Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9126996/1231FC68739411EEA170384DC4F9AE02/CD34C770739411EEB8BAE858C4F9AE02.roa
File:                     CD34C770739411EEB8BAE858C4F9AE02.roa (raw, json)
Hash identifier:          opccS6PZ9+Vu6NYJbXHhRy0dfC8Yk6cLJhkj26O7yZU=
Subject key identifier:   2D:1D:60:FE:E5:BB:06:1D:96:C1:14:5D:1F:B0:30:78:E1:C6:C8:55
Certificate issuer:       /CN=A9126996/serialNumber=6283BE9B31D29036B967BFF7B7E71BADD529A64E
Certificate serial:       02
Authority key identifier: 62:83:BE:9B:31:D2:90:36:B9:67:BF:F7:B7:E7:1B:AD:D5:29:A6:4E
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YoO-mzHSkDa5Z7_3t-cbrdUppk4.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9126996/1231FC68739411EEA170384DC4F9AE02/CD34C770739411EEB8BAE858C4F9AE02.roa
Signing time:             Thu 26 Oct 2023 00:15:43 +0000
ROA not before:           Thu 26 Oct 2023 00:15:43 +0000
ROA not after:            Mon 30 Sep 2024 00:00:00 +0000
asID:                     45447
IP address blocks:        103.22.144.0/22 maxlen: 22
                          2401:3900::/32 maxlen: 32

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9126996/1231FC68739411EEA170384DC4F9AE02/YoO-mzHSkDa5Z7_3t-cbrdUppk4.crl
                          rsync://rpki.apnic.net/member_repository/A9126996/1231FC68739411EEA170384DC4F9AE02/YoO-mzHSkDa5Z7_3t-cbrdUppk4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YoO-mzHSkDa5Z7_3t-cbrdUppk4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 07 Jun 2024 07:27:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2 (0x2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9126996/serialNumber=6283BE9B31D29036B967BFF7B7E71BADD529A64E
        Validity
            Not Before: Oct 26 00:15:43 2023 GMT
            Not After : Sep 30 00:00:00 2024 GMT
        Subject: CN=6539afaf-30f9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:9d:e3:cf:ce:78:92:a0:ae:9a:3f:3c:ab:a9:
                    8f:1d:17:24:59:73:1f:9f:a7:2a:bb:4f:6c:5a:4a:
                    28:18:33:66:f3:a5:81:ca:a5:9b:be:10:5e:aa:38:
                    98:7d:02:16:e2:b1:73:55:6e:db:0d:e5:f7:7b:4e:
                    61:2f:c9:9f:5d:23:53:11:c7:61:db:00:d0:8c:c2:
                    7f:ae:2b:be:4e:7e:dc:dd:82:e5:06:b3:f0:86:65:
                    81:af:d4:f0:1a:be:44:01:36:ff:ae:e9:5e:00:9e:
                    73:12:ec:90:27:a7:38:ac:c1:e5:8d:35:cf:cf:c7:
                    76:7f:b7:8f:54:ec:67:52:6f:f1:28:b2:09:f0:0f:
                    8e:3f:6c:75:2d:d3:0f:db:e5:9e:b7:54:72:56:0a:
                    5e:5c:c1:59:2c:21:85:72:22:80:32:8c:c7:29:30:
                    96:c3:e8:86:d3:e0:b6:6d:85:27:5d:24:33:80:9b:
                    79:ec:67:cb:9b:83:57:dd:ff:7b:06:ea:f9:78:f5:
                    95:b3:1a:6c:ae:35:2f:ba:4a:fe:0e:99:e7:0d:1f:
                    4f:5a:64:a2:95:5b:c1:dc:22:ab:4c:27:a4:29:51:
                    8a:cb:36:cc:a4:be:ae:3d:77:79:7a:85:ed:31:93:
                    06:aa:cd:2d:93:f3:6f:bf:36:d0:ac:ce:09:14:d7:
                    45:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2D:1D:60:FE:E5:BB:06:1D:96:C1:14:5D:1F:B0:30:78:E1:C6:C8:55
            X509v3 Authority Key Identifier:
                keyid:62:83:BE:9B:31:D2:90:36:B9:67:BF:F7:B7:E7:1B:AD:D5:29:A6:4E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9126996/1231FC68739411EEA170384DC4F9AE02/YoO-mzHSkDa5Z7_3t-cbrdUppk4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YoO-mzHSkDa5Z7_3t-cbrdUppk4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9126996/1231FC68739411EEA170384DC4F9AE02/CD34C770739411EEB8BAE858C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.22.144.0/22
                IPv6:
                  2401:3900::/32

    Signature Algorithm: sha256WithRSAEncryption
         7a:f6:e3:36:cf:c9:df:db:75:b3:3b:be:ac:5f:51:b7:86:b0:
         0a:21:c9:38:f4:49:ef:4a:b8:1b:6b:6c:72:44:53:96:9f:ff:
         7b:20:4e:37:8d:27:9d:2c:5a:64:dd:54:a6:26:dc:f2:89:6d:
         9e:5b:d2:c2:ea:28:5e:29:fa:f7:58:a7:cb:6b:97:67:26:dd:
         7d:76:2f:e0:5a:e1:8f:9f:42:e0:c7:47:38:e8:9c:5e:37:68:
         af:ad:32:f6:b9:b7:d1:f8:fe:be:f6:73:92:00:13:22:c5:83:
         59:56:5f:7b:79:43:64:ed:81:f0:89:ad:ba:26:e0:e6:44:27:
         5d:71:2b:4b:a4:8c:73:dd:c0:df:04:89:74:2f:d4:3b:e9:6b:
         93:2d:19:36:39:b9:4a:97:59:8c:73:4a:d6:4b:6f:6d:9e:c5:
         8c:58:af:d6:d7:bd:91:5e:9a:be:87:6b:88:c9:f8:dd:e4:b4:
         47:7b:04:00:84:e6:2f:47:87:77:6a:2c:dc:44:80:0e:5b:07:
         a2:35:7d:ce:2a:ad:cb:63:79:36:c0:94:b9:22:d8:ef:27:29:
         85:98:9a:7c:b0:86:a9:22:1d:0b:ec:a9:a7:96:a5:28:4a:8a:
         49:83:a4:0b:45:24:a7:b6:30:cd:12:b7:45:10:08:33:6a:15:
         b8:34:59:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 31 10:01:37 2024 by rpki-client on console-ams.rpki-client.org