Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/99872005-b4d4-42b1-83cf-883d2cac4b3c.roa
File:                     99872005-b4d4-42b1-83cf-883d2cac4b3c.roa (raw, json)
Hash identifier:          q2D+I2/m17at5V3RPSsepWrHrONVWllgDbWd/EV/twI=
Subject key identifier:   77:64:78:83:E7:F6:97:62:50:F4:D3:8B:C8:8A:D4:2D:6B:0B:86:6C
Certificate issuer:       /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37
Certificate serial:       50793F4770BB15F871576FDCB5CD78C4D5DDD243
Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/99872005-b4d4-42b1-83cf-883d2cac4b3c.roa
Signing time:             Fri 21 Jun 2024 00:00:00 +0000
ROA not before:           Fri 21 Jun 2024 00:00:00 +0000
ROA not after:            Fri 26 Jul 2024 23:59:59 +0000
asID:                     16509
IP address blocks:        103.246.148.0/23 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 28 Jun 2024 00:11:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            50:79:3f:47:70:bb:15:f8:71:57:6f:dc:b5:cd:78:c4:d5:dd:d2:43
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37
        Validity
            Not Before: Jun 21 00:00:00 2024 GMT
            Not After : Jul 26 23:59:59 2024 GMT
        Subject: serialNumber=6ca96c97785cb8990579170158bae228334877a1ecee12a9968b3cc8196fb4e7, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:31:6e:6e:76:89:64:6f:4e:7d:3a:e6:72:46:
                    63:e7:aa:41:a4:15:1d:3a:e0:a3:76:92:4c:96:2b:
                    68:0a:44:f8:a8:9d:85:16:b3:2e:d6:5a:3c:6b:ad:
                    ff:f2:c8:40:b0:c6:e1:88:6f:fd:a7:24:f2:15:7e:
                    9b:66:d9:9d:ab:d5:02:dc:be:f5:82:23:fd:83:89:
                    7e:a5:1d:52:cb:62:1f:fa:da:1a:e5:ff:52:ad:73:
                    30:58:e1:fa:8e:fd:69:eb:db:9c:56:d1:99:bc:01:
                    dc:f2:6e:4c:52:ef:ff:73:e8:88:cc:1e:0a:41:ae:
                    bc:94:ed:59:2a:3f:ac:f1:b9:93:c5:e5:af:82:06:
                    9a:a3:45:27:ac:45:5c:72:93:32:3c:b8:78:7b:cd:
                    80:18:ef:2e:17:ec:42:e9:93:6c:61:8c:e4:34:d6:
                    de:95:a8:dd:7e:02:94:f3:08:e5:f4:f2:22:cf:24:
                    57:9c:8c:55:26:b3:8b:e6:4c:61:1c:73:5f:06:cb:
                    71:5e:b2:8e:30:c8:42:4c:cd:f0:cb:5f:5d:88:19:
                    2e:b5:11:e0:81:52:d7:ff:3e:93:65:ff:77:a6:d1:
                    09:67:3e:1d:0a:53:f4:7e:24:bf:ea:0c:8f:a1:20:
                    11:24:9e:cd:36:90:db:af:75:17:9e:09:a0:01:98:
                    c9:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                77:64:78:83:E7:F6:97:62:50:F4:D3:8B:C8:8A:D4:2D:6B:0B:86:6C
            X509v3 Authority Key Identifier:
                keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/99872005-b4d4-42b1-83cf-883d2cac4b3c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.246.148.0/23

    Signature Algorithm: sha256WithRSAEncryption
