Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91FF428/35EB13485DD811ECB9B4D630C4F9AE02/5B0EC1A03A6411EE954F7E1AC4F9AE02.roa
File:                     5B0EC1A03A6411EE954F7E1AC4F9AE02.roa (raw, json)
Hash identifier:          4kws2fw8AoZ1Rny+sed5EQnJfSosMC4foLTO1yizfJU=
Subject key identifier:   5D:64:7E:19:AF:62:50:5D:1E:A4:21:A5:66:F6:ED:7D:37:BD:3C:7D
Certificate issuer:       /CN=A91FF428/serialNumber=BE852A8B3B7EA5C5AC5A52AACB852A01A4CDD082
Certificate serial:       0383
Authority key identifier: BE:85:2A:8B:3B:7E:A5:C5:AC:5A:52:AA:CB:85:2A:01:A4:CD:D0:82
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/voUqizt-pcWsWlKqy4UqAaTN0II.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91FF428/35EB13485DD811ECB9B4D630C4F9AE02/5B0EC1A03A6411EE954F7E1AC4F9AE02.roa
Signing time:             Wed 17 Apr 2024 03:05:16 +0000
ROA not before:           Wed 17 Apr 2024 03:05:16 +0000
ROA not after:            Mon 31 Mar 2025 00:00:00 +0000
asID:                     149289
IP address blocks:        103.178.26.0/24 maxlen: 24
                          2001:df0:31c0::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91FF428/35EB13485DD811ECB9B4D630C4F9AE02/voUqizt-pcWsWlKqy4UqAaTN0II.crl
                          rsync://rpki.apnic.net/member_repository/A91FF428/35EB13485DD811ECB9B4D630C4F9AE02/voUqizt-pcWsWlKqy4UqAaTN0II.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/voUqizt-pcWsWlKqy4UqAaTN0II.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 29 Nov 2024 20:43:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 899 (0x383)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91FF428/serialNumber=BE852A8B3B7EA5C5AC5A52AACB852A01A4CDD082
        Validity
            Not Before: Apr 17 03:05:16 2024 GMT
            Not After : Mar 31 00:00:00 2025 GMT
        Subject: CN=661f3c6b-9ccc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:ed:de:42:72:e2:94:73:91:15:18:b7:5e:bc:
                    b8:04:9d:88:58:d8:d0:d9:06:cb:2d:e0:70:99:d5:
                    fa:1a:42:d5:80:d7:7d:3a:b7:35:26:8d:a8:e2:af:
                    22:81:19:f5:f3:4e:8a:3e:3d:d5:24:87:f5:2b:39:
                    c1:50:55:bb:35:22:91:92:70:3b:60:04:df:a4:df:
                    25:e9:9e:66:d5:71:53:6a:98:b7:bb:4a:4e:22:5c:
                    49:7a:d8:4f:5c:48:4a:44:4d:a1:a5:8f:94:60:d0:
                    b1:0f:fd:f2:53:aa:50:bf:cc:56:3e:8f:a7:28:27:
                    f9:b4:58:3d:81:e6:c7:5b:82:4a:5f:79:6d:2b:3c:
                    01:00:eb:25:1b:a9:42:c8:71:19:0b:af:ef:6f:1a:
                    b7:64:fd:cf:38:ea:18:fe:2d:5f:77:76:5f:df:84:
                    46:2a:59:48:96:a3:79:f0:ee:cf:4c:a4:7d:06:b9:
                    af:98:b9:15:44:d7:dc:83:cc:51:c5:d1:a6:d9:61:
                    13:f0:20:4f:39:e1:cd:9e:a5:53:9c:2c:ca:0b:91:
                    2e:67:5f:89:5c:52:b8:cc:66:c0:c9:c3:c6:31:61:
                    7d:92:d0:c5:b1:42:39:ee:88:38:82:6e:49:8c:06:
                    c5:60:02:a5:f9:89:4f:fd:cb:21:6d:fd:8a:4d:35:
                    9e:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5D:64:7E:19:AF:62:50:5D:1E:A4:21:A5:66:F6:ED:7D:37:BD:3C:7D
            X509v3 Authority Key Identifier:
                keyid:BE:85:2A:8B:3B:7E:A5:C5:AC:5A:52:AA:CB:85:2A:01:A4:CD:D0:82

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91FF428/35EB13485DD811ECB9B4D630C4F9AE02/voUqizt-pcWsWlKqy4UqAaTN0II.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/voUqizt-pcWsWlKqy4UqAaTN0II.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FF428/35EB13485DD811ECB9B4D630C4F9AE02/5B0EC1A03A6411EE954F7E1AC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.178.26.0/24
                IPv6:
                  2001:df0:31c0::/48

    Signature Algorithm: sha256WithRSAEncryption
         3f:61:e1:e5:ce:53:45:0f:42:d4:52:28:c5:7a:0d:89:30:9b:
         d6:8d:8e:7b:ef:22:d8:a3:eb:58:db:79:cb:78:22:0f:ab:bd:
         50:14:8e:8c:64:f9:d1:ce:ee:92:eb:03:2f:55:7e:11:cf:0d:
         07:56:0b:63:54:15:d5:bc:93:d7:6d:7f:63:2f:20:aa:62:b1:
         c6:25:01:0e:66:e7:7c:10:5e:ce:5c:14:41:6a:89:2f:b9:cc:
         f4:e3:62:80:30:9e:dc:7b:f1:8e:52:3f:69:d4:d9:f0:65:e8:
         fc:65:bc:b1:48:02:fc:3a:5f:68:6c:c5:1a:1c:15:21:34:27:
         91:95:4c:1c:d4:ec:4e:11:41:ea:ae:a2:a2:8a:f9:d4:e2:2f:
         62:a4:19:2e:db:dd:8c:51:40:0c:e0:ca:dd:ce:1a:da:dd:ad:
         44:75:85:6c:28:b6:ad:64:98:39:5e:a1:0d:e0:bb:9b:16:e6:
         9e:d8:f6:82:d5:60:92:94:43:c4:51:67:ce:16:29:a1:e5:6e:
         1e:c6:67:46:28:64:40:ae:5b:16:1c:f2:0b:75:ad:df:e1:12:
         3c:4f:b1:d4:8a:7f:f7:d4:23:36:ba:9b:0f:2c:5d:6c:a1:b0:
         55:d9:d2:25:4c:53:41:fe:e6:27:de:78:ea:9b:cf:d8:db:88:
         9a:1e:39:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 01:27:30 2024 by rpki-client on console-ams.rpki-client.org