Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91273F9/1CF59746C6BF11EC83649420C4F9AE02/EE17560EC6C211EC87251528C4F9AE02.roa
File:                     EE17560EC6C211EC87251528C4F9AE02.roa (raw, json)
Hash identifier:          HMDalHghoswUvAah8/E8KIPgvtV+nIQu8too/dBJyyg=
Subject key identifier:   2F:01:20:91:43:57:C6:3C:CC:24:17:95:F1:28:6D:A0:DE:CA:D0:24
Certificate issuer:       /CN=A91273F9/serialNumber=749888181655242372C4E0A10E063799B870DE1B
Certificate serial:       02A3
Authority key identifier: 74:98:88:18:16:55:24:23:72:C4:E0:A1:0E:06:37:99:B8:70:DE:1B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dJiIGBZVJCNyxOChDgY3mbhw3hs.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91273F9/1CF59746C6BF11EC83649420C4F9AE02/EE17560EC6C211EC87251528C4F9AE02.roa
Signing time:             Sat 31 Aug 2024 03:35:09 +0000
ROA not before:           Sat 31 Aug 2024 03:35:09 +0000
ROA not after:            Fri 31 Oct 2025 00:00:00 +0000
asID:                     132742
IP address blocks:        45.123.196.0/22 maxlen: 24
                          103.192.40.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91273F9/1CF59746C6BF11EC83649420C4F9AE02/dJiIGBZVJCNyxOChDgY3mbhw3hs.crl
                          rsync://rpki.apnic.net/member_repository/A91273F9/1CF59746C6BF11EC83649420C4F9AE02/dJiIGBZVJCNyxOChDgY3mbhw3hs.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dJiIGBZVJCNyxOChDgY3mbhw3hs.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 27 Nov 2024 20:33:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 675 (0x2a3)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91273F9/serialNumber=749888181655242372C4E0A10E063799B870DE1B
        Validity
            Not Before: Aug 31 03:35:09 2024 GMT
            Not After : Oct 31 00:00:00 2025 GMT
        Subject: CN=66d28f6d-1d28
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:d2:c0:48:83:c3:3a:1e:21:33:46:66:f1:f9:
                    46:12:7f:02:77:27:a7:08:55:84:e3:52:80:7a:c5:
                    c2:63:13:ec:c3:71:ad:95:a8:08:06:76:ef:b4:3b:
                    2b:e0:78:e3:a5:83:35:aa:8c:62:7c:32:3a:3f:e8:
                    15:a7:b8:38:3f:ce:ca:1b:81:cb:49:9e:80:3a:61:
                    88:31:fc:e3:6d:0b:dd:ae:86:eb:b2:65:43:66:e0:
                    6d:c1:99:33:7d:cc:05:29:bf:c8:e0:91:ff:23:dd:
                    12:81:c9:79:5b:8c:c5:7e:70:5a:2b:95:0a:64:f4:
                    d2:57:05:bf:24:0a:c3:f6:3d:1d:5f:a3:a1:a2:ae:
                    49:40:20:b2:c3:e2:f8:c4:84:ec:a5:46:35:af:6d:
                    82:be:f6:61:d0:b8:d4:82:da:a4:c9:3c:5b:39:58:
                    a9:11:17:0e:97:4f:30:94:8f:b9:c8:8d:e7:2f:2e:
                    8c:15:e0:a7:ba:dc:5a:24:fa:90:2f:dc:ae:31:42:
                    96:21:0c:e7:4a:8f:65:50:e9:41:8d:e1:00:68:43:
                    5c:24:b1:a7:60:0a:ac:ed:3f:b4:d9:c9:50:38:0f:
                    34:82:13:53:5c:6d:50:6b:fe:d9:f3:23:fc:43:a2:
                    fb:74:00:dd:45:0b:36:70:a4:c0:33:a5:e1:e6:79:
                    b1:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2F:01:20:91:43:57:C6:3C:CC:24:17:95:F1:28:6D:A0:DE:CA:D0:24
            X509v3 Authority Key Identifier:
                keyid:74:98:88:18:16:55:24:23:72:C4:E0:A1:0E:06:37:99:B8:70:DE:1B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91273F9/1CF59746C6BF11EC83649420C4F9AE02/dJiIGBZVJCNyxOChDgY3mbhw3hs.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dJiIGBZVJCNyxOChDgY3mbhw3hs.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91273F9/1CF59746C6BF11EC83649420C4F9AE02/EE17560EC6C211EC87251528C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.123.196.0/22
                  103.192.40.0/22

    Signature Algorithm: sha256WithRSAEncryption
         a3:e5:22:6a:5f:23:e7:3b:af:4e:a2:9c:b3:dc:ac:b7:06:a5:
         17:82:69:f3:7e:be:ee:ab:bd:c1:55:98:db:db:d2:54:ec:81:
         72:33:2d:d9:11:84:c2:d5:8f:2c:e0:4e:f2:12:91:3f:ff:02:
         38:4d:1b:43:c5:60:9c:24:01:80:a6:dc:4b:21:cd:8c:63:a4:
         a7:1d:99:5c:be:6d:aa:64:c1:2f:51:f7:92:e2:79:02:55:36:
         f9:0e:30:1b:f6:81:9b:e6:a4:ba:06:08:09:23:0a:de:56:34:
         3c:c8:c5:35:b7:7d:fb:89:27:2f:02:db:ea:47:9b:b1:b1:0b:
         eb:19:9b:e5:15:15:c1:c5:aa:1b:40:14:e6:8f:99:af:f5:e0:
         16:49:8e:9b:56:aa:32:24:c7:8b:96:b3:99:62:4f:e7:56:4c:
         63:1b:86:29:af:b2:ac:ba:c5:00:b1:62:49:aa:04:85:7e:da:
         8d:9c:5a:e5:14:d7:dc:09:77:59:38:d3:d8:e0:69:2c:16:09:
         f7:32:63:75:27:d5:2b:02:ec:6b:4a:0b:a1:43:25:c4:b9:91:
         1b:cd:ee:6b:af:4c:3e:7b:5f:f6:48:aa:fa:b7:f3:2d:26:b5:
         d6:04:a8:fa:4d:b9:5f:af:d0:df:36:dd:5e:33:4b:b0:23:08:
         88:d3:ac:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 03:21:32 2024 by rpki-client on console-ams.rpki-client.org