Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91E4E32/720959FC01C011EDBD7C6F58C4F9AE02/369904CE214211EEBA1B697AC4F9AE02.roa
File:                     369904CE214211EEBA1B697AC4F9AE02.roa (raw, json)
Hash identifier:          rmmRWoAn85F1vB7M51VTpiJz6tiwPhlt+YZ57n6t9So=
Subject key identifier:   09:C1:66:99:F0:12:1A:E6:B1:82:7D:2F:48:AE:17:CD:64:C8:D8:7B
Certificate issuer:       /CN=A91E4E32/serialNumber=A185C0C574829C5FCD71445449E534CDAEF41396
Certificate serial:       013A
Authority key identifier: A1:85:C0:C5:74:82:9C:5F:CD:71:44:54:49:E5:34:CD:AE:F4:13:96
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oYXAxXSCnF_NcURUSeU0za70E5Y.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91E4E32/720959FC01C011EDBD7C6F58C4F9AE02/369904CE214211EEBA1B697AC4F9AE02.roa
Signing time:             Thu 13 Jul 2023 05:57:56 +0000
ROA not before:           Thu 13 Jul 2023 05:57:56 +0000
ROA not after:            Sat 31 Aug 2024 00:00:00 +0000
asID:                     135602
IP address blocks:        103.26.9.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91E4E32/720959FC01C011EDBD7C6F58C4F9AE02/oYXAxXSCnF_NcURUSeU0za70E5Y.crl
                          rsync://rpki.apnic.net/member_repository/A91E4E32/720959FC01C011EDBD7C6F58C4F9AE02/oYXAxXSCnF_NcURUSeU0za70E5Y.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oYXAxXSCnF_NcURUSeU0za70E5Y.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 24 May 2024 04:25:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 314 (0x13a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91E4E32/serialNumber=A185C0C574829C5FCD71445449E534CDAEF41396
        Validity
            Not Before: Jul 13 05:57:56 2023 GMT
            Not After : Aug 31 00:00:00 2024 GMT
        Subject: CN=64af9264-ddf5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:36:2e:8c:a4:7f:c7:bc:1e:d2:6d:01:f6:42:
                    47:f2:79:f4:f1:03:e3:34:8f:00:3c:cc:71:ab:7a:
                    fe:27:e7:8f:2b:52:5b:06:ce:cb:7b:c7:5d:52:6d:
                    2f:f1:36:09:a8:42:90:43:3d:ea:5e:44:d1:fb:f1:
                    27:24:df:fc:5b:9d:b4:12:0e:1d:73:a7:8a:7b:6a:
                    fa:65:23:89:e9:95:16:04:5c:25:6b:14:59:37:02:
                    fa:7a:ea:75:77:76:82:95:5f:35:83:27:46:6a:26:
                    38:2b:73:55:79:10:6b:24:2d:19:44:97:cd:2d:36:
                    ee:cd:e1:35:ed:ff:f3:2b:53:c8:d2:c5:02:c2:29:
                    14:de:2f:d9:2c:50:19:d5:48:59:91:68:3e:63:77:
                    59:79:35:a1:cb:72:59:ba:23:2e:a1:0e:f5:bd:e0:
                    48:e3:fc:fb:77:d0:9e:52:a0:f6:09:0d:a7:a5:9c:
                    0c:c7:d8:90:6f:4b:7f:78:3e:c6:b7:3b:c4:bf:b4:
                    19:cc:21:90:6e:32:bf:9a:50:c7:08:4e:fd:eb:ed:
                    4c:ef:c5:23:17:fe:21:3a:80:a9:78:73:2e:67:36:
                    de:30:cf:e8:73:51:ad:fb:f3:51:71:dd:9a:81:0c:
                    26:66:95:43:34:f1:93:88:f0:7e:8f:5d:29:cf:7c:
                    ac:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                09:C1:66:99:F0:12:1A:E6:B1:82:7D:2F:48:AE:17:CD:64:C8:D8:7B
            X509v3 Authority Key Identifier:
                keyid:A1:85:C0:C5:74:82:9C:5F:CD:71:44:54:49:E5:34:CD:AE:F4:13:96

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91E4E32/720959FC01C011EDBD7C6F58C4F9AE02/oYXAxXSCnF_NcURUSeU0za70E5Y.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oYXAxXSCnF_NcURUSeU0za70E5Y.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E4E32/720959FC01C011EDBD7C6F58C4F9AE02/369904CE214211EEBA1B697AC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.26.9.0/24

    Signature Algorithm: sha256WithRSAEncryption
         af:14:78:a8:b9:0c:32:17:76:4e:1b:27:a8:66:4f:d3:03:bd:
         b6:b7:42:a7:92:bd:d5:3e:1c:fa:6e:62:fe:ea:d3:3c:d9:8c:
         d6:5d:4f:7e:8f:84:24:43:9f:e6:24:a9:54:2b:2a:9b:bd:dc:
         90:de:87:c9:db:4d:a0:12:38:71:5d:07:15:16:7c:96:da:19:
         c6:a3:cf:3d:11:c3:19:dd:81:14:88:0c:7d:a9:10:a6:50:18:
         43:fd:f7:ad:11:c6:3d:9a:66:af:c4:43:ac:6b:ec:86:59:32:
         23:01:e5:c3:1a:d8:12:02:e8:c0:d8:1d:c7:ba:e9:11:95:82:
         53:05:a8:ac:46:cf:7b:8a:69:fb:e1:b3:d7:9f:0d:34:31:fa:
         68:8b:fc:69:02:b7:76:77:5d:45:20:7b:f5:93:d8:73:e7:56:
         c8:95:1d:ad:ef:38:cd:65:e6:20:13:ed:19:a4:df:4a:d4:d5:
         2e:c9:5b:cd:42:1a:8e:03:c7:39:f4:f6:f1:f0:c4:66:c3:1d:
         77:ea:73:4e:4f:82:30:d2:15:cd:ab:e9:d3:a2:74:38:34:ef:
         be:ed:e8:7a:51:a8:4c:ac:5d:5b:26:22:fb:36:18:ba:30:f3:
         67:77:77:a7:81:18:5a:c5:58:27:14:5c:fa:93:b0:6d:18:f5:
         a0:d9:3c:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 06:18:11 2024 by rpki-client on console-fra.rpki-client.org