Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/d28e878b-7026-4092-9657-bcad7c6b3e74.roa
File:                     d28e878b-7026-4092-9657-bcad7c6b3e74.roa (raw, json)
Hash identifier:          o14MaG/6pnFqZfjXdDe6V1Vsv0xLX7ZYlJQwKu16vcs=
Subject key identifier:   C5:57:02:8E:A3:BE:B2:5D:0E:D4:AB:B3:15:CE:B6:02:AD:C3:AD:BE
Certificate issuer:       /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37
Certificate serial:       7594A077221078023238FAD156C04FC9563906AA
Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/d28e878b-7026-4092-9657-bcad7c6b3e74.roa
Signing time:             Tue 28 May 2024 00:00:00 +0000
ROA not before:           Tue 28 May 2024 00:00:00 +0000
ROA not after:            Tue 02 Jul 2024 23:59:59 +0000
asID:                     8987
IP address blocks:        103.246.148.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 19 Jun 2024 00:00:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            75:94:a0:77:22:10:78:02:32:38:fa:d1:56:c0:4f:c9:56:39:06:aa
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37
        Validity
            Not Before: May 28 00:00:00 2024 GMT
            Not After : Jul  2 23:59:59 2024 GMT
        Subject: serialNumber=f2fbdfeae63a180b9117300a787262c2c81df72446eb7033feda428ea4a33f60, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ed:96:97:a2:c2:07:10:5e:40:a4:76:d9:9e:07:
                    82:eb:22:4b:f6:aa:62:b1:fc:4a:de:3d:03:da:ef:
                    ba:7a:37:13:89:a5:fc:81:d5:73:d0:62:ee:f4:1d:
                    06:19:00:08:c4:c0:9c:63:53:f6:5d:75:b6:26:75:
                    c3:43:87:d5:88:6e:49:28:80:70:7f:e5:13:cf:e8:
                    03:11:bb:c0:4d:08:0c:de:89:87:9b:c8:be:f4:81:
                    ec:1b:8e:a5:59:82:ee:9b:27:ea:77:f8:bd:f9:55:
                    57:09:eb:30:fb:96:9d:bf:ec:ef:d4:df:f6:19:61:
                    f9:9e:99:c2:a4:14:21:61:ae:ed:ac:f2:63:17:a9:
                    80:37:68:24:67:a8:59:aa:3b:aa:12:7a:03:c9:0b:
                    ba:37:ef:d0:67:42:9d:b8:8e:14:2a:a3:f2:d3:a5:
                    2a:b2:61:e4:94:86:84:73:27:41:66:5c:ee:55:2a:
                    b6:4a:c4:c5:09:f9:6e:c2:78:f3:2c:5c:c5:0a:71:
                    32:26:dd:3b:ae:50:6c:fa:b4:49:79:35:fc:07:f0:
                    aa:3a:a6:09:ed:a9:66:a6:c4:ff:07:42:5f:2c:61:
                    b1:74:b7:32:ba:4d:44:7a:0d:f7:1e:ef:87:48:93:
                    fd:71:70:d9:23:98:fc:1a:39:e7:bd:d3:c3:c5:cd:
                    e9:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C5:57:02:8E:A3:BE:B2:5D:0E:D4:AB:B3:15:CE:B6:02:AD:C3:AD:BE
            X509v3 Authority Key Identifier:
                keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/d28e878b-7026-4092-9657-bcad7c6b3e74.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.246.148.0/22

    Signature Algorithm: sha256WithRSAEncryption
         bf:0b:75:61:5f:97:43:39:27:52:76:05:96:15:2f:f3:bd:d3:
         84:b7:24:6f:00:53:b1:a5:35:5c:e4:03:db:d9:2b:3d:46:a0:
         40:81:71:17:b4:a1:10:4c:37:55:97:6c:03:d9:d8:9b:73:3c:
         b0:02:44:dc:07:9b:65:2a:3c:59:c6:f8:72:f0:10:de:b9:5c:
         3e:f7:60:80:66:97:3f:a4:2f:dd:25:5a:54:c2:55:2e:2e:ff:
         8f:08:2b:01:c6:b6:2e:ca:05:51:47:8a:4f:95:b4:c6:5c:ca:
         b0:69:1f:8d:ef:b7:1a:17:81:8a:64:da:d7:31:b0:e4:c2:9c:
         4a:a4:f8:df:86:e0:46:df:1a:f0:ac:eb:e5:1d:f8:fa:c1:4a:
         23:f7:53:6d:39:2b:9f:b3:f1:bf:c4:64:b3:53:a3:d2:34:f2:
         ea:6d:3c:e7:40:ef:3f:93:32:01:a2:ef:97:a3:6c:a6:c1:d0:
         75:63:35:0d:49:69:78:c4:de:2d:21:78:ca:47:63:cf:2b:40:
         32:a5:e2:4d:b9:52:88:9f:35:2b:4d:af:98:1e:06:c8:d4:59:
         59:98:4f:a9:e3:a9:2e:8e:94:20:69:25:6b:32:bb:5c:a0:e2:
         99:7d:d4:a5:63:91:87:11:d6:4a:88:af:17:66:29:67:5a:e5:
         76:7a:46:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 15 02:42:06 2024 by rpki-client on console-ams.rpki-client.org