Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91C911D/7B13B3846C0311EB8844784BC4F9AE02/26FB999C92FC11EE9104E34AC4F9AE02.roa
File:                     26FB999C92FC11EE9104E34AC4F9AE02.roa (raw, json)
Hash identifier:          NBz1TRw0/NeMKLoDGjeCvyyLAZyG71SuKvi7RBEyTO4=
Subject key identifier:   5F:C2:44:3B:BF:30:E6:91:32:E2:12:07:A2:B8:2F:3A:16:33:36:53
Certificate issuer:       /CN=A91C911D/serialNumber=475B62A5F233ED05AC72D8781234E109BF3A908C
Certificate serial:       0605
Authority key identifier: 47:5B:62:A5:F2:33:ED:05:AC:72:D8:78:12:34:E1:09:BF:3A:90:8C
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/R1tipfIz7QWscth4EjThCb86kIw.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91C911D/7B13B3846C0311EB8844784BC4F9AE02/26FB999C92FC11EE9104E34AC4F9AE02.roa
Signing time:             Wed 03 Apr 2024 00:32:57 +0000
ROA not before:           Wed 03 Apr 2024 00:32:57 +0000
ROA not after:            Wed 28 May 2025 00:00:00 +0000
asID:                     132836
IP address blocks:        103.98.86.0/23 maxlen: 23
                          103.98.86.0/24 maxlen: 24
                          103.98.87.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91C911D/7B13B3846C0311EB8844784BC4F9AE02/R1tipfIz7QWscth4EjThCb86kIw.crl
                          rsync://rpki.apnic.net/member_repository/A91C911D/7B13B3846C0311EB8844784BC4F9AE02/R1tipfIz7QWscth4EjThCb86kIw.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/R1tipfIz7QWscth4EjThCb86kIw.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 19 Mar 2025 21:57:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1541 (0x605)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91C911D
        Validity
            Not Before: Apr  3 00:32:57 2024 GMT
            Not After : May 28 00:00:00 2025 GMT
        Subject: CN=660ca3b9-a89d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:d8:56:37:33:54:d7:ff:a6:04:78:80:47:a4:
                    f4:d3:88:92:eb:67:7c:5d:a5:64:70:a0:3d:2c:85:
                    5e:2a:dd:1a:e9:c4:01:da:5a:2e:e5:a8:f2:a9:96:
                    59:2d:3e:73:a9:72:ac:67:3e:7f:a7:d8:f4:0c:f5:
                    b4:ca:fb:78:24:87:6b:d6:e4:74:c6:94:bd:fe:b4:
                    d5:93:e1:f9:04:2f:c3:70:67:2c:83:e1:af:00:ff:
                    71:63:a2:52:28:92:54:c9:e0:16:70:fc:33:1e:c5:
                    9e:5e:29:aa:48:2c:82:ab:58:72:56:ab:2f:61:96:
                    96:72:b2:86:13:a6:15:b1:40:43:57:c5:a9:fe:57:
                    bc:a6:d5:1a:46:8e:2d:e8:4e:6c:80:61:1a:26:dc:
                    0e:33:82:67:59:10:66:5c:f6:d2:11:d9:fc:a3:f5:
                    2d:9b:23:2e:65:63:b3:36:bd:01:bd:d2:8e:9e:a4:
                    ac:11:16:ed:b1:89:bb:7b:2e:45:dd:81:0d:4d:69:
                    61:cb:69:ad:ab:6e:ea:84:e0:2c:38:ac:3c:12:9d:
                    ee:85:bb:40:5a:2b:c0:44:02:68:d6:b3:21:36:92:
                    83:f7:ce:55:8d:08:0a:2f:fc:0e:ee:ba:28:e8:9f:
                    56:04:77:fe:4a:0a:c2:21:5b:da:aa:77:44:2a:b6:
                    24:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5F:C2:44:3B:BF:30:E6:91:32:E2:12:07:A2:B8:2F:3A:16:33:36:53
            X509v3 Authority Key Identifier:
                keyid:47:5B:62:A5:F2:33:ED:05:AC:72:D8:78:12:34:E1:09:BF:3A:90:8C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91C911D/7B13B3846C0311EB8844784BC4F9AE02/R1tipfIz7QWscth4EjThCb86kIw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/R1tipfIz7QWscth4EjThCb86kIw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C911D/7B13B3846C0311EB8844784BC4F9AE02/26FB999C92FC11EE9104E34AC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.98.86.0/23

    Signature Algorithm: sha256WithRSAEncryption
         2c:ad:53:df:d4:7f:57:fa:2f:b9:f1:59:b8:61:14:5f:e2:c0:
         83:b0:fc:67:36:46:9f:9e:48:61:50:b4:d9:62:68:5e:f6:dd:
         a3:23:bf:38:8a:8f:0e:72:92:d2:5a:be:fb:f9:08:4c:eb:8f:
         fa:00:4b:90:0a:e4:2e:e7:28:ba:d4:c5:a9:60:b0:85:24:95:
         6a:e8:c4:fa:1c:69:66:80:2d:4b:7c:27:cb:bc:68:8d:71:37:
         9e:8f:de:2f:c3:b1:ac:9d:f9:59:89:90:d0:2a:f6:83:95:50:
         94:25:38:0b:8e:c9:5e:43:a5:3e:03:b4:49:72:e2:50:9f:d5:
         45:9a:27:0a:0e:05:3b:ad:31:d8:d4:a3:15:00:d0:68:09:65:
         4a:9e:e0:af:32:99:e9:84:da:8f:51:1d:1c:65:7d:f2:b3:c1:
         6a:53:53:fb:3e:e5:d4:ce:fd:21:a4:77:96:02:05:5e:4d:e3:
         5f:c1:bd:fa:66:af:6e:13:71:25:4b:60:27:69:42:10:59:a1:
         3e:c3:0e:c6:bb:10:4a:2d:6d:37:9b:d5:ee:fb:62:dd:6b:6f:
         7b:ea:ea:fc:02:c8:c7:57:ce:03:5a:dc:e7:62:79:27:d7:aa:
         dc:f8:66:74:75:de:07:ff:d1:5c:fa:a6:43:ec:df:6e:c4:ba:
         fe:fd:17:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 21:49:24 2025 by rpki-client