Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9136BFF/E42BEAC293F011E9BC0CFF71C4F9AE02/1A582DBABDCB11ED998A723DC4F9AE02.roa
File:                     1A582DBABDCB11ED998A723DC4F9AE02.roa (raw, json)
Hash identifier:          AJ4MEoVFl8Yoc7cWv7ajIsgfC5XAGoNNmz9nCNaNpao=
Subject key identifier:   2D:6D:8C:64:64:40:5C:41:0D:24:D5:DF:A3:0A:34:B3:F7:2A:70:50
Certificate issuer:       /CN=A9136BFF/serialNumber=C14389517F886805A2D485BA412DAD2B52776F72
Certificate serial:       0DA0
Authority key identifier: C1:43:89:51:7F:88:68:05:A2:D4:85:BA:41:2D:AD:2B:52:77:6F:72
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wUOJUX-IaAWi1IW6QS2tK1J3b3I.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9136BFF/E42BEAC293F011E9BC0CFF71C4F9AE02/1A582DBABDCB11ED998A723DC4F9AE02.roa
Signing time:             Fri 02 Jun 2023 19:29:32 +0000
ROA not before:           Fri 02 Jun 2023 19:29:31 +0000
ROA not after:            Sat 31 Aug 2024 00:00:00 +0000
asID:                     133492
IP address blocks:        2402:3180:8000::/33 maxlen: 33

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9136BFF/E42BEAC293F011E9BC0CFF71C4F9AE02/wUOJUX-IaAWi1IW6QS2tK1J3b3I.crl
                          rsync://rpki.apnic.net/member_repository/A9136BFF/E42BEAC293F011E9BC0CFF71C4F9AE02/wUOJUX-IaAWi1IW6QS2tK1J3b3I.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wUOJUX-IaAWi1IW6QS2tK1J3b3I.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 07 May 2024 18:47:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3488 (0xda0)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9136BFF/serialNumber=C14389517F886805A2D485BA412DAD2B52776F72
        Validity
            Not Before: Jun  2 19:29:31 2023 GMT
            Not After : Aug 31 00:00:00 2024 GMT
        Subject: CN=647a431b-240c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:2f:74:27:6c:5f:1f:76:29:ef:69:d9:8e:e3:
                    22:d3:37:54:13:8e:a4:d3:10:27:41:b1:cf:f9:a9:
                    e0:b5:ef:3c:fd:e2:49:56:f5:10:54:6c:60:55:d5:
                    f0:39:ba:5d:53:19:58:9b:b0:c5:87:c5:a2:6c:82:
                    66:c9:cc:8d:63:97:82:5f:39:22:5f:52:95:ca:c6:
                    07:61:b7:64:9d:87:77:73:d3:fa:73:b7:ea:b0:ad:
                    08:89:df:14:01:0d:34:d6:22:2e:a6:a6:f2:ef:25:
                    32:86:cd:77:0f:b4:13:82:27:f3:5e:c5:a5:6c:bc:
                    01:ce:e8:72:5a:37:f5:a8:95:97:e5:65:db:89:b0:
                    6a:87:51:b9:bc:ab:f9:05:4e:5c:58:3c:0f:c2:bf:
                    c7:34:d8:ed:bb:3c:fc:8f:b4:63:d5:6d:4a:08:70:
                    9a:c0:38:e9:2b:c7:b1:4f:ce:c3:b8:ab:7c:b8:c1:
                    99:97:7d:f6:e6:aa:23:4f:e1:13:cf:45:5f:1f:d9:
                    03:40:82:7f:5b:85:44:57:72:51:fc:cd:33:88:0e:
                    ba:f9:c5:a0:7b:b8:27:3f:1a:ae:20:ef:ad:56:8a:
                    2c:a9:d3:2c:79:7f:a5:78:90:63:47:b9:6e:a3:85:
                    e9:df:52:80:6e:2b:08:ad:7c:d7:49:ec:0c:e0:37:
                    ae:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2D:6D:8C:64:64:40:5C:41:0D:24:D5:DF:A3:0A:34:B3:F7:2A:70:50
            X509v3 Authority Key Identifier:
                keyid:C1:43:89:51:7F:88:68:05:A2:D4:85:BA:41:2D:AD:2B:52:77:6F:72

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9136BFF/E42BEAC293F011E9BC0CFF71C4F9AE02/wUOJUX-IaAWi1IW6QS2tK1J3b3I.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wUOJUX-IaAWi1IW6QS2tK1J3b3I.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9136BFF/E42BEAC293F011E9BC0CFF71C4F9AE02/1A582DBABDCB11ED998A723DC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  2402:3180:8000::/33

    Signature Algorithm: sha256WithRSAEncryption
         c1:5d:cf:67:01:f3:13:04:73:f4:26:63:94:9b:ba:fa:30:b8:
         b8:5d:f3:d9:a1:c9:09:70:3f:b9:4a:e2:53:5b:bc:f2:69:9d:
         fe:0b:54:9f:b7:56:cd:ab:a5:57:41:bb:a9:6a:e7:06:e4:ac:
         8e:6b:e8:b0:ee:0a:14:de:c7:ba:75:8d:e1:f0:10:e3:70:60:
         0e:fb:2b:c2:ec:b4:a4:f3:d5:4c:a4:72:91:69:bb:8c:72:8a:
         d6:7b:c9:b4:6d:cf:cb:92:12:a3:29:61:d2:24:38:ce:f1:96:
         48:9a:dd:3f:99:20:24:f5:b6:34:22:ce:9b:c0:30:4c:65:db:
         2a:c9:b2:6f:c3:ec:92:74:06:bb:e4:64:6d:36:7b:63:ba:86:
         70:a8:32:a8:08:c8:f1:57:70:07:15:49:12:a9:94:e4:cd:b9:
         60:6e:ae:9c:33:d7:9c:d6:cc:54:4d:31:d0:04:7d:aa:14:c6:
         78:bb:be:b4:f4:d0:52:1d:14:a0:3a:14:f9:d8:6e:4b:51:b3:
         df:d4:bb:e0:d1:2d:27:cf:46:ad:ad:8b:1f:00:ec:ca:26:1d:
         32:0b:cc:19:1b:2b:e4:f7:c8:05:8c:df:f3:9a:42:9a:02:e6:
         7d:1e:d8:37:bf:58:b5:a5:0e:79:54:16:37:86:f3:01:81:bf:
         f0:d3:79:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 30 21:58:51 2024 by rpki-client on console-ams.rpki-client.org