Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91EE735/E8E667CA94BE11EA984FAD58C4F9AE02/34E183809E5F11EB97709628C4F9AE02.roa
File:                     34E183809E5F11EB97709628C4F9AE02.roa (raw, json)
Hash identifier:          36c9Jg2qBuIJjOlQn8QxUqUYlMtF6lkxLHEe+aB1y+0=
Subject key identifier:   0B:99:F1:2A:CB:90:AE:4F:47:61:93:F6:B3:E7:8E:D3:4F:E9:16:2A
Certificate issuer:       /CN=A91EE735/serialNumber=AD73ADB914213862ED8E14D77069F474D83CC8F5
Certificate serial:       07F8
Authority key identifier: AD:73:AD:B9:14:21:38:62:ED:8E:14:D7:70:69:F4:74:D8:3C:C8:F5
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rXOtuRQhOGLtjhTXcGn0dNg8yPU.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91EE735/E8E667CA94BE11EA984FAD58C4F9AE02/34E183809E5F11EB97709628C4F9AE02.roa
Signing time:             Wed 31 May 2023 23:14:24 +0000
ROA not before:           Wed 31 May 2023 23:14:24 +0000
ROA not after:            Tue 30 Jul 2024 00:00:00 +0000
asID:                     24541
IP address blocks:        203.26.6.0/24 maxlen: 24
                          2001:df1:be00::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91EE735/E8E667CA94BE11EA984FAD58C4F9AE02/rXOtuRQhOGLtjhTXcGn0dNg8yPU.crl
                          rsync://rpki.apnic.net/member_repository/A91EE735/E8E667CA94BE11EA984FAD58C4F9AE02/rXOtuRQhOGLtjhTXcGn0dNg8yPU.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rXOtuRQhOGLtjhTXcGn0dNg8yPU.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 13 May 2024 21:38:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2040 (0x7f8)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91EE735/serialNumber=AD73ADB914213862ED8E14D77069F474D83CC8F5
        Validity
            Not Before: May 31 23:14:24 2023 GMT
            Not After : Jul 30 00:00:00 2024 GMT
        Subject: CN=6477d4d0-ebe1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:54:81:cd:66:b2:42:2d:32:63:27:8f:8e:a3:
                    92:81:bd:79:0b:06:9a:9f:2a:f6:c8:86:e4:46:36:
                    c8:12:22:5d:63:5a:f2:3e:e2:d8:3e:79:1a:cb:5a:
                    86:aa:ab:19:b6:3d:8b:c2:62:34:c4:2a:d1:2b:1f:
                    b6:c5:8a:28:f1:3a:87:2c:e1:5e:85:ef:d1:b2:cd:
                    2f:af:47:4e:b0:1f:23:0f:e8:38:f2:ba:81:46:24:
                    4d:bd:4e:4a:a3:14:49:fc:91:59:55:70:3b:cf:c9:
                    01:dc:a6:d9:be:27:0f:0d:28:45:0f:4f:55:5d:27:
                    a9:56:23:46:ba:b6:81:7d:3b:ff:d1:7b:a3:88:64:
                    47:e4:63:1f:ab:eb:c6:15:62:94:cf:1c:e9:2c:42:
                    ee:1f:f2:ac:b2:78:95:ec:8a:6f:07:84:55:90:d6:
                    c9:5b:43:82:00:47:4e:44:70:00:40:89:e7:1b:59:
                    4c:ac:bb:eb:11:fc:45:97:03:a4:42:6b:e0:41:93:
                    63:62:f4:09:27:3a:60:67:d1:bb:93:a0:85:30:6d:
                    b0:88:46:19:a7:a5:6b:3b:00:29:9a:c2:f1:6c:7e:
                    de:5f:f5:89:b7:7f:d0:36:b8:09:d2:32:b7:06:ef:
                    58:b1:95:0a:2c:dc:3b:36:44:54:08:51:84:fc:2a:
                    0f:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0B:99:F1:2A:CB:90:AE:4F:47:61:93:F6:B3:E7:8E:D3:4F:E9:16:2A
            X509v3 Authority Key Identifier:
                keyid:AD:73:AD:B9:14:21:38:62:ED:8E:14:D7:70:69:F4:74:D8:3C:C8:F5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91EE735/E8E667CA94BE11EA984FAD58C4F9AE02/rXOtuRQhOGLtjhTXcGn0dNg8yPU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rXOtuRQhOGLtjhTXcGn0dNg8yPU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EE735/E8E667CA94BE11EA984FAD58C4F9AE02/34E183809E5F11EB97709628C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  203.26.6.0/24
                IPv6:
                  2001:df1:be00::/48

    Signature Algorithm: sha256WithRSAEncryption
         16:97:b0:fd:a2:e3:38:77:e2:bd:40:e9:dd:db:98:02:7f:a7:
         e1:cc:69:69:7e:2a:2d:03:1c:46:16:f2:56:ef:71:38:14:a4:
         96:c4:4c:7b:d3:ed:5f:10:00:d1:bd:3d:14:21:c2:16:24:fe:
         c9:ce:8d:c7:3c:ca:07:2c:11:07:fd:dc:c4:28:73:13:db:b5:
         40:7b:63:4f:63:42:87:da:b5:3c:50:01:b5:a6:33:47:88:df:
         bf:1f:4d:5b:dc:f5:84:b7:22:01:1d:ee:e9:38:b0:2e:ea:24:
         c0:01:c4:a3:6d:66:08:67:cb:b0:15:f1:4a:6a:e6:05:1a:f3:
         64:12:8d:f0:21:4d:35:70:ae:9b:50:e1:64:20:ed:93:fb:71:
         16:a2:7a:55:32:57:f6:8a:cd:45:07:9a:4b:0a:2a:bb:45:e0:
         ee:f5:60:cc:92:4a:aa:0f:b0:5a:6e:4e:d4:f2:a5:a7:18:0a:
         ec:57:fc:82:f8:ca:13:f7:2c:d3:a1:20:47:5c:22:71:a9:74:
         be:59:23:5c:e0:02:e7:82:02:77:37:bb:13:64:a6:30:98:15:
         45:66:bc:2e:a2:46:c2:0a:28:e9:86:d6:f9:1f:fc:d7:6b:71:
         06:a7:e3:aa:ea:5f:71:51:09:ca:f0:5c:94:4c:1c:d2:b8:6c:
         a5:47:51:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 6 23:05:52 2024 by rpki-client on console-fra.rpki-client.org