Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9136BFF/E42BEAC293F011E9BC0CFF71C4F9AE02/B2B5EE70AFEB11EBB965A648C4F9AE02.roa
File:                     B2B5EE70AFEB11EBB965A648C4F9AE02.roa (raw, json)
Hash identifier:          7XR5r74GcilldrrcFfIwt0qfXtc6J6p+OWBLfzFoFfw=
Subject key identifier:   C0:FF:1D:65:90:B4:F7:AA:75:93:B7:01:94:E1:85:7C:DF:EC:AE:0B
Certificate issuer:       /CN=A9136BFF/serialNumber=C14389517F886805A2D485BA412DAD2B52776F72
Certificate serial:       0DA2
Authority key identifier: C1:43:89:51:7F:88:68:05:A2:D4:85:BA:41:2D:AD:2B:52:77:6F:72
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wUOJUX-IaAWi1IW6QS2tK1J3b3I.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9136BFF/E42BEAC293F011E9BC0CFF71C4F9AE02/B2B5EE70AFEB11EBB965A648C4F9AE02.roa
Signing time:             Fri 02 Jun 2023 19:29:34 +0000
ROA not before:           Fri 02 Jun 2023 19:29:34 +0000
ROA not after:            Sat 31 Aug 2024 00:00:00 +0000
asID:                     141706
IP address blocks:        2402:3180::/45 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9136BFF/E42BEAC293F011E9BC0CFF71C4F9AE02/wUOJUX-IaAWi1IW6QS2tK1J3b3I.crl
                          rsync://rpki.apnic.net/member_repository/A9136BFF/E42BEAC293F011E9BC0CFF71C4F9AE02/wUOJUX-IaAWi1IW6QS2tK1J3b3I.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wUOJUX-IaAWi1IW6QS2tK1J3b3I.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 03 May 2024 18:30:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3490 (0xda2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9136BFF/serialNumber=C14389517F886805A2D485BA412DAD2B52776F72
        Validity
            Not Before: Jun  2 19:29:34 2023 GMT
            Not After : Aug 31 00:00:00 2024 GMT
        Subject: CN=647a431d-7778
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:eb:4a:43:2c:e4:c1:dc:d9:a4:aa:8e:fe:0d:f1:
                    1b:6a:0d:5e:3c:bd:b6:71:b9:03:23:8b:42:35:1b:
                    09:5c:9e:bf:a2:76:9f:ca:ac:f7:cd:15:8f:2f:cf:
                    65:f8:18:69:67:90:93:50:00:53:b0:a7:e2:a7:95:
                    8d:4a:e1:cf:7c:5c:73:cd:bf:19:78:50:74:82:03:
                    bd:be:c7:97:52:50:0d:55:0a:54:8c:33:cd:cc:19:
                    2a:b1:31:b5:7d:e9:11:b5:69:63:30:79:b3:ac:01:
                    5c:c1:19:15:8f:10:15:76:20:d7:29:55:bc:00:99:
                    cc:77:3f:bb:4b:71:bf:1e:fc:d6:b0:c6:74:72:2e:
                    cd:84:39:15:d4:67:ba:79:1f:4d:e3:a2:2d:37:36:
                    a3:db:c8:ec:5c:db:f8:8b:6f:06:6f:0a:c7:e1:78:
                    26:52:97:96:66:7a:78:66:65:0f:5a:70:ee:12:b5:
                    8f:1e:42:66:ee:12:31:b4:8e:09:b4:b9:aa:d0:bd:
                    db:db:c6:fb:b0:19:e7:58:dd:1c:14:62:df:51:67:
                    4b:2d:01:fd:e6:3b:7d:3b:5c:fb:ae:ae:5e:4c:86:
                    43:d1:dd:26:f3:86:d4:03:04:d7:53:14:f1:dd:f5:
                    84:0b:15:85:b1:55:a6:14:c2:42:a3:6b:4c:e8:f6:
                    4b:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C0:FF:1D:65:90:B4:F7:AA:75:93:B7:01:94:E1:85:7C:DF:EC:AE:0B
            X509v3 Authority Key Identifier:
                keyid:C1:43:89:51:7F:88:68:05:A2:D4:85:BA:41:2D:AD:2B:52:77:6F:72

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9136BFF/E42BEAC293F011E9BC0CFF71C4F9AE02/wUOJUX-IaAWi1IW6QS2tK1J3b3I.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wUOJUX-IaAWi1IW6QS2tK1J3b3I.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9136BFF/E42BEAC293F011E9BC0CFF71C4F9AE02/B2B5EE70AFEB11EBB965A648C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  2402:3180::/45

    Signature Algorithm: sha256WithRSAEncryption
         bb:1d:ee:7c:c7:6f:09:84:a8:5d:2b:92:b6:03:62:99:81:bd:
         72:55:d9:09:46:8e:8a:05:2c:1c:7a:f2:94:7a:92:09:70:15:
         43:92:28:3b:17:c6:eb:a9:c7:ad:2b:ca:33:f3:20:9e:9d:ee:
         0e:86:2f:dc:18:d2:a3:db:2a:35:45:16:8b:97:49:c2:94:e0:
         ee:ae:ef:da:3f:58:ae:ec:38:46:11:41:bd:87:59:31:af:68:
         30:5c:30:be:f9:e3:77:ff:fd:41:f3:c1:4f:25:fd:b9:1f:27:
         64:23:79:78:99:8d:e4:9a:c2:f3:5d:2c:8d:50:db:14:45:33:
         77:f1:5a:c3:4e:e2:0d:e2:0c:be:d1:59:83:e0:35:84:5c:bd:
         bc:0d:2f:7e:44:52:3e:f9:5e:75:06:e4:a2:9f:cb:3e:f8:7c:
         ad:76:bc:fc:66:bd:71:6e:48:dc:ad:12:9c:23:94:fc:d5:a0:
         e4:16:d8:43:36:1c:22:1f:c3:56:0c:58:6e:4c:bc:39:e7:d3:
         d5:63:5f:21:fc:c0:7f:7d:a5:17:50:73:37:e9:74:d4:ac:55:
         7d:ac:88:6c:3e:0c:09:6e:d5:7d:08:04:3a:f1:57:d0:ad:b8:
         c0:d3:e8:ac:06:c7:ce:fd:8a:b0:94:2d:71:2f:35:9d:29:ba:
         50:d4:53:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 27 10:18:40 2024 by rpki-client on console-ams.rpki-client.org