Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9149F3E/AC52B7481D8211E2BC6417D708B02CD2/2622AA12010511EE8C750D39C4F9AE02.roa
File:                     2622AA12010511EE8C750D39C4F9AE02.roa (raw, json)
Hash identifier:          mf2Qk+w1NRlp24Ok2PsGfSzQRhYbIagpibh1QaUmo/0=
Subject key identifier:   EE:EF:49:6A:1A:7B:B9:D1:89:0C:3B:E6:3C:CA:CA:DE:08:52:4A:C0
Certificate issuer:       /CN=A9149F3E/serialNumber=EB389FB339B3908D549A65390C92E15F9DF7C54B
Certificate serial:       35F8
Authority key identifier: EB:38:9F:B3:39:B3:90:8D:54:9A:65:39:0C:92:E1:5F:9D:F7:C5:4B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6zifszmzkI1UmmU5DJLhX533xUs.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9149F3E/AC52B7481D8211E2BC6417D708B02CD2/2622AA12010511EE8C750D39C4F9AE02.roa
Signing time:             Fri 16 Aug 2024 14:40:30 +0000
ROA not before:           Fri 16 Aug 2024 14:40:30 +0000
ROA not after:            Sun 31 Aug 2025 00:00:00 +0000
asID:                     3786
IP address blocks:        103.143.78.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9149F3E/AC52B7481D8211E2BC6417D708B02CD2/6zifszmzkI1UmmU5DJLhX533xUs.crl
                          rsync://rpki.apnic.net/member_repository/A9149F3E/AC52B7481D8211E2BC6417D708B02CD2/6zifszmzkI1UmmU5DJLhX533xUs.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6zifszmzkI1UmmU5DJLhX533xUs.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 27 Nov 2024 14:21:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 13816 (0x35f8)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9149F3E/serialNumber=EB389FB339B3908D549A65390C92E15F9DF7C54B
        Validity
            Not Before: Aug 16 14:40:30 2024 GMT
            Not After : Aug 31 00:00:00 2025 GMT
        Subject: CN=66bf64de-3026
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:a8:44:2d:c0:76:43:44:bd:77:e3:b3:39:6a:
                    a6:b8:4a:3e:a2:ed:da:c9:74:05:17:59:b9:b9:45:
                    f3:93:ed:d2:70:b7:f6:dc:5a:9b:78:48:99:91:83:
                    57:5c:0c:ea:93:ef:20:ae:97:54:7e:b8:4b:9c:d2:
                    65:5c:06:66:23:7b:43:1c:b1:99:25:4c:38:d8:d7:
                    69:27:26:c2:a3:b4:5d:f0:53:df:50:48:3a:f7:c5:
                    e3:a4:1f:74:c0:5a:4c:17:cd:b2:86:6d:4d:14:0b:
                    f9:e9:15:08:56:13:cf:92:b6:b3:6e:73:f8:51:ba:
                    2b:cf:ea:e0:eb:9c:ee:df:2f:35:d0:e7:e6:f1:20:
                    2a:d1:84:38:38:78:66:8c:eb:91:5f:47:a1:c3:c2:
                    e3:71:ad:d1:3b:f6:37:28:29:4f:ab:54:1a:3c:61:
                    b8:c3:da:28:80:5a:5a:51:91:f7:86:6d:8d:82:51:
                    18:87:03:c9:03:de:2d:8e:fa:e3:cd:0c:5c:2a:d8:
                    d5:a3:fa:00:2b:e1:a0:cd:53:40:4c:f1:f8:d7:a8:
                    33:1d:4b:f9:eb:6e:e5:9c:7d:a7:38:40:64:5f:de:
                    5a:15:65:47:ea:68:f5:61:46:46:fb:39:44:3e:91:
                    a0:ff:a9:17:7e:20:4f:24:85:0f:f3:60:b8:93:f5:
                    5e:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EE:EF:49:6A:1A:7B:B9:D1:89:0C:3B:E6:3C:CA:CA:DE:08:52:4A:C0
            X509v3 Authority Key Identifier:
                keyid:EB:38:9F:B3:39:B3:90:8D:54:9A:65:39:0C:92:E1:5F:9D:F7:C5:4B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9149F3E/AC52B7481D8211E2BC6417D708B02CD2/6zifszmzkI1UmmU5DJLhX533xUs.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6zifszmzkI1UmmU5DJLhX533xUs.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9149F3E/AC52B7481D8211E2BC6417D708B02CD2/2622AA12010511EE8C750D39C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.143.78.0/24

    Signature Algorithm: sha256WithRSAEncryption
         e0:91:ae:2c:dc:d4:2a:c6:21:20:4d:6f:84:5f:c7:90:7c:09:
         26:c3:c5:a5:13:94:fa:f3:71:1b:b8:db:80:2b:46:d8:72:3d:
         4b:7e:fa:2b:dd:d4:2f:59:02:ac:8c:2f:7f:71:80:5d:6d:8b:
         68:cb:e4:c2:8c:dd:32:76:97:fb:d7:13:b7:f6:e9:a8:7f:a3:
         8c:66:e8:26:d7:1f:22:b9:63:d8:b9:cd:bb:b5:53:58:22:ab:
         03:7a:ef:08:c2:8e:cf:99:95:3b:18:b3:98:bc:76:54:27:f2:
         a8:63:bc:99:fa:30:66:1c:2e:1a:36:fa:0c:cf:fb:75:0d:61:
         a4:a0:00:e7:b6:fa:c1:f1:dc:4a:0c:da:85:4a:25:35:ac:ab:
         73:ba:2f:f6:eb:00:67:0a:62:6e:9d:6b:64:15:5a:6a:ec:b0:
         15:0e:c4:70:16:6f:c6:94:37:33:85:15:42:41:71:98:e0:9d:
         8e:4e:e0:00:ee:9b:6c:58:27:b9:57:14:56:3f:0f:92:5a:32:
         1e:db:9f:71:7b:43:b4:11:86:ee:21:a3:ce:07:75:b4:52:19:
         10:bb:39:a0:2c:ea:39:6b:ca:b1:ac:13:72:35:87:6f:68:15:
         fe:0c:07:94:19:6e:63:03:94:29:10:38:b3:81:41:c2:a5:9d:
         a9:57:2d:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 20 16:00:08 2024 by rpki-client on console-ams.rpki-client.org