Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A911270F/05D82EE039F711EA967EBA2EC4F9AE02/74D2ABEE39F811EAA4343534C4F9AE02.roa
File:                     74D2ABEE39F811EAA4343534C4F9AE02.roa (raw, json)
Hash identifier:          iihbxxzXFJmHmXitRWziyO9onMcMt6rFaPwqQf4Yb9Y=
Subject key identifier:   32:F1:CE:83:8A:B7:A2:2D:F4:EE:3C:BA:92:D2:E0:80:BE:C4:AD:C5
Certificate issuer:       /CN=A911270F/serialNumber=50AB13100543F646C0C55375DEF8505D14F366B8
Certificate serial:       0A54
Authority key identifier: 50:AB:13:10:05:43:F6:46:C0:C5:53:75:DE:F8:50:5D:14:F3:66:B8
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UKsTEAVD9kbAxVN13vhQXRTzZrg.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A911270F/05D82EE039F711EA967EBA2EC4F9AE02/74D2ABEE39F811EAA4343534C4F9AE02.roa
Signing time:             Thu 14 Mar 2024 20:08:59 +0000
ROA not before:           Thu 14 Mar 2024 20:08:59 +0000
ROA not after:            Thu 01 May 2025 00:00:00 +0000
asID:                     140040
IP address blocks:        103.147.190.0/23 maxlen: 23
                          103.147.190.0/24 maxlen: 24
                          103.147.191.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A911270F/05D82EE039F711EA967EBA2EC4F9AE02/UKsTEAVD9kbAxVN13vhQXRTzZrg.crl
                          rsync://rpki.apnic.net/member_repository/A911270F/05D82EE039F711EA967EBA2EC4F9AE02/UKsTEAVD9kbAxVN13vhQXRTzZrg.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UKsTEAVD9kbAxVN13vhQXRTzZrg.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 29 Nov 2024 19:08:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2644 (0xa54)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A911270F/serialNumber=50AB13100543F646C0C55375DEF8505D14F366B8
        Validity
            Not Before: Mar 14 20:08:59 2024 GMT
            Not After : May  1 00:00:00 2025 GMT
        Subject: CN=65f3595b-1d32
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:54:a3:c6:62:29:6b:b4:b4:e1:49:7c:c2:c7:
                    93:c5:3e:2f:4e:2d:73:7d:d9:78:0c:ac:03:c9:2b:
                    a6:db:50:39:ee:2f:ec:f3:55:9f:f8:1c:87:ca:de:
                    83:2e:ee:39:4f:68:07:3d:f1:82:3c:a1:15:f1:d0:
                    49:85:dc:fc:50:46:0e:44:7e:73:24:b7:4b:44:67:
                    ea:d5:05:d9:b6:bf:68:92:b1:58:90:d3:60:ec:f9:
                    d1:b8:46:4e:d0:e7:96:58:2c:a8:b6:57:a5:d3:6f:
                    a3:77:9d:2d:8d:ce:ef:0a:b7:57:d1:fd:dd:07:18:
                    2b:5b:c5:d5:1a:5d:84:03:40:36:bd:41:d5:37:90:
                    68:26:a6:3f:a2:4c:58:5e:c3:19:a1:b5:70:61:19:
                    f8:7b:02:a4:38:28:f6:df:8c:99:3b:68:d4:66:17:
                    ee:30:82:f5:d1:02:4e:8f:f5:9b:38:90:cb:b4:8b:
                    bb:0d:3e:ef:c9:8b:1f:bc:62:1d:f4:90:ce:bd:00:
                    40:3f:12:aa:f8:f4:ba:b2:04:e1:98:0b:23:a8:2f:
                    17:d3:bd:24:ad:ea:1f:1d:5b:53:2c:38:d8:af:e3:
                    0a:25:f6:0c:c5:31:de:c0:d7:7b:9d:48:18:ca:9f:
                    04:ed:32:71:a4:d2:62:2c:06:f2:29:e8:e8:21:fa:
                    94:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                32:F1:CE:83:8A:B7:A2:2D:F4:EE:3C:BA:92:D2:E0:80:BE:C4:AD:C5
            X509v3 Authority Key Identifier:
                keyid:50:AB:13:10:05:43:F6:46:C0:C5:53:75:DE:F8:50:5D:14:F3:66:B8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A911270F/05D82EE039F711EA967EBA2EC4F9AE02/UKsTEAVD9kbAxVN13vhQXRTzZrg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UKsTEAVD9kbAxVN13vhQXRTzZrg.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911270F/05D82EE039F711EA967EBA2EC4F9AE02/74D2ABEE39F811EAA4343534C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.147.190.0/23

    Signature Algorithm: sha256WithRSAEncryption
         93:ac:30:48:fe:d9:5b:d3:ad:cc:d0:69:fc:16:8f:11:d8:37:
         3f:4b:e9:1b:ff:07:7a:12:59:99:c4:5a:57:ca:cc:e7:9c:3c:
         ba:dc:8b:92:75:67:38:7d:74:4d:ce:b4:70:5c:d1:24:bd:c1:
         e4:ad:e9:03:42:ab:85:0d:76:a1:ca:72:05:ef:45:1f:38:c4:
         fe:db:c9:61:56:8d:a6:f8:58:20:14:21:f4:af:8f:fd:aa:64:
         91:bf:8d:a4:b4:3c:fd:38:81:f8:4e:e7:22:2f:e6:f1:58:50:
         57:a8:3b:86:43:91:3d:3f:5a:76:2d:68:e2:07:3d:bc:4c:6e:
         85:7c:8c:80:46:2f:fb:c2:f8:fb:58:11:a5:82:11:ad:f7:e4:
         d1:72:01:89:d4:d5:bc:63:96:ee:05:25:f6:60:ff:e6:51:49:
         64:15:92:f1:be:94:14:5e:57:77:98:10:02:a1:67:b1:6e:e7:
         41:fb:92:2a:92:6f:bd:de:20:e7:53:ea:89:c5:98:34:03:47:
         b3:69:1e:3b:18:9a:9a:4b:10:36:f2:70:d6:2f:6a:15:5a:47:
         b1:3e:f9:cc:7e:27:f8:af:1a:be:6d:33:1f:cb:3f:96:8e:7d:
         f7:b4:34:79:c9:a6:5a:69:1d:b9:5d:67:b6:e7:f7:57:36:bf:
         99:04:61:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 22:14:20 2024 by rpki-client on console-ams.rpki-client.org