Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A912A646/2F639EB0F58511EC87F6FE13C4F9AE02/460F948CF58C11ECAE269934C4F9AE02.roa
File:                     460F948CF58C11ECAE269934C4F9AE02.roa (raw, json)
Hash identifier:          kddDiY1SaBXbZLYfj0lZgL5nuCOTpHEBUPrzkMRd/3M=
Subject key identifier:   3C:92:D0:FA:1B:C0:FF:57:AC:A2:30:C1:3F:D8:A8:48:B6:58:51:83
Certificate issuer:       /CN=A912A646/serialNumber=3FB3582470ED03F19435E69B2C19B4074770F097
Certificate serial:       0229
Authority key identifier: 3F:B3:58:24:70:ED:03:F1:94:35:E6:9B:2C:19:B4:07:47:70:F0:97
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/P7NYJHDtA_GUNeabLBm0B0dw8Jc.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A912A646/2F639EB0F58511EC87F6FE13C4F9AE02/460F948CF58C11ECAE269934C4F9AE02.roa
Signing time:             Wed 17 Jul 2024 03:25:02 +0000
ROA not before:           Wed 17 Jul 2024 03:25:02 +0000
ROA not after:            Tue 30 Sep 2025 00:00:00 +0000
asID:                     149986
IP address blocks:        103.190.22.0/23 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A912A646/2F639EB0F58511EC87F6FE13C4F9AE02/P7NYJHDtA_GUNeabLBm0B0dw8Jc.crl
                          rsync://rpki.apnic.net/member_repository/A912A646/2F639EB0F58511EC87F6FE13C4F9AE02/P7NYJHDtA_GUNeabLBm0B0dw8Jc.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/P7NYJHDtA_GUNeabLBm0B0dw8Jc.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 30 Nov 2024 01:16:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 553 (0x229)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A912A646/serialNumber=3FB3582470ED03F19435E69B2C19B4074770F097
        Validity
            Not Before: Jul 17 03:25:02 2024 GMT
            Not After : Sep 30 00:00:00 2025 GMT
        Subject: CN=6697398d-6e9a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:b5:d1:9e:f3:0d:6f:d0:14:72:dc:51:7e:eb:
                    a1:e2:21:5e:bb:c7:5c:61:83:64:3c:cb:be:e9:61:
                    bc:af:a0:46:05:33:ea:a7:73:20:d4:37:4d:3d:15:
                    b3:c4:ee:eb:d6:ae:bd:3a:07:6a:b1:80:40:8d:76:
                    84:3b:09:aa:0a:46:8a:99:03:43:2f:6e:1c:c7:1a:
                    2c:e2:3e:53:32:60:25:11:79:1a:d1:0b:1f:db:33:
                    28:e0:bd:1c:01:27:6c:41:4a:d5:6f:55:37:d8:fa:
                    ae:33:dc:55:d2:28:91:dd:37:58:c3:9b:eb:f4:b4:
                    52:cb:3c:62:10:1a:fb:13:f0:c9:d4:44:d1:2e:c1:
                    94:88:32:e6:0f:21:fc:13:a1:a5:9c:28:04:25:96:
                    95:ce:5c:f1:2e:d7:b9:4b:65:88:33:54:e0:6a:23:
                    00:34:50:d7:20:06:64:9e:10:43:b0:23:63:56:a5:
                    9a:3c:d6:43:3d:e4:d0:43:6d:cc:d7:02:82:49:c2:
                    d8:19:a1:d8:0c:f6:bf:8a:49:14:0d:88:ef:48:b7:
                    f6:75:a2:93:7d:1f:b7:56:6a:71:d5:9e:6a:8c:9e:
                    fb:7c:25:56:7e:9d:c6:cf:9c:91:de:01:41:af:0d:
                    f2:1c:4b:30:e2:de:25:9a:b1:4a:14:23:c7:71:a8:
                    e9:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3C:92:D0:FA:1B:C0:FF:57:AC:A2:30:C1:3F:D8:A8:48:B6:58:51:83
            X509v3 Authority Key Identifier:
                keyid:3F:B3:58:24:70:ED:03:F1:94:35:E6:9B:2C:19:B4:07:47:70:F0:97

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A912A646/2F639EB0F58511EC87F6FE13C4F9AE02/P7NYJHDtA_GUNeabLBm0B0dw8Jc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/P7NYJHDtA_GUNeabLBm0B0dw8Jc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912A646/2F639EB0F58511EC87F6FE13C4F9AE02/460F948CF58C11ECAE269934C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.190.22.0/23

    Signature Algorithm: sha256WithRSAEncryption
         92:b9:9b:24:63:62:d3:a8:3d:dd:9b:91:95:1a:14:b5:09:1a:
         60:a8:f7:10:7a:06:fd:7a:9b:4b:1c:9a:21:a8:48:ee:c1:48:
         c2:80:fe:94:e3:09:c8:ea:f2:de:68:1e:42:77:52:de:6e:5b:
         95:7b:e5:82:b6:42:21:b1:7d:02:1e:3f:78:08:9c:22:a7:07:
         56:10:b1:c0:ba:ad:c4:b4:54:56:21:b7:25:da:48:be:1f:15:
         cb:84:d7:50:ea:36:cf:40:92:a3:27:80:3d:fa:1f:ef:cd:de:
         2a:2a:25:10:fe:eb:20:6f:a1:68:6e:cf:21:b8:47:9e:b5:e0:
         98:9d:69:fa:3e:f7:80:ed:6e:6e:1a:9a:73:5a:ac:8b:c9:fb:
         94:e9:7c:69:60:7d:15:7a:4c:0f:74:fd:e0:36:3b:f7:2f:db:
         bc:1b:08:11:a1:2b:65:90:0a:d3:f1:f8:5b:a3:25:f4:c7:ed:
         28:8b:af:16:59:bf:9e:26:d8:e7:10:27:24:46:35:3a:9f:0a:
         92:f4:bb:72:46:8f:6c:41:70:f8:30:46:00:46:f8:41:29:11:
         be:b5:11:ea:8d:30:e1:d1:46:5a:5c:c1:8b:d1:ad:ab:2e:77:
         fa:a5:98:04:b1:7a:cd:06:aa:e5:7e:02:22:3d:49:d7:97:f6:
         74:3a:fb:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 03:58:36 2024 by rpki-client on console-ams.rpki-client.org