Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/f24045a5-5771-4886-b5e9-a11c9adba808.roa
File:                     f24045a5-5771-4886-b5e9-a11c9adba808.roa (raw, json)
Hash identifier:          ohg16V54QeHWAqWBcvhBuq7OL7J5PINdYS/iV7DFVhA=
Subject key identifier:   B5:CB:7F:A8:3F:B1:44:08:A7:DB:6C:2C:24:DA:36:88:F2:E4:C3:1C
Certificate issuer:       /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37
Certificate serial:       4ACCEE1A6975E4903D92690F1E3B2DE297C871C1
Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/f24045a5-5771-4886-b5e9-a11c9adba808.roa
Signing time:             Sat 22 Jun 2024 00:00:00 +0000
ROA not before:           Sat 22 Jun 2024 00:00:00 +0000
ROA not after:            Sat 27 Jul 2024 23:59:59 +0000
asID:                     14618
IP address blocks:        103.246.148.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 28 Jun 2024 00:11:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4a:cc:ee:1a:69:75:e4:90:3d:92:69:0f:1e:3b:2d:e2:97:c8:71:c1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37
        Validity
            Not Before: Jun 22 00:00:00 2024 GMT
            Not After : Jul 27 23:59:59 2024 GMT
        Subject: serialNumber=50bc0c16c6e8143cd5d2b4275c7c086dccc3a3e6ebeeff2a18f76149c20cf81d, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:3f:11:c5:27:d6:ea:8e:3d:65:78:31:30:30:
                    ef:84:d8:eb:6a:37:33:fa:06:d6:cf:6b:53:8c:29:
                    67:66:59:43:86:15:3d:60:30:19:b1:83:cb:88:d9:
                    61:22:f0:c0:45:9e:27:fd:a2:c3:2a:6e:47:5a:0f:
                    00:04:0b:48:1b:53:c3:86:81:e9:73:4b:b2:72:5f:
                    0c:4f:ea:d0:be:2a:3a:9f:56:4a:af:aa:f6:87:e9:
                    dd:c7:05:be:f7:c9:38:db:00:cd:01:3a:44:17:f7:
                    7a:58:a4:63:e7:64:79:86:71:8d:8b:88:b1:00:1b:
                    93:92:c3:e9:a7:e8:9c:8b:5c:8c:57:e5:08:91:48:
                    a0:99:e7:0b:80:5d:a3:ce:5a:cf:e5:40:d9:2b:9a:
                    a8:83:dc:3b:7a:37:97:54:0e:40:11:db:d8:a7:77:
                    ba:8b:2c:05:7a:83:4b:a8:9d:24:39:16:0b:91:87:
                    db:b0:a9:65:c0:97:d6:3f:0e:09:df:38:c5:81:42:
                    b0:cf:bb:75:2d:50:48:02:59:c5:8f:37:2b:d1:f1:
                    c6:f5:d3:1e:eb:45:66:64:23:ff:1e:91:d3:6e:15:
                    c0:cb:eb:e8:8d:d3:c2:9e:47:83:41:8f:ac:af:bc:
                    41:eb:4b:cd:a5:9b:a3:41:19:66:e2:38:df:7b:e9:
                    09:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B5:CB:7F:A8:3F:B1:44:08:A7:DB:6C:2C:24:DA:36:88:F2:E4:C3:1C
            X509v3 Authority Key Identifier:
                keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/f24045a5-5771-4886-b5e9-a11c9adba808.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.246.148.0/22

    Signature Algorithm: sha256WithRSAEncryption
         00:a2:32:8a:b1:aa:ed:73:64:d9:70:ca:89:7c:0a:fa:9d:3c:
         ac:09:0c:0b:27:30:e9:29:68:37:09:d7:fd:7f:32:43:4a:ad:
         1a:b4:00:39:b1:19:d6:92:2b:55:3f:19:90:50:19:ef:c3:2a:
         e6:23:17:f2:d1:20:c1:d8:ec:15:c7:20:26:9f:43:02:f8:9f:
         bb:f5:f6:4c:91:2e:f4:cf:1d:5a:df:1a:c7:aa:22:2b:b9:7b:
         1c:7b:f8:df:5e:47:52:86:89:d0:a7:7c:2f:c0:09:83:62:f2:
         03:43:8e:50:46:f3:a9:35:5e:10:9e:fc:9d:b1:2d:ee:5b:ad:
         79:de:dd:a0:0d:3d:c8:6f:d4:a2:2b:50:14:51:5d:e6:2e:a6:
         6c:76:92:59:3c:68:e5:c8:95:35:7e:8d:00:ab:2b:cd:2c:f8:
         38:ff:1d:ae:3a:bf:7e:d9:e5:f6:1d:87:dc:65:2a:51:71:ea:
         65:65:99:98:cf:32:d9:f9:e5:f4:3e:89:fb:df:5f:1e:8c:a3:
         42:a5:07:53:b1:ab:cf:ab:4a:82:83:f3:1a:99:91:d8:59:5f:
         63:8c:be:e3:b9:00:70:f6:c3:61:41:d0:67:ce:c5:5d:a2:8b:
         c1:e9:28:7d:13:54:e1:2a:67:59:87:7e:0b:f3:5b:09:24:dd:
         40:85:5d:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 24 01:28:16 2024 by rpki-client on console-ams.rpki-client.org