5:3b:f4:fe:f8:26:70:e7:96:7c:8d:d8:
                    d0:85:67:cf:6f:71:c1:f4:10:b4:5e:63:19:1f:ad:
                    52:58:da:de:2a:ba:cf:e4:bf:f8:b5:ba:07:1e:b1:
                    82:ed:02:67:5a:5e:54:85:79:c7:20:29:e2:80:f5:
                    51:ea:ed:2a:1c:3f:27:e6:d1:1a:e6:0a:cf:4d:89:
                    d4:94:92:cf:1d:ef:cf:5d:20:f9:e1:5b:4c:4b:b6:
                    a6:ac:02:7f:20:70:c9:76:96:7d:a9:ad:cf:44:92:
                    56:64:23:8a:bb:00:a8:ef:98:0a:08:29:61:77:72:
                    a8:ea:53:78:91:d4:3a:c0:28:08:23:b3:d0:85:85:
                    1c:f3:07:80:a3:ed:1d:e1:60:76:3c:69:bb:b8:17:
                    0f:02:44:3a:bc:9b:70:ba:18:b9:38:08:bc:02:90:
                    c8:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4E:6C:F9:D2:EF:83:A1:96:36:27:02:D1:19:D8:D1:ED:B9:5A:58:66
            X509v3 Authority Key Identifier:
                keyid:A2:4B:6A:62:04:4B:70:06:5F:05:06:38:84:60:E4:AF:2F:17:F3:FF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918F550/8B9BD2021D8511E2B41230DC08B02CD2/oktqYgRLcAZfBQY4hGDkry8X8_8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oktqYgRLcAZfBQY4hGDkry8X8_8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918F550/8B9BD2021D8511E2B41230DC08B02CD2/9A31551A007911EFB9E2570FC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.250.134.0/24

    Signature Algorithm: sha256WithRSAEncryption
         96:bf:2e:ce:35:0e:e5:07:c9:b2:ab:0c:13:9b:be:91:06:6b:
         47:82:74:41:cc:b1:aa:c1:63:79:8c:07:6f:03:de:24:db:b0:
         02:05:82:41:2c:c8:59:6b:30:52:9d:1d:1f:0d:1d:1e:fd:c3:
         da:ef:f1:91:94:0b:0f:b6:05:e7:d9:e7:20:63:00:9e:6e:3e:
         f4:37:b6:f9:e9:18:9e:21:21:3d:82:8a:a0:66:cb:18:2b:be:
         d3:80:c9:c8:4a:32:1f:20:db:fa:1d:cb:59:ec:a0:1a:8e:35:
         c7:03:fb:13:09:39:e5:c5:41:ed:c7:6c:fc:1a:54:08:46:b9:
         40:77:a7:3f:37:99:49:d5:34:27:e1:08:d8:7c:8d:ae:65:bb:
         fb:11:e7:34:20:70:68:df:1a:28:26:40:bd:65:a8:ff:cd:5a:
         63:9b:5c:a2:43:00:6c:43:07:6a:77:37:d8:82:f5:93:9a:97:
         4c:8d:c6:e7:64:13:f3:1f:4e:bd:d1:d3:a6:dc:2a:ea:c4:cb:
         66:11:94:e5:7b:95:8c:d0:0d:ba:e9:38:d1:f4:c0:af:2b:f3:
         ce:3b:58:b3:d3:69:3a:30:ee:b1:61:aa:6c:64:e9:62:14:e1:
         8e:78:ea:5c:bc:2e:7b:7b:9b:7b:5e:f6:7c:16:06:2e:0e:55:
         be:77:0b:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 16 15:21:29 2024 by rpki-client on console-ams.rpki-client.org