Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A911CA78/BE8846D235D811EAA730EC46C4F9AE02/65A78BCE535F11EE9BC85F83C4F9AE02.roa
File:                     65A78BCE535F11EE9BC85F83C4F9AE02.roa (raw, json)
Hash identifier:          65dvuYd9aP6UywYF+Cj0/PT7JY5SreT0szRWJiGx9vk=
Subject key identifier:   8C:D8:05:D6:CA:98:B9:5F:39:E9:51:72:4B:A5:AD:79:BB:56:F9:BB
Certificate issuer:       /CN=A911CA78/serialNumber=40562C143A29CB19C70FFC9B99B60BBECD1D73B6
Certificate serial:       0AE8
Authority key identifier: 40:56:2C:14:3A:29:CB:19:C7:0F:FC:9B:99:B6:0B:BE:CD:1D:73:B6
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QFYsFDopyxnHD_ybmbYLvs0dc7Y.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A911CA78/BE8846D235D811EAA730EC46C4F9AE02/65A78BCE535F11EE9BC85F83C4F9AE02.roa
Signing time:             Mon 04 Dec 2023 20:08:05 +0000
ROA not before:           Mon 04 Dec 2023 20:08:05 +0000
ROA not after:            Sun 02 Mar 2025 00:00:00 +0000
asID:                     4202202062
IP address blocks:        49.236.204.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A911CA78/BE8846D235D811EAA730EC46C4F9AE02/QFYsFDopyxnHD_ybmbYLvs0dc7Y.crl
                          rsync://rpki.apnic.net/member_repository/A911CA78/BE8846D235D811EAA730EC46C4F9AE02/QFYsFDopyxnHD_ybmbYLvs0dc7Y.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QFYsFDopyxnHD_ybmbYLvs0dc7Y.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 07 Jun 2024 20:52:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2792 (0xae8)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A911CA78/serialNumber=40562C143A29CB19C70FFC9B99B60BBECD1D73B6
        Validity
            Not Before: Dec  4 20:08:05 2023 GMT
            Not After : Mar  2 00:00:00 2025 GMT
        Subject: CN=656e31a5-8ede
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:f1:72:5e:32:e2:39:88:75:b8:ef:53:ff:5c:
                    41:4c:56:25:a9:75:8a:20:e9:f8:d3:e5:d1:07:2d:
                    1d:be:14:d8:f3:7d:af:6a:ab:24:b4:0d:e0:6c:70:
                    b1:0f:15:6e:17:14:d7:97:ce:24:4a:b2:53:01:77:
                    11:dd:7f:9c:cd:ad:77:0d:88:46:d6:71:f7:97:a1:
                    86:da:cc:f7:94:ac:06:d5:21:c5:d5:25:dc:60:82:
                    45:8e:1b:ae:cd:c1:03:dc:5c:88:ac:95:f8:0e:bf:
                    0f:5f:82:b1:4d:36:86:9f:18:27:e2:8b:8d:b4:e1:
                    78:14:48:05:3b:1d:ce:7c:ea:a0:34:cd:4a:f6:89:
                    35:09:51:05:b2:36:c0:37:47:9c:5f:2d:49:d8:10:
                    1b:a4:cf:06:77:f6:b5:78:28:64:f4:8e:94:23:a3:
                    26:a6:c4:c1:cc:9f:a5:a4:ac:d5:5f:8c:7a:22:75:
                    cd:10:54:c7:f7:f8:90:6d:5e:b3:0f:b8:e8:04:14:
                    d1:69:93:33:40:05:c1:51:1b:e8:a0:49:cf:89:9b:
                    62:47:10:3b:f3:1d:39:b9:26:ec:94:0d:dc:4c:40:
                    21:f3:16:42:8e:8b:13:3a:e3:3f:84:40:1c:f2:0e:
                    09:13:f3:76:42:8c:5a:24:39:3d:51:b8:5b:82:10:
                    b9:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8C:D8:05:D6:CA:98:B9:5F:39:E9:51:72:4B:A5:AD:79:BB:56:F9:BB
            X509v3 Authority Key Identifier:
                keyid:40:56:2C:14:3A:29:CB:19:C7:0F:FC:9B:99:B6:0B:BE:CD:1D:73:B6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A911CA78/BE8846D235D811EAA730EC46C4F9AE02/QFYsFDopyxnHD_ybmbYLvs0dc7Y.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QFYsFDopyxnHD_ybmbYLvs0dc7Y.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911CA78/BE8846D235D811EAA730EC46C4F9AE02/65A78BCE535F11EE9BC85F83C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  49.236.204.0/24

    Signature Algorithm: sha256WithRSAEncryption
         17:04:f3:17:4a:8e:32:cc:ac:f1:9e:ed:63:ad:95:8c:5d:53:
         00:a4:76:da:b2:5e:72:3a:4c:0c:3a:29:65:60:19:84:0c:4a:
         f5:f4:36:81:23:56:1a:0e:12:07:5a:0a:c3:32:ca:47:10:a6:
         0c:d2:d4:cf:6c:10:27:84:33:c1:b8:65:f2:74:8d:45:95:58:
         93:63:cf:9c:57:38:cc:e3:ef:a0:46:7e:f5:4f:71:33:72:ce:
         88:d8:73:c1:53:4e:d0:65:04:e2:9b:6c:84:8b:8b:ab:52:08:
         c3:85:b3:1a:b3:e2:73:e7:b1:b4:c2:59:11:61:26:ef:1c:b2:
         81:f3:ee:ef:dc:8f:cd:dd:44:59:dc:35:64:37:89:b6:73:54:
         4e:09:6d:8c:83:1d:58:85:27:ed:01:58:db:a3:7c:4f:df:61:
         9f:74:b3:36:61:df:cb:c7:60:49:37:2c:9d:2d:0c:aa:75:9a:
         22:54:51:09:2a:63:45:5a:33:07:ce:fa:6d:a9:e5:9f:a1:e7:
         c1:12:dd:8e:49:7c:f9:c0:8c:a0:ff:87:32:96:93:f9:a4:6f:
         7b:29:13:9a:54:bd:fd:72:6d:10:f7:f6:29:01:77:81:4f:8a:
         53:a9:44:de:70:90:92:0e:68:35:e8:14:cf:22:7b:df:4c:37:
         29:03:38:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 1 00:13:09 2024 by rpki-client on console-ams.rpki-client.org