Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A919040F/707B7B80236311EA8B4F390BC4F9AE02/20748896236511EABCF20E10C4F9AE02.roa
File:                     20748896236511EABCF20E10C4F9AE02.roa (raw, json)
Hash identifier:          WBHTJ02r7No790rbFdZPQ4e1Vkcdj+CzlNb+ihLNe2o=
Subject key identifier:   E2:B4:B5:9F:4A:AB:C1:64:F9:C1:06:DA:D7:33:A7:76:83:2C:8B:88
Certificate issuer:       /CN=A919040F/serialNumber=C8FCCCC4BE898AA920671366A0FD795329E9201D
Certificate serial:       0B37
Authority key identifier: C8:FC:CC:C4:BE:89:8A:A9:20:67:13:66:A0:FD:79:53:29:E9:20:1D
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yPzMxL6JiqkgZxNmoP15UynpIB0.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A919040F/707B7B80236311EA8B4F390BC4F9AE02/20748896236511EABCF20E10C4F9AE02.roa
Signing time:             Wed 02 Oct 2024 19:27:48 +0000
ROA not before:           Wed 02 Oct 2024 19:27:48 +0000
ROA not after:            Tue 30 Dec 2025 00:00:00 +0000
asID:                     14618
IP address blocks:        103.143.45.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A919040F/707B7B80236311EA8B4F390BC4F9AE02/yPzMxL6JiqkgZxNmoP15UynpIB0.crl
                          rsync://rpki.apnic.net/member_repository/A919040F/707B7B80236311EA8B4F390BC4F9AE02/yPzMxL6JiqkgZxNmoP15UynpIB0.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yPzMxL6JiqkgZxNmoP15UynpIB0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 27 Nov 2024 18:54:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2871 (0xb37)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A919040F/serialNumber=C8FCCCC4BE898AA920671366A0FD795329E9201D
        Validity
            Not Before: Oct  2 19:27:48 2024 GMT
            Not After : Dec 30 00:00:00 2025 GMT
        Subject: CN=66fd9eb4-1279
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:7b:77:94:c2:48:72:21:29:38:f1:ce:65:bf:
                    c5:0a:f1:fe:45:fd:8c:52:40:d2:f8:e7:05:cd:13:
                    ad:ab:7b:1e:6c:df:be:d6:e1:9f:7f:cd:58:67:c7:
                    30:7f:8d:ce:ff:ad:57:38:fe:9a:82:ba:be:d6:65:
                    58:13:fc:b6:b4:1b:b1:21:9b:2f:34:eb:77:a9:6a:
                    12:07:cd:7a:81:04:15:95:8d:55:60:41:ef:b4:e8:
                    81:7a:c3:34:34:85:52:a4:3f:b8:c6:1b:a5:1c:bd:
                    2b:65:97:f4:f3:95:a6:bd:f5:0f:01:94:1a:27:16:
                    08:8b:4e:a0:0a:67:57:b5:ab:e7:af:41:8a:b2:fc:
                    c7:7e:c1:bd:09:16:3b:3c:47:7a:90:af:82:99:38:
                    a5:16:da:5b:cd:ad:1d:87:d8:72:05:0b:9f:29:8a:
                    6c:37:74:c4:39:66:00:04:1d:fb:1a:72:33:b4:fc:
                    cd:1c:4f:9b:c0:64:d3:55:96:0d:fe:9c:12:45:12:
                    0d:e7:52:8e:90:32:3e:09:6a:f6:45:71:7a:9f:4a:
                    f9:02:30:39:28:e4:22:e2:ec:1b:ac:6a:40:66:c2:
                    7e:2d:ba:19:d6:dc:b1:f6:a4:2b:0c:03:21:a8:27:
                    d0:e9:d1:68:bc:0c:be:d9:71:ad:15:31:4f:c6:d1:
                    f6:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E2:B4:B5:9F:4A:AB:C1:64:F9:C1:06:DA:D7:33:A7:76:83:2C:8B:88
            X509v3 Authority Key Identifier:
                keyid:C8:FC:CC:C4:BE:89:8A:A9:20:67:13:66:A0:FD:79:53:29:E9:20:1D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A919040F/707B7B80236311EA8B4F390BC4F9AE02/yPzMxL6JiqkgZxNmoP15UynpIB0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yPzMxL6JiqkgZxNmoP15UynpIB0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919040F/707B7B80236311EA8B4F390BC4F9AE02/20748896236511EABCF20E10C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.143.45.0/24

    Signature Algorithm: sha256WithRSAEncryption
         5e:32:0c:31:7f:f8:5c:91:39:ff:16:5b:6d:7c:e5:4d:3d:5b:
         4b:2c:a1:d1:d7:f9:ab:a7:ba:27:80:70:59:ca:3e:00:16:f9:
         ca:c6:fd:63:59:e6:b9:8e:69:7d:6a:15:20:89:d4:e3:c2:66:
         43:dd:1f:77:a0:b8:32:bb:8b:30:56:78:6b:93:7c:d8:0e:30:
         06:c1:d4:c3:9e:02:1e:1b:9f:6b:50:4a:30:a5:71:2b:ba:71:
         4e:ce:79:78:14:24:fd:6e:6c:6a:32:15:d1:a8:ef:1b:14:f9:
         99:7e:21:07:7c:7c:b4:8d:5b:77:13:0c:06:e4:55:55:50:98:
         f2:13:98:e2:eb:1d:ee:ac:16:70:b5:59:b1:01:e8:28:3c:2e:
         27:b7:13:0f:cc:db:da:f0:fd:fe:b9:67:c4:9b:c7:ba:b2:ee:
         72:d4:59:56:9a:f5:fe:09:b1:4e:a3:ed:db:7f:b4:f9:27:84:
         ce:c9:91:0b:9d:05:cd:2d:74:70:10:ab:e0:f5:66:2c:a8:ed:
         e2:cb:0f:b1:e4:a4:a2:c2:3b:2e:54:50:75:31:ba:b1:cb:bb:
         24:ff:4a:cb:21:48:6f:de:65:45:48:8f:28:c1:9d:fa:f3:67:
         65:49:20:26:23:5f:39:cf:ca:13:a1:96:d2:3a:b4:16:4d:76:
         3e:00:79:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 20 21:34:55 2024 by rpki-client on console-ams.rpki-client.org