Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A911710E/C93E178A01B511EE89F6EB78C4F9AE02/309A0AEC073D11EE94A9410CC4F9AE02.roa
File:                     309A0AEC073D11EE94A9410CC4F9AE02.roa (raw, json)
Hash identifier:          u/bpOCAB43F/UqLf6kPtvsky2wc+gKQbzKYOTaUUUWQ=
Subject key identifier:   90:FD:33:50:67:B0:D1:87:0A:10:39:9E:D9:F3:47:3F:EB:0F:B2:8A
Certificate issuer:       /CN=A911710E/serialNumber=CD1841B6C5BEF7C4782E67F663F3C19746199383
Certificate serial:       0B
Authority key identifier: CD:18:41:B6:C5:BE:F7:C4:78:2E:67:F6:63:F3:C1:97:46:19:93:83
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zRhBtsW-98R4Lmf2Y_PBl0YZk4M.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A911710E/C93E178A01B511EE89F6EB78C4F9AE02/309A0AEC073D11EE94A9410CC4F9AE02.roa
Signing time:             Sat 10 Jun 2023 03:16:29 +0000
ROA not before:           Sat 10 Jun 2023 03:16:29 +0000
ROA not after:            Sat 31 Aug 2024 00:00:00 +0000
asID:                     212483
IP address blocks:        2401:5a0:ff00::/44 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A911710E/C93E178A01B511EE89F6EB78C4F9AE02/zRhBtsW-98R4Lmf2Y_PBl0YZk4M.crl
                          rsync://rpki.apnic.net/member_repository/A911710E/C93E178A01B511EE89F6EB78C4F9AE02/zRhBtsW-98R4Lmf2Y_PBl0YZk4M.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zRhBtsW-98R4Lmf2Y_PBl0YZk4M.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 08 Jun 2024 07:47:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 11 (0xb)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A911710E/serialNumber=CD1841B6C5BEF7C4782E67F663F3C19746199383
        Validity
            Not Before: Jun 10 03:16:29 2023 GMT
            Not After : Aug 31 00:00:00 2024 GMT
        Subject: CN=6483eb0c-4639
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:e3:5f:4e:91:82:6f:0d:4c:bf:d5:fe:96:6d:
                    f7:ed:21:29:bb:ff:50:e0:6a:eb:cf:03:16:d7:ea:
                    a5:e2:c1:13:07:19:c7:78:9f:d6:16:db:6e:c4:69:
                    52:e3:2d:8f:49:6c:1c:2e:10:42:8c:8b:ef:41:7f:
                    80:8b:ee:48:f0:69:70:e5:8d:3d:69:e3:2a:40:51:
                    9b:cc:86:b9:b5:7e:e3:75:92:24:b3:8a:20:40:fa:
                    63:c0:ed:48:74:56:fc:a9:c1:07:f8:57:26:ba:39:
                    96:89:7e:2e:08:63:30:5c:05:fb:92:c0:54:9f:17:
                    eb:b3:89:60:7d:20:e7:c2:06:de:cd:dc:b2:8c:b3:
                    b8:c3:89:36:c4:8f:26:eb:c5:17:1d:ac:19:1f:9a:
                    ba:5a:71:2f:bf:70:bc:d6:6d:10:5f:6b:34:f9:eb:
                    34:4b:9a:6a:b0:2c:25:14:1e:1c:78:a1:04:75:cd:
                    7e:ad:0e:29:31:cc:b8:86:c5:2e:1c:54:a7:d8:34:
                    74:1c:5d:5c:e6:3c:76:db:bc:07:16:0b:f1:4e:9f:
                    de:e3:a2:d3:b0:52:7a:72:31:12:24:36:66:aa:c8:
                    40:61:36:b9:1f:0f:f5:b0:5a:22:f9:db:e1:4d:d9:
                    25:59:8f:90:7c:f9:6c:76:a8:cc:62:9b:3b:3b:4d:
                    23:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                90:FD:33:50:67:B0:D1:87:0A:10:39:9E:D9:F3:47:3F:EB:0F:B2:8A
            X509v3 Authority Key Identifier:
                keyid:CD:18:41:B6:C5:BE:F7:C4:78:2E:67:F6:63:F3:C1:97:46:19:93:83

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A911710E/C93E178A01B511EE89F6EB78C4F9AE02/zRhBtsW-98R4Lmf2Y_PBl0YZk4M.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zRhBtsW-98R4Lmf2Y_PBl0YZk4M.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911710E/C93E178A01B511EE89F6EB78C4F9AE02/309A0AEC073D11EE94A9410CC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  2401:5a0:ff00::/44

    Signature Algorithm: sha256WithRSAEncryption
         75:ce:7d:a1:05:c2:fc:3b:ce:b5:68:ec:4d:02:78:e2:de:ee:
         fe:41:99:23:1f:9b:bf:aa:c1:79:ad:4a:10:64:11:27:2a:be:
         99:ae:47:98:4f:eb:1d:1f:45:eb:55:a1:7a:f7:98:28:9c:a2:
         00:fb:96:c4:a0:06:6c:2d:8b:65:93:ee:73:73:63:3c:0f:67:
         10:a8:8d:ad:8a:71:1b:40:b4:52:80:6f:f5:b0:69:da:42:f3:
         fa:76:1f:f3:da:6a:8e:8b:d9:ee:f5:79:e9:23:a8:76:4a:d6:
         59:11:a1:ba:06:c8:9e:2f:38:e8:19:d9:83:a5:a2:2a:19:bd:
         05:27:bf:f9:6b:32:14:9d:58:ab:73:3d:b6:70:54:b4:64:54:
         ff:6c:05:b9:21:70:6f:2e:6c:01:49:b2:c7:6c:9f:bf:6c:3d:
         04:27:9c:41:df:3b:83:35:46:51:7b:43:2f:22:ac:ec:1f:ad:
         67:8c:ab:e9:65:99:f4:14:3d:c6:12:bd:87:da:8b:af:8a:cd:
         ff:4c:0e:3d:ef:78:dc:02:d7:0b:f1:15:98:14:36:1c:08:f3:
         bd:6e:bc:15:77:50:d9:62:70:08:5e:2b:38:28:7c:42:2b:2c:
         95:74:65:0d:3b:80:2c:d1:b4:94:4b:ae:ec:43:52:9b:c9:fd:
         44:da:f1:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 1 11:47:07 2024 by rpki-client on console-ams.rpki-client.org