         c4:a9:dd:c9:c9:43:98:f4:d5:c1:cb:bc:7a:4e:fa:98:db:7b:
         fb:92:ad:e1:46:c3:fe:15:90:0b:3f:28:39:88:f4:4c:ad:45:
         15:0d:8b:57:8f:13:bd:02:f6:61:57:71:06:72:d4:5d:fe:fd:
         bf:af:90:2b:1c:42:55:ec:af:e5:93:83:dd:6a:06:ae:66:b0:
         f4:c2:af:f7:d4:1b:3e:2d:19:3f:aa:fc:6d:a5:30:a3:48:b5:
         33:62:fd:fa:4d:9e:88:50:ca:a7:ac:2f:2a:08:4b:ac:7e:dc:
         db:bb:6c:63:17:e7:52:e7:cb:93:88:e8:dc:05:03:dc:84:3e:
         eb:05:1d:ed:bb:49:b0:bf:b5:c3:91:54:2c:18:9e:12:20:68:
         78:a9:e2:4c:3c:db:24:98:a3:89:56:26:60:9b:2d:9e:30:36:
         09:5b:9b:15:f7:54:40:ec:ae:c5:15:6e:73:6e:6c:c7:ff:66:
         d9:ba:d1:30:db:2f:a9:62:e4:ad:47:ca:a4:0b:f5:d7:81:7f:
         14:7d:de:4d:aa:ab:32:db:9f:29:01:29:fc:b6:a4:e2:57:6c:
         06:36:de:8a:9d:1a:6d:9b:7b:f7:09:b6:97:8f:ee:28:0a:b2:
         cc:fa:06:86:c1:c7:52:df:7e:00:fd:66:7d:55:79:26:f4:88:
         4c:a3:19:a4
-----BEGIN CERTIFICATE-----
MIIFnDCCBISgAwIBAgIUUHk/R3C7FfhxV2/ctc14xNXd0kMwDQYJKoZIhvcNAQEL
BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0
RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI0MDYyMTAwMDAwMFoX
DTI0MDcyNjIzNTk1OVowejFJMEcGA1UEBRNANmNhOTZjOTc3ODVjYjg5OTA1Nzkx
NzAxNThiYWUyMjgzMzQ4NzdhMWVjZWUxMmE5OTY4YjNjYzgxOTZmYjRlNzEtMCsG
A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoTFubnaJZG9OfTrmckZj56pBpBUd
OuCjdpJMlitoCkT4qJ2FFrMu1lo8a63/8shAsMbhiG/9pyTyFX6bZtmdq9UC3L71
giP9g4l+pR1Sy2If+toa5f9SrXMwWOH6jv1p69ucVtGZvAHc8m5MUu//c+iIzB4K
Qa68lO1ZKj+s8bmTxeWvggaao0UnrEVccpMyPLh4e82AGO8uF+xC6ZNsYYzkNNbe
lajdfgKU8wjl9PIizyRXnIxVJrOL5kxhHHNfBstxXrKOMMhCTM3wy19diBkutRHg
gVLX/z6TZf93ptEJZz4dClP0fiS/6gyPoSARJJ7NNpDbr3UXngmgAZjJKQIDAQAB
o4ICSDCCAkQwHQYDVR0OBBYEFHdkeIPn9pdiUPTTi8iK1C1rC4ZsMB8GA1UdIwQY
MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF
BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw
b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU
U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI
KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz
LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx
Lzk5ODcyMDA1LWI0ZDQtNDJiMS04M2NmLTg4M2QyY2FjNGIzYy5yb2EwgZUGA1Ud
HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h
bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1
MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy
bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAM
BAIAATAGAwQBZ/aUMA0GCSqGSIb3DQEBCwUAA4IBAQDEqd3JyUOY9NXBy7x6TvqY
23v7kq3hRsP+FZALPyg5iPRMrUUVDYtXjxO9AvZhV3EGctRd/v2/r5ArHEJV7K/l
k4PdagauZrD0wq/31Bs+LRk/qvxtpTCjSLUzYv36TZ6IUMqnrC8qCEusftzbu2xj
F+dS58uTiOjcBQPchD7rBR3tu0mwv7XDkVQsGJ4SIGh4qeJMPNskmKOJViZgmy2e
MDYJW5sV91RA7K7FFW5zbmzH/2bZutEw2y+pYuStR8qkC/XXgX8Ufd5Nqqsy258p
ASn8tqTiV2wGNt6KnRptm3v3CbaXj+4oCrLM+gaGwcdS334A/WZ9VXkm9IhMoxmk
-----END CERTIFICATE-----
Generated at Mon Jun 24 00:42:56 2024 by rpki-client on console-fra.rpki-client.org