Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9126996/1231FC68739411EEA170384DC4F9AE02/CD34C770739411EEB8BAE858C4F9AE02.roa
File:                     CD34C770739411EEB8BAE858C4F9AE02.roa (raw, json)
Hash identifier:          dHUWyA7t+OI4Hf/XcvAMzgewNzcJRsL7YMlUVTbODRw=
Subject key identifier:   BC:ED:53:B3:AE:AC:52:47:ED:E8:F9:56:FB:B5:C9:9A:EC:08:0A:09
Certificate issuer:       /CN=A9126996/serialNumber=6283BE9B31D29036B967BFF7B7E71BADD529A64E
Certificate serial:       93
Authority key identifier: 62:83:BE:9B:31:D2:90:36:B9:67:BF:F7:B7:E7:1B:AD:D5:29:A6:4E
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YoO-mzHSkDa5Z7_3t-cbrdUppk4.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9126996/1231FC68739411EEA170384DC4F9AE02/CD34C770739411EEB8BAE858C4F9AE02.roa
Signing time:             Mon 29 Jul 2024 06:07:22 +0000
ROA not before:           Mon 29 Jul 2024 06:07:22 +0000
ROA not after:            Tue 30 Sep 2025 00:00:00 +0000
asID:                     45447
IP address blocks:        103.22.144.0/22 maxlen: 22
                          2401:3900::/32 maxlen: 32

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9126996/1231FC68739411EEA170384DC4F9AE02/YoO-mzHSkDa5Z7_3t-cbrdUppk4.crl
                          rsync://rpki.apnic.net/member_repository/A9126996/1231FC68739411EEA170384DC4F9AE02/YoO-mzHSkDa5Z7_3t-cbrdUppk4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YoO-mzHSkDa5Z7_3t-cbrdUppk4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 28 Nov 2024 03:55:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 147 (0x93)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9126996/serialNumber=6283BE9B31D29036B967BFF7B7E71BADD529A64E
        Validity
            Not Before: Jul 29 06:07:22 2024 GMT
            Not After : Sep 30 00:00:00 2025 GMT
        Subject: CN=66a7319a-863e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f8:5d:9c:04:f4:2a:36:ab:b6:5e:42:af:8d:54:
                    67:dc:65:5e:42:4b:56:67:62:7b:1d:9b:51:d7:41:
                    3a:28:a9:02:88:4e:b1:1c:7e:bf:cb:af:39:a8:d0:
                    3c:88:8e:be:d7:b8:89:80:e9:94:fa:0f:28:0e:13:
                    dd:c0:c5:bc:48:bd:bc:e8:7e:a4:a1:e0:56:43:f6:
                    d0:1d:fd:cd:e7:0a:69:d3:a7:79:4c:79:78:91:70:
                    40:db:51:a0:cd:52:11:14:ed:61:14:39:41:79:7b:
                    e2:2d:e7:7b:aa:8b:1e:51:69:4e:66:61:ac:98:eb:
                    63:61:0b:cf:e6:21:fd:6f:49:d0:1a:e5:8f:31:b6:
                    00:a1:66:a5:32:e9:e1:59:b0:f8:10:f4:21:fc:79:
                    45:eb:64:b7:b1:f0:e7:24:c8:37:d5:ae:c5:8b:77:
                    6b:81:6f:cf:b6:0f:16:16:d9:a9:1d:27:b1:6f:cd:
                    bb:46:1d:39:03:e6:a2:b2:80:9d:6a:82:4a:22:78:
                    f6:d8:39:57:b4:c3:3b:47:fe:56:68:73:e4:9f:f7:
                    64:37:8f:78:a0:d2:8e:d6:3a:73:cb:4e:50:14:de:
                    c3:79:17:ac:64:84:b2:6b:67:9e:bd:b4:63:f9:06:
                    5c:c1:05:46:bd:8d:4d:36:99:53:9c:27:b6:ae:dc:
                    79:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BC:ED:53:B3:AE:AC:52:47:ED:E8:F9:56:FB:B5:C9:9A:EC:08:0A:09
            X509v3 Authority Key Identifier:
                keyid:62:83:BE:9B:31:D2:90:36:B9:67:BF:F7:B7:E7:1B:AD:D5:29:A6:4E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9126996/1231FC68739411EEA170384DC4F9AE02/YoO-mzHSkDa5Z7_3t-cbrdUppk4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YoO-mzHSkDa5Z7_3t-cbrdUppk4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9126996/1231FC68739411EEA170384DC4F9AE02/CD34C770739411EEB8BAE858C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.22.144.0/22
                IPv6:
                  2401:3900::/32

    Signature Algorithm: sha256WithRSAEncryption
         16:48:69:27:c9:45:8f:5e:88:23:15:b7:9d:5c:60:8a:ce:5b:
         fa:87:d1:5f:7b:c0:91:27:21:42:24:7b:eb:a5:3a:f4:4a:53:
         97:61:f0:be:70:b2:b6:eb:78:e9:ad:7d:29:3f:5e:a0:48:c2:
         52:2d:73:0c:dd:70:d8:26:e8:c7:a9:46:17:e3:c6:b7:91:4c:
         83:20:d9:b8:d8:05:8d:38:29:bc:26:8c:ca:f1:b2:29:cf:f1:
         db:6b:13:9f:90:3a:12:1e:fd:76:9a:f1:6f:31:85:2a:b4:fe:
         b7:be:3b:67:fe:49:c0:af:08:ea:37:9b:27:4f:9c:76:05:e2:
         03:6c:e5:02:75:14:61:89:b3:7f:6c:2e:38:fc:b8:20:af:49:
         c0:8c:70:f4:7c:ef:f4:f4:e9:0c:07:e3:30:54:2f:3d:4d:a5:
         fd:3e:56:eb:7f:df:be:a1:21:19:ba:3a:96:d6:ff:cd:13:09:
         ac:c0:4a:b0:f1:0f:a6:33:aa:3a:eb:26:ab:6d:a0:4c:17:7c:
         e7:8e:e8:28:28:86:26:a0:93:7a:a2:ef:03:55:1e:35:14:45:
         73:d5:a6:35:da:1e:f9:72:a7:3f:74:1d:24:9b:6d:82:ed:d3:
         3d:b9:38:ac:52:58:14:a5:75:7a:90:63:0b:eb:8c:0e:8f:43:
         df:f6:73:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 05:05:54 2024 by rpki-client on console-fra.rpki-client.org