Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91E4042/EFC98DE6E53611EB9926556BC4F9AE02/26F1B59437A511ECB73C9852C4F9AE02.roa
File:                     26F1B59437A511ECB73C9852C4F9AE02.roa (raw, json)
Hash identifier:          KzbXcSqsoOTzYpQav+yPb9SajNcG/VLMi+5XOT5YLHM=
Subject key identifier:   45:79:E3:3F:BC:50:C4:6F:BC:5B:D9:55:64:F7:A0:5F:52:98:23:AB
Certificate issuer:       /CN=A91E4042/serialNumber=4F332DC08C9747AC9BC81C547D1BA345643F76B7
Certificate serial:       0407
Authority key identifier: 4F:33:2D:C0:8C:97:47:AC:9B:C8:1C:54:7D:1B:A3:45:64:3F:76:B7
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TzMtwIyXR6ybyBxUfRujRWQ_drc.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91E4042/EFC98DE6E53611EB9926556BC4F9AE02/26F1B59437A511ECB73C9852C4F9AE02.roa
Signing time:             Thu 13 Jul 2023 00:41:00 +0000
ROA not before:           Thu 13 Jul 2023 00:41:00 +0000
ROA not after:            Mon 30 Sep 2024 00:00:00 +0000
asID:                     142424
IP address blocks:        103.168.38.0/23 maxlen: 23
                          103.168.38.0/24 maxlen: 24
                          103.168.39.0/24 maxlen: 24
                          2001:df6:ca80::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91E4042/EFC98DE6E53611EB9926556BC4F9AE02/TzMtwIyXR6ybyBxUfRujRWQ_drc.crl
                          rsync://rpki.apnic.net/member_repository/A91E4042/EFC98DE6E53611EB9926556BC4F9AE02/TzMtwIyXR6ybyBxUfRujRWQ_drc.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TzMtwIyXR6ybyBxUfRujRWQ_drc.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 24 May 2024 00:51:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1031 (0x407)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91E4042/serialNumber=4F332DC08C9747AC9BC81C547D1BA345643F76B7
        Validity
            Not Before: Jul 13 00:41:00 2023 GMT
            Not After : Sep 30 00:00:00 2024 GMT
        Subject: CN=64af481c-113d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:86:b5:fa:69:ae:db:7d:d3:46:e0:58:b9:77:
                    00:82:f2:ed:31:b0:6e:11:db:45:3e:0e:b6:12:66:
                    e4:41:5e:0e:8a:c3:27:b6:dd:9e:d6:81:a2:55:bc:
                    a2:8e:05:3c:29:22:a0:ef:a7:6e:c3:3b:3c:20:f3:
                    dd:9b:b5:92:c4:d2:5e:2e:82:85:d4:30:fd:ef:e3:
                    00:8a:d8:bb:d3:9a:67:aa:66:b0:95:4b:0e:ba:b0:
                    26:03:75:2c:46:ce:07:d3:1b:4b:8f:dc:a9:63:bf:
                    cf:d6:3b:45:92:17:a6:92:e6:5f:82:58:cf:13:19:
                    6f:bb:c3:88:b9:d8:79:97:1e:e0:77:bc:1c:d2:54:
                    8e:d5:71:17:ff:b7:4b:4b:b1:7a:e1:bf:ca:d1:a3:
                    b4:c1:b4:fb:0e:63:d5:c2:2d:90:5f:31:4b:7d:17:
                    dd:c3:0b:f6:b3:31:7d:fc:cd:07:7e:3e:56:16:6c:
                    26:ed:17:ce:8b:b1:24:87:a4:49:03:a5:19:d5:a6:
                    1a:6c:e1:3d:47:45:19:3e:6a:7a:d4:53:bc:23:53:
                    39:1d:db:2d:aa:45:0a:c9:67:c2:c9:70:76:c6:c8:
                    21:b1:3b:6d:e2:b8:39:f9:2a:e4:9b:6a:33:f5:78:
                    ea:ad:37:d4:7d:df:fd:7b:51:99:4e:e1:53:0e:04:
                    75:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                45:79:E3:3F:BC:50:C4:6F:BC:5B:D9:55:64:F7:A0:5F:52:98:23:AB
            X509v3 Authority Key Identifier:
                keyid:4F:33:2D:C0:8C:97:47:AC:9B:C8:1C:54:7D:1B:A3:45:64:3F:76:B7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91E4042/EFC98DE6E53611EB9926556BC4F9AE02/TzMtwIyXR6ybyBxUfRujRWQ_drc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TzMtwIyXR6ybyBxUfRujRWQ_drc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E4042/EFC98DE6E53611EB9926556BC4F9AE02/26F1B59437A511ECB73C9852C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.168.38.0/23
                IPv6:
                  2001:df6:ca80::/48

    Signature Algorithm: sha256WithRSAEncryption
         b2:55:eb:d2:ba:3b:67:38:e5:e1:b4:17:38:b1:e3:e5:29:a4:
         9b:15:cd:62:d1:26:f2:2e:44:4e:ef:bc:9b:a9:8c:38:73:2e:
         b1:e7:35:fd:73:c4:2f:f3:2e:7b:d9:d0:75:2d:8e:a2:ae:c2:
         ec:94:6d:b1:d2:bb:1f:38:d7:0a:e7:b8:c8:22:69:de:f2:7c:
         16:4a:55:de:0c:d5:37:e8:31:7a:74:4f:be:c7:cf:1d:0b:9a:
         71:54:e2:7d:09:99:1f:ed:13:78:fb:88:49:62:9f:08:2e:ea:
         4a:01:ac:a9:a1:b6:e8:43:6d:e6:0d:f8:66:1c:01:66:4d:08:
         14:c3:b0:7c:de:75:94:2f:81:83:c2:7c:ea:a8:4d:99:9d:02:
         b8:b8:75:86:6e:26:11:cc:b3:1a:51:b4:a9:b8:e0:89:3d:08:
         6c:cd:d5:32:b6:e4:07:36:45:63:64:91:84:47:3e:53:a8:69:
         b7:20:8f:75:c3:71:85:ca:4f:a8:bf:ef:a3:f4:f2:a9:9b:1b:
         cc:b9:0a:12:41:b2:1a:c1:34:37:41:47:04:24:1a:c0:2c:cf:
         4e:9f:0b:55:59:c9:2f:45:45:3d:08:64:ad:cd:c8:e0:0a:70:
         2b:64:c1:03:50:9e:92:e1:71:be:11:09:16:ac:cd:d0:17:e4:
         df:59:7e:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 02:38:41 2024 by rpki-client on console-fra.rpki-client.org