Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9144C70/82BC84EEAC6711ECB75CDA24C4F9AE02/B546EBFEA2F811EFA29F873AC4F9AE02.roa
File:                     B546EBFEA2F811EFA29F873AC4F9AE02.roa (raw, json)
Hash identifier:          MqzzAzr1z8WUt2hgwcYlQRzSoFaRw0QC63G+ODEmE5c=
Subject key identifier:   A9:CE:58:1B:05:27:36:8A:5F:24:39:83:AE:34:F9:83:1D:58:36:F6
Certificate issuer:       /CN=A9144C70/serialNumber=0289E1E082B6DA1ABA5552840C0CAB02C2A3B74E
Certificate serial:       02
Authority key identifier: 02:89:E1:E0:82:B6:DA:1A:BA:55:52:84:0C:0C:AB:02:C2:A3:B7:4E
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Aonh4IK22hq6VVKEDAyrAsKjt04.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9144C70/82BC84EEAC6711ECB75CDA24C4F9AE02/B546EBFEA2F811EFA29F873AC4F9AE02.roa
Signing time:             Fri 15 Nov 2024 02:24:15 +0000
ROA not before:           Fri 15 Nov 2024 02:24:15 +0000
ROA not after:            Tue 01 Jul 2025 00:00:00 +0000
asID:                     149644
IP address blocks:        103.183.116.0/23 maxlen: 23
                          103.183.116.0/24 maxlen: 24
                          103.183.117.0/24 maxlen: 24
                          2400:62a0::/32 maxlen: 32

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9144C70/82BC84EEAC6711ECB75CDA24C4F9AE02/Aonh4IK22hq6VVKEDAyrAsKjt04.crl
                          rsync://rpki.apnic.net/member_repository/A9144C70/82BC84EEAC6711ECB75CDA24C4F9AE02/Aonh4IK22hq6VVKEDAyrAsKjt04.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Aonh4IK22hq6VVKEDAyrAsKjt04.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 29 Nov 2024 20:43:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2 (0x2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9144C70/serialNumber=0289E1E082B6DA1ABA5552840C0CAB02C2A3B74E
        Validity
            Not Before: Nov 15 02:24:15 2024 GMT
            Not After : Jul  1 00:00:00 2025 GMT
        Subject: CN=6736b0cf-f4f7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:23:9a:67:71:b7:96:59:56:35:e7:00:37:82:
                    79:33:46:21:1b:5a:ae:1a:42:9d:69:19:5a:67:56:
                    f8:0d:e5:8e:c5:7e:a2:f4:73:a3:b3:4f:b6:66:82:
                    49:c0:50:b5:ba:bc:7e:c7:f7:cf:eb:75:5c:aa:43:
                    4a:7d:78:7e:c6:6a:7d:54:e5:d5:db:9f:94:05:ed:
                    6d:89:52:aa:bb:43:63:67:04:39:65:3e:9e:56:80:
                    95:e0:4f:5d:66:8f:69:b4:dc:a1:77:bc:f5:ba:ed:
                    7b:1e:f7:f7:32:cb:0b:72:ad:61:45:12:14:7f:40:
                    e7:d4:14:d9:1a:ae:7f:33:84:42:6f:97:e8:cf:4d:
                    0f:07:cc:8a:58:b5:a0:34:26:7a:4e:b2:26:67:fe:
                    22:3f:0f:6a:3f:95:91:74:a0:2e:3e:f8:62:fe:10:
                    41:02:e1:e6:1a:5e:93:c1:bf:76:a4:78:a3:9d:70:
                    98:b6:ba:36:59:08:42:f0:7b:f1:d9:25:37:6a:1d:
                    f6:5d:3a:e7:0a:4d:78:74:12:58:87:1a:b8:8f:35:
                    ac:37:20:49:e8:27:e7:66:97:9e:d5:98:46:46:03:
                    fe:3d:d7:a1:67:0b:61:98:95:16:76:7e:36:83:33:
                    e3:29:c4:fa:ac:2d:65:3f:16:ff:a9:ad:6d:36:96:
                    9f:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A9:CE:58:1B:05:27:36:8A:5F:24:39:83:AE:34:F9:83:1D:58:36:F6
            X509v3 Authority Key Identifier:
                keyid:02:89:E1:E0:82:B6:DA:1A:BA:55:52:84:0C:0C:AB:02:C2:A3:B7:4E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9144C70/82BC84EEAC6711ECB75CDA24C4F9AE02/Aonh4IK22hq6VVKEDAyrAsKjt04.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Aonh4IK22hq6VVKEDAyrAsKjt04.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9144C70/82BC84EEAC6711ECB75CDA24C4F9AE02/B546EBFEA2F811EFA29F873AC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.183.116.0/23
                IPv6:
                  2400:62a0::/32

    Signature Algorithm: sha256WithRSAEncryption
         82:39:6e:ab:9f:06:a6:27:9d:4f:d4:ff:d6:c5:b4:35:94:ad:
         c4:b8:7c:41:64:cc:d1:65:4e:0b:8f:bc:35:17:d5:66:84:d4:
         c3:91:2c:7a:99:47:df:80:ba:4a:b6:a6:c8:3c:f0:c5:0d:db:
         dd:67:23:35:ab:a3:71:47:40:96:26:c0:ab:aa:38:a1:f8:cb:
         f1:3a:e7:57:8c:bd:24:74:dc:a5:3b:23:8a:c7:53:e5:c7:83:
         a7:d6:aa:cf:a7:4d:f1:f9:4b:b0:3a:18:e2:84:e0:ec:1a:fc:
         b1:8b:44:8f:f1:ba:53:84:2a:29:cc:4f:84:00:87:26:c0:c4:
         32:dd:c3:ea:a6:d5:07:c2:1b:8d:e0:73:2b:ef:9a:b3:79:0b:
         88:11:a4:10:64:6e:c6:d1:25:7b:7c:a1:d0:29:c6:40:e3:9b:
         a5:3c:85:38:7b:db:02:ac:ff:c6:8a:7b:d8:c9:7f:14:b0:8e:
         2f:5f:c0:07:15:3a:f8:1f:9f:f5:10:b9:3c:c6:5b:8c:f5:c5:
         62:6f:16:34:86:49:40:de:72:0b:41:31:3d:20:df:6f:fd:3f:
         db:5c:8b:77:df:2a:bd:71:c1:f0:01:09:84:81:fd:dd:3c:5c:
         a0:6a:85:53:15:44:d9:85:4b:fc:3d:de:be:16:ff:92:cd:9a:
         0d:93:27:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 02:33:35 2024 by rpki-client on console-fra.rpki-client.org