Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A911BD54/3E281C98004911E5B4B64F63C4F9AE02/228647E8639E11ECA24A0411C4F9AE02.roa
File:                     228647E8639E11ECA24A0411C4F9AE02.roa (raw, json)
Hash identifier:          zcXBbADBT/C339hRi8INcQt04ZkGcjWLZ5Dkh5i87ao=
Subject key identifier:   CD:87:D0:64:67:56:06:71:8E:53:2A:08:47:F0:EA:8A:78:B9:65:D6
Certificate issuer:       /CN=A911BD54/serialNumber=BCFAF8D33F18A8D3602029EBCEDE1E36AF20715C
Certificate serial:       2833
Authority key identifier: BC:FA:F8:D3:3F:18:A8:D3:60:20:29:EB:CE:DE:1E:36:AF:20:71:5C
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vPr40z8YqNNgICnrzt4eNq8gcVw.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A911BD54/3E281C98004911E5B4B64F63C4F9AE02/228647E8639E11ECA24A0411C4F9AE02.roa
Signing time:             Thu 28 Dec 2023 16:03:21 +0000
ROA not before:           Thu 28 Dec 2023 16:03:21 +0000
ROA not after:            Sun 02 Mar 2025 00:00:00 +0000
asID:                     45255
IP address blocks:        49.231.28.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A911BD54/3E281C98004911E5B4B64F63C4F9AE02/vPr40z8YqNNgICnrzt4eNq8gcVw.crl
                          rsync://rpki.apnic.net/member_repository/A911BD54/3E281C98004911E5B4B64F63C4F9AE02/vPr40z8YqNNgICnrzt4eNq8gcVw.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vPr40z8YqNNgICnrzt4eNq8gcVw.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 07 Jun 2024 16:10:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 10291 (0x2833)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A911BD54/serialNumber=BCFAF8D33F18A8D3602029EBCEDE1E36AF20715C
        Validity
            Not Before: Dec 28 16:03:21 2023 GMT
            Not After : Mar  2 00:00:00 2025 GMT
        Subject: CN=658d9c48-ea43
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:5d:4d:fd:ce:10:1a:51:c2:ed:e0:8a:c6:cf:
                    a1:88:f5:6c:1c:46:c6:aa:98:b6:65:84:d7:c5:51:
                    81:1b:ee:11:81:c7:07:a7:81:45:28:6c:62:48:2f:
                    4a:98:9f:ec:b5:e9:08:ab:cd:a7:97:96:ae:2d:bf:
                    2d:ad:58:cb:36:63:7e:ef:f6:98:12:7e:8f:de:13:
                    13:b4:97:eb:cd:9c:ff:8c:c5:9d:c8:59:c5:c5:59:
                    07:74:1d:8a:2d:1b:74:96:1e:47:e3:ed:90:29:b5:
                    fe:43:7c:c2:5e:b3:c7:ba:b1:4a:63:c0:2a:1b:9e:
                    49:aa:12:6b:e3:68:b2:7d:73:1e:33:3a:75:54:43:
                    4c:04:ee:7c:01:8b:94:38:9e:48:38:51:44:c8:31:
                    a1:f5:90:54:7f:6e:c0:81:33:87:04:8b:d5:77:c8:
                    68:67:3b:cd:67:3e:bd:7f:91:b8:35:f1:96:49:f3:
                    49:a9:09:12:95:85:2d:54:00:19:4e:78:af:72:fd:
                    24:72:60:91:c4:e5:70:42:41:71:89:35:6d:e5:8d:
                    85:ef:c2:7e:6e:60:45:45:92:9f:9f:d4:4f:38:f9:
                    55:24:f1:a9:ae:27:20:c8:f1:44:cd:71:e2:e1:02:
                    ec:bd:8f:4c:9e:21:69:3a:b6:4f:23:37:44:c2:c7:
                    0d:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CD:87:D0:64:67:56:06:71:8E:53:2A:08:47:F0:EA:8A:78:B9:65:D6
            X509v3 Authority Key Identifier:
                keyid:BC:FA:F8:D3:3F:18:A8:D3:60:20:29:EB:CE:DE:1E:36:AF:20:71:5C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A911BD54/3E281C98004911E5B4B64F63C4F9AE02/vPr40z8YqNNgICnrzt4eNq8gcVw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vPr40z8YqNNgICnrzt4eNq8gcVw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911BD54/3E281C98004911E5B4B64F63C4F9AE02/228647E8639E11ECA24A0411C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  49.231.28.0/24

    Signature Algorithm: sha256WithRSAEncryption
         53:07:1c:5d:d8:e5:8f:eb:cc:2e:1e:53:2e:68:59:a6:38:5f:
         2f:4a:cc:b6:a4:a4:d9:d3:01:67:9e:8a:ad:70:1c:f3:3e:b5:
         e7:8d:d3:79:a5:08:6c:fc:cb:b6:09:b7:3f:28:40:f3:01:8a:
         c6:c0:fd:10:57:ee:cc:60:53:ce:b4:98:83:59:90:52:73:ba:
         a5:89:ba:d9:a9:71:81:ec:53:1a:d3:0f:c5:ff:af:34:22:63:
         37:0b:13:12:90:10:21:9b:bc:c6:d0:b0:85:a1:7f:29:6a:99:
         d0:55:34:3f:02:aa:d5:66:8f:c3:0f:6f:25:f0:4d:98:3f:da:
         c1:f2:46:63:4d:95:c4:ef:4e:0d:a2:d6:df:b0:a9:b1:d7:d7:
         98:7d:00:f4:f6:2b:07:82:06:9d:db:d3:c7:10:3b:02:28:33:
         9c:3d:72:0c:26:7e:da:d5:e8:af:36:41:89:ae:5b:80:03:16:
         01:05:6c:d8:0b:d7:c7:6f:d3:e9:3c:6b:50:a3:bd:6e:07:31:
         2b:10:37:6b:65:ce:64:0f:21:15:de:6a:82:af:84:40:55:35:
         a7:8f:3a:a3:0e:7c:50:ba:4c:60:58:dd:68:d6:aa:ae:11:c1:
         33:78:07:18:98:4e:db:b2:d0:cb:a6:ec:c1:4b:9a:6e:84:02:
         32:89:f2:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 31 20:33:57 2024 by rpki-client on console-ams.rpki-client.org