Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A919C6E7/E4A0CCAE5DDD11EF830DF561C4F9AE02/73EF25545DDE11EFBCDB7463C4F9AE02.roa
File:                     73EF25545DDE11EFBCDB7463C4F9AE02.roa (raw, json)
Hash identifier:          JrlJ2EvGFrH8+I8VUWwxgID9iYwpW3LVV5yISMkbZ08=
Subject key identifier:   54:06:18:B2:FB:A3:CA:BF:FF:E8:56:F8:09:88:DC:98:C3:F2:9A:CA
Certificate issuer:       /CN=A919C6E7/serialNumber=711617002D9F0C9EB65B4EDD61F7A1C91FCDB83E
Certificate serial:       02
Authority key identifier: 71:16:17:00:2D:9F:0C:9E:B6:5B:4E:DD:61:F7:A1:C9:1F:CD:B8:3E
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cRYXAC2fDJ62W07dYfehyR_NuD4.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A919C6E7/E4A0CCAE5DDD11EF830DF561C4F9AE02/73EF25545DDE11EFBCDB7463C4F9AE02.roa
Signing time:             Mon 19 Aug 2024 03:52:28 +0000
ROA not before:           Mon 19 Aug 2024 03:52:28 +0000
ROA not after:            Tue 30 Sep 2025 00:00:00 +0000
asID:                     26658
IP address blocks:        45.120.204.0/22 maxlen: 22
                          103.61.20.0/22 maxlen: 22

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A919C6E7/E4A0CCAE5DDD11EF830DF561C4F9AE02/cRYXAC2fDJ62W07dYfehyR_NuD4.crl
                          rsync://rpki.apnic.net/member_repository/A919C6E7/E4A0CCAE5DDD11EF830DF561C4F9AE02/cRYXAC2fDJ62W07dYfehyR_NuD4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cRYXAC2fDJ62W07dYfehyR_NuD4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 28 Nov 2024 05:18:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2 (0x2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A919C6E7/serialNumber=711617002D9F0C9EB65B4EDD61F7A1C91FCDB83E
        Validity
            Not Before: Aug 19 03:52:28 2024 GMT
            Not After : Sep 30 00:00:00 2025 GMT
        Subject: CN=66c2c17c-8f7a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:cf:fe:c3:2d:e7:a8:98:1e:a5:0a:db:90:05:
                    04:59:bf:42:e0:c5:bf:94:75:29:f2:c9:c8:e9:77:
                    f5:f1:c7:6b:2f:95:7b:40:39:9a:55:ca:7e:a7:34:
                    bc:c2:bc:2a:07:ce:c3:eb:88:ed:a9:8a:d4:c9:75:
                    0a:a8:42:3f:e1:5e:ec:ec:7c:ae:8a:af:67:bd:85:
                    3d:0d:0b:66:7f:14:68:57:8f:5a:d0:4b:41:7c:55:
                    b0:01:23:73:78:3c:bb:df:3d:42:b8:7f:a0:50:b2:
                    a4:b9:18:07:61:7a:de:ab:6e:81:b5:dc:b5:d3:4e:
                    73:a1:fe:e3:9c:e7:f1:bb:19:d2:7c:c7:1e:c8:0a:
                    62:a7:3b:e4:07:b5:68:9b:3e:f9:bb:3b:c8:84:5d:
                    65:ce:bd:24:13:1b:d5:cb:48:d2:8f:e3:93:cf:9e:
                    47:34:a1:d8:6a:4e:cb:f0:4b:3c:a3:77:ab:57:27:
                    a5:41:e9:11:16:6e:c5:3f:2c:77:0e:94:15:bf:8f:
                    84:ce:d4:64:ee:e4:1b:c7:12:87:e6:45:68:8b:ee:
                    f8:d6:08:66:79:95:f0:d4:6e:87:dd:a2:4f:33:10:
                    01:8c:ff:67:f3:da:cf:c6:a3:09:1a:67:1c:eb:70:
                    00:d1:a5:c9:b3:de:ce:72:f3:a0:ad:69:af:95:d2:
                    f7:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                54:06:18:B2:FB:A3:CA:BF:FF:E8:56:F8:09:88:DC:98:C3:F2:9A:CA
            X509v3 Authority Key Identifier:
                keyid:71:16:17:00:2D:9F:0C:9E:B6:5B:4E:DD:61:F7:A1:C9:1F:CD:B8:3E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A919C6E7/E4A0CCAE5DDD11EF830DF561C4F9AE02/cRYXAC2fDJ62W07dYfehyR_NuD4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cRYXAC2fDJ62W07dYfehyR_NuD4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919C6E7/E4A0CCAE5DDD11EF830DF561C4F9AE02/73EF25545DDE11EFBCDB7463C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.120.204.0/22
                  103.61.20.0/22

    Signature Algorithm: sha256WithRSAEncryption
         4b:b5:cf:26:f2:16:41:0f:a5:6a:b8:87:f8:e9:52:7a:f8:f6:
         1b:fc:22:06:ab:15:e8:27:bc:a3:18:01:e4:69:97:a7:53:fe:
         2e:c4:4b:93:e2:0d:ee:11:be:48:60:c5:7c:82:28:e6:92:52:
         39:27:43:3e:67:08:f2:1d:68:ef:42:74:7e:1a:54:5d:7c:8d:
         0c:ec:04:75:2f:4c:a1:e8:6a:de:93:22:a1:6c:7a:06:b0:86:
         97:c5:84:82:e5:24:6c:c5:a0:3a:c4:58:79:15:d0:31:d8:c3:
         3b:f9:1e:ef:2f:ef:b8:6b:7e:5a:a2:53:b6:21:18:9a:91:3d:
         ca:c4:7c:86:41:ec:e5:ac:6b:4b:f6:31:cb:55:96:4a:ec:1e:
         ad:d4:87:1e:63:98:42:f2:ad:ec:85:07:4e:e4:4f:8c:c4:2e:
         ff:75:b7:38:d3:d2:bb:0f:88:84:6b:0a:7e:53:61:16:f3:8b:
         eb:14:eb:5a:de:09:36:26:2e:a3:d2:4c:a5:12:f2:90:0f:e0:
         0b:c7:5c:4f:ca:08:f7:e3:10:4d:bf:e9:ea:4a:51:70:04:66:
         41:82:3c:44:bf:3a:a0:07:a4:04:f6:61:2c:b1:62:49:62:5e:
         d7:95:bd:b2:28:df:83:77:98:f9:1a:46:37:6b:ae:0c:e7:52:
         0f:36:68:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 07:40:35 2024 by rpki-client on console-ams.rpki-client.org