Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9123D9C/455942D650B211E9B5DB6A6BC4F9AE02/9D164714168511EAB282BB44C4F9AE02.roa
File:                     9D164714168511EAB282BB44C4F9AE02.roa (raw, json)
Hash identifier:          +Z5eq5GUeFS2MmmulFa88HJNuMpvnMOg5gvwg5dtvrw=
Subject key identifier:   BA:CF:EF:CF:23:CC:9D:06:36:77:6A:81:10:3E:D4:34:1B:38:31:5D
Certificate issuer:       /CN=A9123D9C/serialNumber=5B2CF0FB62F160F1838AEE3E6CDE07544DFF8BFF
Certificate serial:       0F5C
Authority key identifier: 5B:2C:F0:FB:62:F1:60:F1:83:8A:EE:3E:6C:DE:07:54:4D:FF:8B:FF
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Wyzw-2LxYPGDiu4-bN4HVE3_i_8.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9123D9C/455942D650B211E9B5DB6A6BC4F9AE02/9D164714168511EAB282BB44C4F9AE02.roa
Signing time:             Thu 08 Feb 2024 18:16:02 +0000
ROA not before:           Thu 08 Feb 2024 18:16:02 +0000
ROA not after:            Thu 01 May 2025 00:00:00 +0000
asID:                     138919
IP address blocks:        2404:9ec0:114::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9123D9C/455942D650B211E9B5DB6A6BC4F9AE02/Wyzw-2LxYPGDiu4-bN4HVE3_i_8.crl
                          rsync://rpki.apnic.net/member_repository/A9123D9C/455942D650B211E9B5DB6A6BC4F9AE02/Wyzw-2LxYPGDiu4-bN4HVE3_i_8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Wyzw-2LxYPGDiu4-bN4HVE3_i_8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 25 Apr 2024 18:15:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3932 (0xf5c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9123D9C/serialNumber=5B2CF0FB62F160F1838AEE3E6CDE07544DFF8BFF
        Validity
            Not Before: Feb  8 18:16:02 2024 GMT
            Not After : May  1 00:00:00 2025 GMT
        Subject: CN=65c51a61-84cf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:fb:3e:64:fa:27:bd:48:02:6c:f1:bf:77:18:0b:
                    76:a3:ac:f4:0b:71:e4:d0:41:21:84:73:06:89:2d:
                    6e:d9:2b:20:95:0b:c5:23:df:be:fb:df:b5:5f:af:
                    e2:03:90:cc:d0:02:eb:d4:a9:9f:93:69:7b:6a:4a:
                    b0:a7:30:ae:d6:2f:3c:c2:e7:85:85:d5:b5:d6:df:
                    77:91:0b:b6:96:b5:a9:e8:2e:28:1e:dd:4d:ae:d2:
                    e9:66:9a:5f:4c:07:97:c8:ae:ee:23:44:76:56:a9:
                    6c:31:a5:c4:79:b2:20:3d:e1:ea:c7:5e:1c:02:d5:
                    60:13:80:32:af:c7:1a:19:f0:24:a5:f2:ae:20:3d:
                    47:39:3f:43:28:07:72:a2:c8:2e:64:3f:6b:f0:2a:
                    59:8e:a9:04:89:24:b1:a0:0f:fd:e2:db:e7:d9:ad:
                    80:44:11:c8:be:17:d9:e0:a6:98:dd:8b:58:76:df:
                    cb:08:0b:11:fe:2e:74:be:2a:46:f7:80:90:ae:30:
                    e8:b6:63:28:8c:d2:90:64:61:3d:37:77:fc:f9:94:
                    60:d7:1f:f4:74:ca:b0:d2:88:8e:ae:ac:c7:ad:26:
                    95:d5:98:9f:1e:7e:55:3a:8d:3f:85:fc:e5:67:24:
                    1a:95:dc:a2:4b:ef:bc:09:db:97:44:e2:5e:a1:15:
                    0f:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BA:CF:EF:CF:23:CC:9D:06:36:77:6A:81:10:3E:D4:34:1B:38:31:5D
            X509v3 Authority Key Identifier:
                keyid:5B:2C:F0:FB:62:F1:60:F1:83:8A:EE:3E:6C:DE:07:54:4D:FF:8B:FF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9123D9C/455942D650B211E9B5DB6A6BC4F9AE02/Wyzw-2LxYPGDiu4-bN4HVE3_i_8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Wyzw-2LxYPGDiu4-bN4HVE3_i_8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9123D9C/455942D650B211E9B5DB6A6BC4F9AE02/9D164714168511EAB282BB44C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  2404:9ec0:114::/48

    Signature Algorithm: sha256WithRSAEncryption
         20:17:7d:27:ad:fe:89:9b:b0:4b:63:43:29:2d:7b:6e:d6:85:
         5b:aa:9c:ab:bb:c6:85:a0:24:36:08:d2:9c:75:e6:27:0a:ef:
         6c:d1:bf:89:82:ff:70:21:16:72:74:71:17:24:a9:1f:75:a5:
         e9:1b:67:1d:66:22:ec:f4:12:32:3b:4d:0c:c2:2d:7c:0b:80:
         53:c1:7b:49:d4:0a:96:53:4e:3b:55:16:48:69:6e:72:2a:2e:
         8e:3b:63:7d:74:44:67:37:20:0d:cb:36:79:96:56:05:33:79:
         11:7e:4d:a7:df:3e:a3:5f:22:91:92:7e:75:fe:0e:21:8d:d9:
         d0:b0:d1:23:51:c3:84:c4:7f:ed:ae:af:09:c8:d3:c6:79:2d:
         c1:2a:8b:7b:5d:63:7f:e7:d4:68:eb:b3:2a:de:07:88:fe:a4:
         07:23:7e:10:40:3c:aa:a2:82:b8:fa:55:67:0f:9c:a0:ae:72:
         b3:33:3d:a8:89:cd:ea:6e:c3:7f:58:42:5b:c3:9c:0a:5b:68:
         c9:a2:51:26:51:d8:f6:2d:fb:f7:25:ac:a0:ac:97:9f:7b:77:
         19:11:de:00:f1:be:b0:bc:86:ca:a5:fb:ad:36:a3:f4:7e:0b:
         4c:ae:49:44:cc:a0:98:11:7b:2e:41:57:64:1a:15:87:31:1e:
         86:43:6d:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 18 20:10:39 2024 by rpki-client on console-fra.rpki-client.org