Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91CEBCC/2AE8981A272711EF9143E622C4F9AE02/F2022074272711EF91A40124C4F9AE02.roa
File:                     F2022074272711EF91A40124C4F9AE02.roa (raw, json)
Hash identifier:          UgSans1dKX/IYLF307H9wWjQO8qhKZGKUPwGt0P+vBE=
Subject key identifier:   28:3B:1B:50:80:7D:A8:B0:30:E8:AC:DE:C1:F7:88:C6:7F:FE:E1:FB
Certificate issuer:       /CN=A91CEBCC/serialNumber=6DAB61D12E3F196F516938723C8027599C5D7552
Certificate serial:       02
Authority key identifier: 6D:AB:61:D1:2E:3F:19:6F:51:69:38:72:3C:80:27:59:9C:5D:75:52
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bath0S4_GW9RaThyPIAnWZxddVI.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91CEBCC/2AE8981A272711EF9143E622C4F9AE02/F2022074272711EF91A40124C4F9AE02.roa
Signing time:             Mon 10 Jun 2024 12:49:59 +0000
ROA not before:           Mon 10 Jun 2024 12:49:59 +0000
ROA not after:            Sun 02 Mar 2025 00:00:00 +0000
asID:                     139864
IP address blocks:        103.146.86.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91CEBCC/2AE8981A272711EF9143E622C4F9AE02/bath0S4_GW9RaThyPIAnWZxddVI.crl
                          rsync://rpki.apnic.net/member_repository/A91CEBCC/2AE8981A272711EF9143E622C4F9AE02/bath0S4_GW9RaThyPIAnWZxddVI.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bath0S4_GW9RaThyPIAnWZxddVI.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 30 Nov 2024 02:50:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2 (0x2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91CEBCC/serialNumber=6DAB61D12E3F196F516938723C8027599C5D7552
        Validity
            Not Before: Jun 10 12:49:59 2024 GMT
            Not After : Mar  2 00:00:00 2025 GMT
        Subject: CN=6666f677-65e9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ee:d0:00:dc:7a:be:69:5a:c7:4a:b1:5a:4f:29:
                    94:e0:9b:8c:ab:58:4e:a3:dd:37:fe:33:47:b6:a7:
                    25:63:92:54:32:9f:e8:34:9f:8f:15:ac:19:21:56:
                    b4:43:44:5a:66:80:3f:06:84:0a:d5:11:f4:d8:85:
                    e1:0b:c9:79:b0:2d:7a:17:e1:6e:6a:ab:6c:5d:8f:
                    f2:f0:8f:da:2d:0f:51:9d:be:28:b8:47:e7:b7:6d:
                    cf:f9:49:29:0d:42:6a:19:2a:8e:be:36:b0:05:39:
                    e5:c8:86:6e:0a:e6:aa:72:9f:15:00:d3:29:ee:39:
                    65:15:d6:98:27:f7:66:82:6d:f0:15:a2:84:fc:fa:
                    ac:5d:51:68:28:fa:20:0f:e7:a3:d3:b9:02:da:98:
                    74:78:ef:03:90:d5:0a:fe:43:cf:64:18:c2:d7:d0:
                    70:0c:7d:8c:82:70:ce:76:63:75:cf:32:37:01:50:
                    77:09:3e:de:2c:43:31:8e:65:c4:05:ad:cb:35:57:
                    ce:33:fe:b7:f7:a0:c3:8c:f8:af:2c:e9:6a:7a:61:
                    4a:b1:a7:15:47:ac:a1:09:38:25:5c:48:2e:c8:48:
                    db:fb:1b:eb:5c:dd:7b:63:ee:6c:c2:6b:7e:f2:50:
                    1a:57:26:3c:a3:fe:94:f5:8b:2a:f5:8c:64:52:da:
                    63:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                28:3B:1B:50:80:7D:A8:B0:30:E8:AC:DE:C1:F7:88:C6:7F:FE:E1:FB
            X509v3 Authority Key Identifier:
                keyid:6D:AB:61:D1:2E:3F:19:6F:51:69:38:72:3C:80:27:59:9C:5D:75:52

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91CEBCC/2AE8981A272711EF9143E622C4F9AE02/bath0S4_GW9RaThyPIAnWZxddVI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bath0S4_GW9RaThyPIAnWZxddVI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CEBCC/2AE8981A272711EF9143E622C4F9AE02/F2022074272711EF91A40124C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.146.86.0/24

    Signature Algorithm: sha256WithRSAEncryption
         24:bb:0b:d0:70:f7:b8:57:92:cc:1c:4a:62:55:2b:71:0b:38:
         8c:9e:30:56:7a:ca:a7:33:87:69:ea:13:32:d2:55:78:13:a0:
         e2:49:11:18:17:76:9f:e8:02:47:12:c2:59:ba:5a:11:1c:2c:
         a2:ba:93:ca:1a:2c:ed:bc:b3:99:4c:fd:cd:8b:6e:88:ff:29:
         36:dd:f7:eb:a8:80:23:f9:57:c4:82:39:1a:1c:0a:e8:a2:e1:
         19:3c:32:58:9a:f5:58:31:0f:2a:8b:f9:8c:90:ba:9e:f6:ba:
         0c:48:f3:fd:e5:d5:32:4f:7e:19:12:6b:7a:73:c3:a0:0a:58:
         d8:63:00:28:b1:4a:89:7b:81:f4:a5:21:ee:53:6e:5d:f2:0f:
         7c:8e:8a:70:d0:3e:33:b1:2b:8a:b8:c5:35:8a:46:e7:e6:de:
         3e:5c:72:44:8d:22:79:54:b6:96:3e:f6:7a:c1:43:45:cf:82:
         ab:95:e8:6a:8d:76:f8:61:df:69:ee:b6:6f:6d:65:9d:bd:e3:
         ab:93:16:c8:ee:a5:d7:2c:63:72:6f:40:53:f3:36:95:ea:35:
         d6:63:a6:52:9e:25:e2:10:6e:33:71:5b:fe:8e:46:5b:dc:08:
         81:6c:62:38:bf:99:80:87:bb:56:ac:98:5f:36:3a:96:d5:be:
         52:ca:6d:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 06:13:23 2024 by rpki-client on console-ams.rpki-client.org