Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A913900D/FCDCD3A0AC9D11E892CDAD0DC4F9AE02/5079D4A2ACA011E8BA30FF16C4F9AE02.roa
File:                     5079D4A2ACA011E8BA30FF16C4F9AE02.roa (raw, json)
Hash identifier:          FZDXtnkRxjEAjjk86h/ZsEmxRp+nHFowVvqrillclCo=
Subject key identifier:   EF:87:FB:B8:B2:A8:C6:8D:73:66:92:62:BE:33:2A:81:A8:A2:07:18
Certificate issuer:       /CN=A913900D/serialNumber=C603786D55A904124E7592EED2899EF578921100
Certificate serial:       7BF9
Authority key identifier: C6:03:78:6D:55:A9:04:12:4E:75:92:EE:D2:89:9E:F5:78:92:11:00
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xgN4bVWpBBJOdZLu0ome9XiSEQA.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A913900D/FCDCD3A0AC9D11E892CDAD0DC4F9AE02/5079D4A2ACA011E8BA30FF16C4F9AE02.roa
Signing time:             Thu 31 Aug 2023 17:44:37 +0000
ROA not before:           Thu 31 Aug 2023 17:44:37 +0000
ROA not after:            Thu 31 Oct 2024 00:00:00 +0000
asID:                     12008
IP address blocks:        202.68.78.192/26 maxlen: 26

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A913900D/FCDCD3A0AC9D11E892CDAD0DC4F9AE02/xgN4bVWpBBJOdZLu0ome9XiSEQA.crl
                          rsync://rpki.apnic.net/member_repository/A913900D/FCDCD3A0AC9D11E892CDAD0DC4F9AE02/xgN4bVWpBBJOdZLu0ome9XiSEQA.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xgN4bVWpBBJOdZLu0ome9XiSEQA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 23 May 2024 17:44:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 31737 (0x7bf9)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A913900D/serialNumber=C603786D55A904124E7592EED2899EF578921100
        Validity
            Not Before: Aug 31 17:44:37 2023 GMT
            Not After : Oct 31 00:00:00 2024 GMT
        Subject: CN=64f0d185-a2b0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e9:56:aa:5e:32:f7:63:d1:47:a3:ed:d4:88:c7:
                    2d:84:38:24:d0:d6:ee:8c:d5:e2:81:cd:55:4c:ed:
                    28:6b:e9:f1:f2:ef:ef:51:63:12:68:50:ea:c4:3a:
                    56:cf:9b:f1:1a:90:da:05:a6:d1:29:b4:5e:67:ad:
                    df:9e:4d:9a:92:c2:df:7f:b8:65:25:7a:47:9c:56:
                    5c:1c:d8:18:54:33:f7:20:bb:0d:15:1e:19:9c:79:
                    c8:e5:98:44:bd:15:18:44:fc:34:d1:4a:e6:dc:4d:
                    ef:ca:1b:65:45:e0:b3:7f:4a:81:a2:06:2d:1b:28:
                    7d:1c:dd:cc:52:15:a2:57:f4:7f:80:66:48:1d:c7:
                    7b:b6:e2:de:61:34:da:75:07:dc:6f:36:47:b2:c7:
                    89:d9:ad:c9:82:f6:73:37:bc:d0:20:c2:96:82:1a:
                    41:1a:0a:20:42:77:d3:fe:4b:74:4c:cc:aa:b4:90:
                    cb:1f:80:b9:f2:18:d6:5b:d6:c9:5c:75:26:22:2d:
                    01:09:27:e2:f0:1d:1d:88:f5:33:4e:7f:32:58:e1:
                    9d:8b:47:8f:09:ee:29:65:db:24:03:d5:6e:a2:ee:
                    1c:c3:7f:cb:06:06:76:bd:e9:a4:97:75:53:4d:4e:
                    19:65:19:93:ee:93:02:a3:49:6f:fc:bc:d3:34:0e:
                    45:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EF:87:FB:B8:B2:A8:C6:8D:73:66:92:62:BE:33:2A:81:A8:A2:07:18
            X509v3 Authority Key Identifier:
                keyid:C6:03:78:6D:55:A9:04:12:4E:75:92:EE:D2:89:9E:F5:78:92:11:00

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A913900D/FCDCD3A0AC9D11E892CDAD0DC4F9AE02/xgN4bVWpBBJOdZLu0ome9XiSEQA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xgN4bVWpBBJOdZLu0ome9XiSEQA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913900D/FCDCD3A0AC9D11E892CDAD0DC4F9AE02/5079D4A2ACA011E8BA30FF16C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  202.68.78.192/26

    Signature Algorithm: sha256WithRSAEncryption
         c3:9d:4f:27:e3:01:79:30:f3:79:fa:74:65:cd:1a:5d:82:0a:
         b7:71:c8:64:a1:6f:22:51:d1:10:83:9d:3d:02:6e:2c:a4:54:
         86:71:4b:8a:94:09:a2:09:e2:ce:1f:7f:20:34:31:7f:99:83:
         45:f0:9d:f1:52:ef:9f:27:09:11:61:1d:d4:5c:4a:49:8d:23:
         2d:cd:93:90:b3:7a:e2:ff:b2:f2:c0:e4:ce:7b:f8:92:e6:a1:
         70:bb:e4:e1:cc:93:d5:af:3d:91:af:7f:6d:19:cc:e7:10:50:
         ff:d1:94:68:b9:4f:0e:c7:4e:6f:2e:ad:cc:ee:00:78:5e:d9:
         34:6b:40:50:e7:8a:9d:2c:7d:e3:a0:e0:2e:bb:c5:44:cb:a4:
         c4:f9:1e:11:24:65:20:61:7c:09:1a:77:f3:7b:a8:0d:d7:fd:
         0e:d5:e1:01:9d:ff:be:6e:bd:fd:dd:1a:86:e1:96:f3:d0:7f:
         e1:bc:70:e2:27:fd:84:4b:a9:3b:5c:b2:30:81:dd:8f:a5:1d:
         4b:a4:59:70:38:84:50:95:e9:22:72:ad:f4:7c:a4:90:23:c2:
         94:e8:e8:d5:d1:a5:93:2d:0f:fd:4e:27:98:af:e2:03:25:c1:
         28:93:5d:06:05:9c:6b:d6:c4:70:dd:bb:10:56:80:fd:24:9a:
         0e:93:3d:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 16 18:26:03 2024 by rpki-client on console-fra.rpki-client.org