Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91999F5/6A3DB5789F7911EC9CB47A0AC4F9AE02/F84777FCD9DC11EDA4083A71C4F9AE02.roa
File:                     F84777FCD9DC11EDA4083A71C4F9AE02.roa (raw, json)
Hash identifier:          NMqAki7QKbcI9560/QHlulosJMID1dw06paSnKMXxq0=
Subject key identifier:   49:C6:28:14:99:E9:7C:71:93:A9:9C:80:86:7D:5F:41:65:7B:44:26
Certificate issuer:       /CN=A91999F5/serialNumber=9212EEA2B91A32660F75271FEC8589B309C389F0
Certificate serial:       02C7
Authority key identifier: 92:12:EE:A2:B9:1A:32:66:0F:75:27:1F:EC:85:89:B3:09:C3:89:F0
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/khLuorkaMmYPdScf7IWJswnDifA.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91999F5/6A3DB5789F7911EC9CB47A0AC4F9AE02/F84777FCD9DC11EDA4083A71C4F9AE02.roa
Signing time:             Sat 06 Apr 2024 09:14:11 +0000
ROA not before:           Sat 06 Apr 2024 09:14:11 +0000
ROA not after:            Thu 01 May 2025 00:00:00 +0000
asID:                     55405
IP address blocks:        103.162.26.0/24 maxlen: 24
                          103.162.27.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91999F5/6A3DB5789F7911EC9CB47A0AC4F9AE02/khLuorkaMmYPdScf7IWJswnDifA.crl
                          rsync://rpki.apnic.net/member_repository/A91999F5/6A3DB5789F7911EC9CB47A0AC4F9AE02/khLuorkaMmYPdScf7IWJswnDifA.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/khLuorkaMmYPdScf7IWJswnDifA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 29 Nov 2024 20:43:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 711 (0x2c7)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91999F5/serialNumber=9212EEA2B91A32660F75271FEC8589B309C389F0
        Validity
            Not Before: Apr  6 09:14:11 2024 GMT
            Not After : May  1 00:00:00 2025 GMT
        Subject: CN=66111263-a6df
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:d7:f5:47:0c:6a:65:44:8b:1c:59:88:1c:35:
                    57:01:27:b7:be:09:e3:c2:7d:b5:b3:47:c0:89:a6:
                    eb:47:53:68:d7:65:ad:fe:d8:48:89:f0:4a:93:c8:
                    c3:d9:ea:7b:3c:b8:5e:6d:9f:e3:7d:79:3f:4c:1f:
                    4d:20:83:9a:ef:c0:95:3d:40:ad:91:39:ea:54:08:
                    97:0c:1e:3c:df:e6:e3:90:20:6f:0a:8b:dd:7c:ce:
                    c7:44:38:24:3c:d0:ba:f8:d3:fe:b5:14:d5:49:f2:
                    eb:84:a6:5c:71:61:30:1e:c2:99:3e:be:5c:38:68:
                    e9:73:5b:9a:bb:5a:37:3f:72:31:34:42:bf:0b:b7:
                    e7:50:fa:81:15:8c:bf:dd:a3:96:ea:b2:94:67:79:
                    0b:29:41:8a:2b:e2:4a:0f:9c:1b:e0:06:f0:37:2c:
                    e3:df:90:f9:4c:73:9f:7f:bc:c4:c6:20:fc:89:3d:
                    66:69:4c:4b:0b:e4:3b:f8:bd:22:63:94:0e:a1:0b:
                    84:3e:aa:38:8c:c7:21:f6:32:0c:31:88:62:63:3d:
                    c4:c6:2f:05:44:ef:88:66:6f:67:49:e6:fe:da:f7:
                    41:c6:85:43:d2:bf:79:61:54:ec:59:6a:5d:97:3b:
                    d3:af:95:80:fd:97:c5:98:f8:bc:2e:92:b7:e6:f0:
                    1e:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                49:C6:28:14:99:E9:7C:71:93:A9:9C:80:86:7D:5F:41:65:7B:44:26
            X509v3 Authority Key Identifier:
                keyid:92:12:EE:A2:B9:1A:32:66:0F:75:27:1F:EC:85:89:B3:09:C3:89:F0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91999F5/6A3DB5789F7911EC9CB47A0AC4F9AE02/khLuorkaMmYPdScf7IWJswnDifA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/khLuorkaMmYPdScf7IWJswnDifA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91999F5/6A3DB5789F7911EC9CB47A0AC4F9AE02/F84777FCD9DC11EDA4083A71C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.162.26.0/23

    Signature Algorithm: sha256WithRSAEncryption
         70:73:57:40:3e:f8:30:99:ac:40:79:cf:6c:8c:a5:6e:5b:bd:
         75:f3:70:56:a2:e0:80:8b:50:4c:24:8b:41:13:18:72:10:33:
         9b:17:26:0e:48:8b:68:18:a1:2b:17:bf:78:c8:c6:f2:e3:13:
         99:c3:df:f2:e8:dc:ca:63:1a:91:06:58:b9:fe:01:5a:d6:d0:
         33:a6:25:83:96:03:8f:38:10:c4:55:b6:45:79:48:5c:c6:9b:
         f1:c1:dd:c7:81:1b:e6:84:bd:f4:dd:7a:27:d8:5d:47:9e:ae:
         3e:96:04:bd:0d:b4:74:d8:c0:48:0f:30:6f:6d:12:9f:d6:b5:
         ea:8b:c2:f3:80:c2:00:80:5b:bf:16:be:90:80:61:62:2e:1a:
         9c:36:87:d7:09:b1:18:73:b6:19:42:61:1b:fc:df:d3:73:b3:
         b4:cb:bd:be:bf:4c:6b:78:6b:c1:29:72:7e:31:0e:9d:61:05:
         ed:3f:8e:c5:05:19:d1:5c:2e:ef:fc:9b:9e:b0:f3:92:b9:c8:
         8e:a6:fd:f7:d5:39:67:74:0f:92:d1:7e:5b:bf:5a:ee:0c:8d:
         13:91:2c:a7:65:41:fa:42:23:b6:39:37:15:37:c3:dc:ed:12:
         87:95:75:e1:f8:84:fd:77:fc:39:be:93:60:09:dc:b7:22:99:
         fc:15:94:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 02:33:42 2024 by rpki-client on console-fra.rpki-client.org