Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9110650/6596CC72C60111ECA38F3410C4F9AE02/424653EEC6CB11ECB185E43EC4F9AE02.roa
File:                     424653EEC6CB11ECB185E43EC4F9AE02.roa (raw, json)
Hash identifier:          z9y1RZky0Mui28fgGdt8snXkNVzMUMLSs70EilJUUug=
Subject key identifier:   BD:FB:00:BA:BD:F1:6C:64:52:CF:5A:88:C9:C7:7E:74:98:FD:74:F9
Certificate issuer:       /CN=A9110650/serialNumber=78B79CF82751861F279A5FA504931538DADCDAFA
Certificate serial:       02C4
Authority key identifier: 78:B7:9C:F8:27:51:86:1F:27:9A:5F:A5:04:93:15:38:DA:DC:DA:FA
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eLec-CdRhh8nml-lBJMVONrc2vo.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9110650/6596CC72C60111ECA38F3410C4F9AE02/424653EEC6CB11ECB185E43EC4F9AE02.roa
Signing time:             Fri 25 Oct 2024 01:45:08 +0000
ROA not before:           Fri 25 Oct 2024 01:45:08 +0000
ROA not after:            Tue 30 Dec 2025 00:00:00 +0000
asID:                     132742
IP address blocks:        43.243.240.0/22 maxlen: 24
                          103.39.56.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9110650/6596CC72C60111ECA38F3410C4F9AE02/eLec-CdRhh8nml-lBJMVONrc2vo.crl
                          rsync://rpki.apnic.net/member_repository/A9110650/6596CC72C60111ECA38F3410C4F9AE02/eLec-CdRhh8nml-lBJMVONrc2vo.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eLec-CdRhh8nml-lBJMVONrc2vo.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 27 Nov 2024 20:33:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 708 (0x2c4)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9110650/serialNumber=78B79CF82751861F279A5FA504931538DADCDAFA
        Validity
            Not Before: Oct 25 01:45:08 2024 GMT
            Not After : Dec 30 00:00:00 2025 GMT
        Subject: CN=671af823-5013
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:4b:b5:98:e4:04:a3:e5:7f:4a:84:57:04:6a:
                    05:6d:45:b2:82:eb:db:09:20:56:9d:30:7d:16:0f:
                    45:a4:3f:3a:c1:bf:44:99:7b:f6:7d:fb:e5:ca:84:
                    ac:87:2c:bf:c4:9d:c1:40:89:06:c9:b4:cf:62:1c:
                    86:93:ea:bf:72:25:ba:06:40:3a:b9:96:85:31:3f:
                    7c:ef:da:f8:8f:ce:4f:85:1d:4a:a1:2c:7e:46:2a:
                    5c:9d:da:be:32:87:69:40:83:c2:83:25:50:cd:d5:
                    a5:fb:38:2c:ec:65:e4:ab:e2:af:8d:8e:1a:af:0b:
                    f6:fe:87:e3:33:50:6d:c6:ec:53:f3:7c:55:6f:a9:
                    9a:2d:14:4d:a5:56:3f:de:77:d6:ce:27:da:fd:a3:
                    23:04:47:45:38:57:c9:57:56:85:c7:0f:ba:c9:b8:
                    d4:ff:de:b7:82:7e:95:cd:e5:84:d3:53:c4:a7:b7:
                    74:9d:b2:54:03:c3:dd:d5:0c:2b:9e:09:0b:e7:84:
                    0e:e2:59:04:0f:37:55:5d:e9:a6:b5:f3:76:fc:8c:
                    07:20:97:b1:e6:86:4b:54:8a:a0:8e:18:de:c7:ba:
                    e6:5f:f6:ac:f8:80:c2:03:64:f3:cf:54:9d:31:cc:
                    ef:4e:4f:b8:6f:9a:c1:56:94:68:3b:5d:a3:de:c1:
                    32:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BD:FB:00:BA:BD:F1:6C:64:52:CF:5A:88:C9:C7:7E:74:98:FD:74:F9
            X509v3 Authority Key Identifier:
                keyid:78:B7:9C:F8:27:51:86:1F:27:9A:5F:A5:04:93:15:38:DA:DC:DA:FA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9110650/6596CC72C60111ECA38F3410C4F9AE02/eLec-CdRhh8nml-lBJMVONrc2vo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eLec-CdRhh8nml-lBJMVONrc2vo.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9110650/6596CC72C60111ECA38F3410C4F9AE02/424653EEC6CB11ECB185E43EC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  43.243.240.0/22
                  103.39.56.0/22

    Signature Algorithm: sha256WithRSAEncryption
         87:52:4e:7d:d6:18:76:96:93:89:10:fc:d2:58:3b:5d:98:4e:
         92:86:4f:a7:7d:dd:3b:1b:5c:85:e0:4d:d9:6f:f7:62:1b:8e:
         7d:0d:86:c5:91:f8:bc:c4:37:1b:67:32:e3:8b:e1:cc:23:34:
         8b:34:96:f0:3b:21:1f:3f:3a:d4:17:b0:df:0d:cc:0a:af:cb:
         77:8d:92:b5:91:43:b6:52:34:93:57:7b:13:e4:6b:39:a7:1a:
         27:39:e9:90:cd:8a:15:85:78:31:5f:df:22:43:cb:a3:5d:3a:
         8c:c5:0b:51:17:81:b5:55:53:27:f3:51:dc:b8:95:d3:0c:0c:
         47:f6:16:b0:80:81:e2:3c:e1:7b:26:a5:b9:0e:b7:bf:65:37:
         1c:00:e7:1f:30:fe:16:93:05:f2:53:19:6f:bd:e4:2c:b0:19:
         fa:b2:95:6a:f0:c0:fa:df:19:79:36:49:7f:5b:c7:36:20:b4:
         b8:8e:56:4b:a2:3f:01:86:ab:b4:9b:c7:6d:09:11:16:e0:e1:
         86:6e:fa:69:d5:e1:b6:3e:17:ad:55:67:bb:b6:4c:a2:d1:f8:
         04:0d:e7:03:45:b0:d8:29:70:b2:c4:e7:bc:8e:41:85:12:27:
         12:39:4d:ab:05:48:04:7d:00:ad:24:2a:4e:cb:1b:58:07:81:
         e4:c6:7c:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 03:21:30 2024 by rpki-client on console-ams.rpki-client.org