Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91E4E32/720959FC01C011EDBD7C6F58C4F9AE02/B5D1A1164E3111EFB475160AC4F9AE02.roa
File:                     B5D1A1164E3111EFB475160AC4F9AE02.roa (raw, json)
Hash identifier:          F7ZAiYqiaqgCjshmhAH40pkpaSlek68K5yOIUFIlCqE=
Subject key identifier:   C3:B1:0C:A8:A0:62:70:8F:94:D0:A9:40:0C:84:F0:0D:B2:F1:0C:EA
Certificate issuer:       /CN=A91E4E32/serialNumber=A185C0C574829C5FCD71445449E534CDAEF41396
Certificate serial:       0241
Authority key identifier: A1:85:C0:C5:74:82:9C:5F:CD:71:44:54:49:E5:34:CD:AE:F4:13:96
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oYXAxXSCnF_NcURUSeU0za70E5Y.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91E4E32/720959FC01C011EDBD7C6F58C4F9AE02/B5D1A1164E3111EFB475160AC4F9AE02.roa
Signing time:             Tue 30 Jul 2024 18:06:53 +0000
ROA not before:           Tue 30 Jul 2024 18:06:53 +0000
ROA not after:            Sun 31 Aug 2025 00:00:00 +0000
asID:                     16509
IP address blocks:        103.26.8.0/24 maxlen: 24
                          103.26.9.0/24 maxlen: 24
                          103.26.11.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91E4E32/720959FC01C011EDBD7C6F58C4F9AE02/oYXAxXSCnF_NcURUSeU0za70E5Y.crl
                          rsync://rpki.apnic.net/member_repository/A91E4E32/720959FC01C011EDBD7C6F58C4F9AE02/oYXAxXSCnF_NcURUSeU0za70E5Y.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oYXAxXSCnF_NcURUSeU0za70E5Y.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 21 Feb 2025 05:15:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 577 (0x241)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91E4E32
        Validity
            Not Before: Jul 30 18:06:53 2024 GMT
            Not After : Aug 31 00:00:00 2025 GMT
        Subject: CN=66a92bbd-1ed4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:8a:48:7d:74:be:4a:00:5a:5c:09:38:10:f9:
                    f8:04:dc:cd:08:2f:69:88:40:ed:c1:03:24:35:87:
                    37:b1:08:4b:f0:e4:e6:46:0a:8e:66:95:ec:39:4c:
                    d7:4d:28:38:e7:07:cb:6c:ee:0a:8d:00:6d:49:44:
                    cd:f7:b4:65:c2:d7:7c:79:72:38:f4:8b:ca:f4:1a:
                    84:99:6c:c2:95:16:ae:c7:13:41:4a:ec:22:fc:55:
                    01:41:45:fc:16:5c:b1:d3:58:1b:b3:14:7b:f2:37:
                    ae:d3:3f:1d:93:8b:74:70:b1:31:3b:27:40:c0:43:
                    14:b5:90:3d:af:34:78:d8:11:37:b6:51:24:ab:ec:
                    5f:42:02:61:1f:9e:b8:ac:21:78:ec:cd:ba:d0:0f:
                    ec:80:07:42:50:9a:cd:c2:ae:e1:29:4a:3e:c3:a2:
                    59:e6:87:c4:f9:0a:3a:f9:26:ad:30:5b:82:5b:5c:
                    96:bf:e0:13:99:2d:c3:9f:d6:e7:e6:dc:8b:0e:01:
                    83:d6:3e:34:2b:a5:4c:bb:01:cb:86:fc:46:47:b5:
                    62:0b:2a:72:81:45:0f:6a:91:ee:3f:53:b3:5f:26:
                    09:7a:42:af:47:88:9b:c2:fc:92:16:23:e2:d6:cc:
                    15:ed:3e:95:25:b0:7d:62:18:8f:f5:d7:42:36:bb:
                    49:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C3:B1:0C:A8:A0:62:70:8F:94:D0:A9:40:0C:84:F0:0D:B2:F1:0C:EA
            X509v3 Authority Key Identifier:
                keyid:A1:85:C0:C5:74:82:9C:5F:CD:71:44:54:49:E5:34:CD:AE:F4:13:96

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91E4E32/720959FC01C011EDBD7C6F58C4F9AE02/oYXAxXSCnF_NcURUSeU0za70E5Y.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oYXAxXSCnF_NcURUSeU0za70E5Y.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E4E32/720959FC01C011EDBD7C6F58C4F9AE02/B5D1A1164E3111EFB475160AC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.26.8.0/23
                  103.26.11.0/24

    Signature Algorithm: sha256WithRSAEncryption
         4b:03:91:f6:f0:31:72:65:03:7b:a6:1c:55:da:43:1f:25:ff:
         a9:a5:f0:ff:6c:bd:fb:41:91:6e:d3:26:a2:b8:48:6a:03:39:
         9c:6b:6a:1b:a2:de:38:ff:b7:ce:d7:f8:e4:d0:95:b3:7f:be:
         54:c5:82:0b:91:8b:c8:11:f8:36:3e:f1:c2:c8:21:31:69:7d:
         c9:59:a6:7a:b4:be:49:ee:3e:41:ae:ae:b1:69:83:9a:7c:dc:
         b8:87:ba:57:fa:3c:eb:2b:78:e0:9a:e7:fe:1f:ea:fb:5a:42:
         4d:32:7a:3f:36:54:a9:d1:6e:b1:5e:7e:d6:80:ec:20:93:2d:
         0c:33:37:c5:1d:f4:5a:32:d8:76:ce:d5:d5:40:60:4d:11:86:
         31:66:c5:5f:65:d5:f2:07:44:75:69:9a:56:59:1f:a9:8f:66:
         29:42:0b:9b:ab:87:b3:19:a3:57:41:23:da:69:1e:9d:dd:24:
         61:18:28:c4:86:60:ea:37:1c:20:b4:40:c7:a6:5e:51:fc:cb:
         83:6d:76:13:aa:32:f4:e7:74:4b:b2:72:9a:d3:41:42:1e:d2:
         77:00:f7:c6:97:56:31:62:9f:1f:77:b7:a1:42:40:6e:56:0e:
         76:c8:25:da:78:1f:6f:17:49:31:70:00:37:4d:73:c5:0b:5e:
         31:18:13:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 15:27:39 2025 by rpki-client