Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9111F34/F960D1B401E311ED812E500BC4F9AE02/3549E00001E711EDB2C82D0FC4F9AE02.roa
File:                     3549E00001E711EDB2C82D0FC4F9AE02.roa (raw, json)
Hash identifier:          ukWQcmxdtWHk/FIstAeNqz/nmpUjWglHBYECPBB2nHs=
Subject key identifier:   44:A8:E5:2E:56:09:F9:A1:FB:00:21:63:33:8D:97:67:A5:95:C5:44
Certificate issuer:       /CN=A9111F34/serialNumber=460FA8FAFFC8BE409EC2BDF8463705863A45E8E8
Certificate serial:       010C
Authority key identifier: 46:0F:A8:FA:FF:C8:BE:40:9E:C2:BD:F8:46:37:05:86:3A:45:E8:E8
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Rg-o-v_IvkCewr34RjcFhjpF6Og.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9111F34/F960D1B401E311ED812E500BC4F9AE02/3549E00001E711EDB2C82D0FC4F9AE02.roa
Signing time:             Fri 07 Apr 2023 05:46:07 +0000
ROA not before:           Fri 07 Apr 2023 05:46:07 +0000
ROA not after:            Wed 29 May 2024 00:00:00 +0000
asID:                     36351
IP address blocks:        2001:df3:8800::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9111F34/F960D1B401E311ED812E500BC4F9AE02/Rg-o-v_IvkCewr34RjcFhjpF6Og.crl
                          rsync://rpki.apnic.net/member_repository/A9111F34/F960D1B401E311ED812E500BC4F9AE02/Rg-o-v_IvkCewr34RjcFhjpF6Og.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Rg-o-v_IvkCewr34RjcFhjpF6Og.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 04 May 2024 03:36:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 268 (0x10c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9111F34/serialNumber=460FA8FAFFC8BE409EC2BDF8463705863A45E8E8
        Validity
            Not Before: Apr  7 05:46:07 2023 GMT
            Not After : May 29 00:00:00 2024 GMT
        Subject: CN=642fae1e-2d13
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e9:2b:ea:ea:2d:19:20:99:0c:da:6c:0d:a3:c7:
                    0f:bb:be:b7:1d:c1:74:ee:d2:49:d8:68:a1:74:dc:
                    c2:e0:45:12:e2:7d:b8:5e:6b:71:3c:77:9f:5b:23:
                    d8:02:e6:89:3b:26:50:2f:d5:07:93:30:37:32:0e:
                    dc:62:b6:6c:61:fc:6b:81:9e:ef:bc:a2:57:7f:76:
                    a6:94:e6:d0:5a:ff:d6:96:4f:4f:09:1e:ca:79:2c:
                    a1:0f:4d:88:48:b7:38:c7:b3:77:f5:03:b7:b8:4c:
                    ea:b7:48:09:1d:8d:fa:f8:d5:76:44:0c:ce:45:65:
                    9a:0e:26:27:68:d3:53:2a:b5:41:04:b9:27:22:b9:
                    fa:4b:61:2d:6b:26:0b:7d:52:93:d6:44:a8:6d:fd:
                    54:7f:18:6d:e8:80:58:26:20:7f:39:12:78:36:60:
                    6c:43:b5:69:dd:4d:c2:4e:1c:9c:40:fe:af:e0:2b:
                    02:65:3a:84:d0:91:ff:91:0b:da:59:f5:4a:9b:ac:
                    e9:52:65:c7:a7:88:7f:a0:42:5a:10:ac:19:1e:44:
                    ba:d6:da:2a:db:e2:ef:b2:12:29:be:75:b2:91:72:
                    81:ee:83:f2:98:e9:a0:f0:7c:af:a5:82:e7:76:68:
                    42:dc:61:9b:98:a7:c3:59:7b:52:84:89:eb:d9:c0:
                    46:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                44:A8:E5:2E:56:09:F9:A1:FB:00:21:63:33:8D:97:67:A5:95:C5:44
            X509v3 Authority Key Identifier:
                keyid:46:0F:A8:FA:FF:C8:BE:40:9E:C2:BD:F8:46:37:05:86:3A:45:E8:E8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9111F34/F960D1B401E311ED812E500BC4F9AE02/Rg-o-v_IvkCewr34RjcFhjpF6Og.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Rg-o-v_IvkCewr34RjcFhjpF6Og.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9111F34/F960D1B401E311ED812E500BC4F9AE02/3549E00001E711EDB2C82D0FC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:df3:8800::/48

    Signature Algorithm: sha256WithRSAEncryption
         92:27:b9:1e:08:4d:08:f7:f2:5e:d4:38:28:a7:87:31:55:3c:
         8a:70:89:92:39:86:e6:4f:58:75:63:99:5d:ed:24:f2:f4:65:
         ed:e1:90:69:1a:6b:4b:7c:50:8e:5c:4f:f3:5f:ea:9d:8d:e1:
         b9:6b:90:29:80:77:93:25:2e:46:10:3a:a8:6b:aa:5d:d1:79:
         83:19:df:2e:d1:19:9f:6b:3f:a5:01:1f:62:10:85:32:cd:fe:
         94:66:a6:27:45:40:7d:0c:d6:69:c6:24:fa:a0:fe:5b:d4:4d:
         ec:ee:f7:15:ae:04:63:bf:3b:c7:84:d6:cf:e6:4e:6e:d2:3a:
         f2:76:13:aa:68:b0:7c:8f:7f:62:2f:b0:6d:3f:95:b3:e7:10:
         7c:33:62:6b:95:7e:10:6f:7e:6a:8f:2f:fd:ba:1a:a9:7b:64:
         95:01:9d:22:58:e3:88:b5:12:68:09:25:3d:06:9a:6c:b1:37:
         ee:12:89:5d:a1:01:dc:b6:28:fc:86:0d:7b:99:0b:db:49:a6:
         ef:8f:0b:4a:3d:ad:a9:74:63:cf:09:54:ea:09:90:31:b0:1e:
         c1:9d:e7:97:fa:cf:4e:0d:9a:57:a2:50:b6:fa:1e:8d:8b:dc:
         86:09:34:e2:17:f7:a5:87:68:95:e1:61:51:7f:a2:70:b8:6d:
         a1:3c:62:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 27 10:18:23 2024 by rpki-client on console-ams.rpki-client.org