Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A911BD54/3E281C98004911E5B4B64F63C4F9AE02/63EBB7C6DDD311E8B6169878C4F9AE02.roa
File:                     63EBB7C6DDD311E8B6169878C4F9AE02.roa (raw, json)
Hash identifier:          dccpGVQgFvqgnXhQoRodIonn6gz1Ba5DukCUYVMptpg=
Subject key identifier:   D6:74:09:95:FB:59:3C:A8:94:AB:AA:46:B4:16:04:E0:EF:8B:7C:70
Certificate issuer:       /CN=A911BD54/serialNumber=BCFAF8D33F18A8D3602029EBCEDE1E36AF20715C
Certificate serial:       283B
Authority key identifier: BC:FA:F8:D3:3F:18:A8:D3:60:20:29:EB:CE:DE:1E:36:AF:20:71:5C
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vPr40z8YqNNgICnrzt4eNq8gcVw.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A911BD54/3E281C98004911E5B4B64F63C4F9AE02/63EBB7C6DDD311E8B6169878C4F9AE02.roa
Signing time:             Thu 28 Dec 2023 16:03:28 +0000
ROA not before:           Thu 28 Dec 2023 16:03:28 +0000
ROA not after:            Sun 02 Mar 2025 00:00:00 +0000
asID:                     55476
IP address blocks:        202.80.233.0/24 maxlen: 24
                          2405:9800:c909::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A911BD54/3E281C98004911E5B4B64F63C4F9AE02/vPr40z8YqNNgICnrzt4eNq8gcVw.crl
                          rsync://rpki.apnic.net/member_repository/A911BD54/3E281C98004911E5B4B64F63C4F9AE02/vPr40z8YqNNgICnrzt4eNq8gcVw.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vPr40z8YqNNgICnrzt4eNq8gcVw.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 07 Jun 2024 16:10:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 10299 (0x283b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A911BD54/serialNumber=BCFAF8D33F18A8D3602029EBCEDE1E36AF20715C
        Validity
            Not Before: Dec 28 16:03:28 2023 GMT
            Not After : Mar  2 00:00:00 2025 GMT
        Subject: CN=658d9c50-ba64
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ee:52:b0:e1:ac:a1:5d:15:e5:84:cd:23:b3:24:
                    93:81:0c:cc:b8:b1:58:7f:f5:9c:3c:30:5b:14:0b:
                    85:c9:f1:42:13:cd:a7:47:db:bc:8b:8b:13:3d:aa:
                    5e:77:d7:b1:30:30:d0:ce:8c:fe:be:17:15:85:d7:
                    8b:0a:7c:81:de:a4:9e:96:77:f0:23:2b:3d:2d:ff:
                    3a:fc:a2:fe:0b:b2:30:d4:be:c3:7d:f4:a5:5a:ff:
                    d0:f8:6a:af:68:2a:53:3b:10:1e:a0:49:5f:ad:f7:
                    87:7f:6c:8e:7a:46:31:83:56:97:a2:ca:5e:cd:d4:
                    24:b9:f2:fa:b1:5d:ea:c1:21:74:87:be:7c:0f:20:
                    cb:c1:a6:8a:2a:65:3f:9a:66:24:a7:db:d7:bc:a1:
                    0a:9b:86:db:c2:c9:1a:dd:12:8a:bf:d5:40:02:1b:
                    ac:5c:cc:f4:8e:e8:34:52:0e:ec:82:0d:e3:86:6e:
                    a8:2d:d7:b4:98:a4:e3:55:d2:7c:a2:e9:6d:7f:05:
                    fd:74:5e:29:e4:b2:a1:08:d7:37:db:b5:3a:d4:f1:
                    4e:dc:37:78:a3:83:34:0c:fc:fe:0a:53:ac:1d:47:
                    ae:24:24:99:28:e1:63:42:43:3c:9a:94:2c:be:70:
                    4f:96:3e:78:42:5a:33:37:13:e5:0e:dc:41:26:2d:
                    99:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D6:74:09:95:FB:59:3C:A8:94:AB:AA:46:B4:16:04:E0:EF:8B:7C:70
            X509v3 Authority Key Identifier:
                keyid:BC:FA:F8:D3:3F:18:A8:D3:60:20:29:EB:CE:DE:1E:36:AF:20:71:5C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A911BD54/3E281C98004911E5B4B64F63C4F9AE02/vPr40z8YqNNgICnrzt4eNq8gcVw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vPr40z8YqNNgICnrzt4eNq8gcVw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911BD54/3E281C98004911E5B4B64F63C4F9AE02/63EBB7C6DDD311E8B6169878C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  202.80.233.0/24
                IPv6:
                  2405:9800:c909::/48

    Signature Algorithm: sha256WithRSAEncryption
         06:7d:07:73:9d:af:c3:ca:a1:d0:92:c9:02:6e:8e:8d:e5:ff:
         80:bd:50:57:3a:4f:d2:07:03:ee:9e:58:52:5a:be:92:84:86:
         12:3d:77:b1:b9:9d:38:fa:d0:79:22:76:92:57:4b:ff:f1:98:
         16:cb:a8:f4:cc:2b:ad:ed:95:a7:45:f3:a2:a3:88:98:e3:8c:
         35:a0:f5:5b:f5:60:d7:10:82:4a:19:ff:24:43:9c:77:60:2c:
         d8:87:4f:f3:d2:24:19:8c:70:b0:84:19:68:54:4a:ca:ad:78:
         cb:c5:d5:ef:dc:fd:bd:a8:4d:b9:06:43:9e:d5:9c:ba:44:e9:
         1a:6f:20:d1:b1:c4:54:d4:4b:97:53:4d:fd:a8:14:62:a1:a8:
         5b:59:6c:14:25:22:1b:3c:47:85:db:12:e4:73:7c:dc:e4:7c:
         9a:d8:bb:32:5c:5e:8e:22:d7:49:0b:e4:8f:3f:82:8c:3b:cf:
         96:b9:17:ef:bf:6f:4e:84:ee:da:31:17:ce:78:68:d7:70:c1:
         ce:81:b5:58:c2:45:0b:2e:f6:c8:e9:c3:6f:a5:f4:dc:8b:60:
         56:26:da:15:96:27:1d:20:98:e8:f1:43:af:e5:b9:c0:ac:65:
         c2:89:67:63:dc:96:84:f4:b5:16:d1:38:6f:a1:ee:6e:71:bd:
         c7:16:c0:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 31 20:33:57 2024 by rpki-client on console-ams.rpki-client.org