Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A913900D/FCDCD3A0AC9D11E892CDAD0DC4F9AE02/A2696B18D16C11EA8886BE5DC4F9AE02.roa
File:                     A2696B18D16C11EA8886BE5DC4F9AE02.roa (raw, json)
Hash identifier:          G1O056AnCvEMlJC2dAM7Tau1pxvqG6AlEVHoettZ9H4=
Subject key identifier:   90:CB:D6:31:1B:D5:D9:51:6E:AC:1D:4D:78:A1:8F:29:99:F5:20:B2
Certificate issuer:       /CN=A913900D/serialNumber=C603786D55A904124E7592EED2899EF578921100
Certificate serial:       7BFB
Authority key identifier: C6:03:78:6D:55:A9:04:12:4E:75:92:EE:D2:89:9E:F5:78:92:11:00
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xgN4bVWpBBJOdZLu0ome9XiSEQA.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A913900D/FCDCD3A0AC9D11E892CDAD0DC4F9AE02/A2696B18D16C11EA8886BE5DC4F9AE02.roa
Signing time:             Thu 31 Aug 2023 17:44:39 +0000
ROA not before:           Thu 31 Aug 2023 17:44:39 +0000
ROA not after:            Thu 31 Oct 2024 00:00:00 +0000
asID:                     140945
IP address blocks:        2402:f00:2800::/38 maxlen: 38

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A913900D/FCDCD3A0AC9D11E892CDAD0DC4F9AE02/xgN4bVWpBBJOdZLu0ome9XiSEQA.crl
                          rsync://rpki.apnic.net/member_repository/A913900D/FCDCD3A0AC9D11E892CDAD0DC4F9AE02/xgN4bVWpBBJOdZLu0ome9XiSEQA.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xgN4bVWpBBJOdZLu0ome9XiSEQA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 23 May 2024 17:44:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 31739 (0x7bfb)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A913900D/serialNumber=C603786D55A904124E7592EED2899EF578921100
        Validity
            Not Before: Aug 31 17:44:39 2023 GMT
            Not After : Oct 31 00:00:00 2024 GMT
        Subject: CN=64f0d187-aab7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:9f:94:5a:ad:af:2e:a0:5c:e4:99:19:7d:7a:
                    39:df:64:a7:98:90:54:a7:23:90:a6:76:5d:74:ae:
                    03:24:5c:0b:8e:c9:28:f4:2e:8a:f6:66:37:18:1b:
                    ca:67:74:ef:05:81:73:1e:70:ca:22:28:d1:ac:28:
                    e1:f1:4d:c4:c5:31:d9:b3:79:fd:ff:32:84:37:00:
                    c0:6c:08:d9:bc:de:65:57:b3:33:4e:3e:c0:27:08:
                    04:d5:0d:0d:4c:66:8b:1c:5a:b7:e6:f9:e8:0a:d6:
                    88:d6:4e:b6:c1:f0:f2:c7:e9:13:1b:28:34:cc:fa:
                    c3:f1:c1:de:b8:9f:90:18:c3:c0:23:da:b1:2d:50:
                    d1:d4:d0:82:9a:ce:f8:4a:5b:ea:9c:82:9f:24:65:
                    e2:b9:88:d0:74:25:41:41:e8:58:9b:c6:60:27:50:
                    40:4b:23:70:66:77:e7:4a:15:41:80:d1:28:ea:4b:
                    b0:c1:1c:45:1f:a7:61:cf:5b:04:84:8b:a3:06:03:
                    2c:03:62:aa:3a:c6:9b:be:99:13:db:f6:0c:b2:19:
                    77:13:11:23:37:16:82:fe:79:5e:99:32:26:e9:29:
                    d1:d9:ad:c5:15:78:3a:b7:a0:1a:86:a5:e2:53:de:
                    b6:bd:50:56:55:3d:22:48:c3:fe:b9:f7:20:f7:2c:
                    49:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                90:CB:D6:31:1B:D5:D9:51:6E:AC:1D:4D:78:A1:8F:29:99:F5:20:B2
            X509v3 Authority Key Identifier:
                keyid:C6:03:78:6D:55:A9:04:12:4E:75:92:EE:D2:89:9E:F5:78:92:11:00

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A913900D/FCDCD3A0AC9D11E892CDAD0DC4F9AE02/xgN4bVWpBBJOdZLu0ome9XiSEQA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xgN4bVWpBBJOdZLu0ome9XiSEQA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913900D/FCDCD3A0AC9D11E892CDAD0DC4F9AE02/A2696B18D16C11EA8886BE5DC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  2402:f00:2800::/38

    Signature Algorithm: sha256WithRSAEncryption
         1f:e6:42:06:d1:5e:42:5c:b7:15:c7:43:c7:8e:f7:ce:88:7c:
         2d:3c:6d:dd:20:6f:63:19:3e:a3:3e:8f:c5:75:b0:bd:d3:cd:
         71:1d:59:b1:a6:f6:39:b9:90:d6:5e:3d:10:77:d9:03:62:46:
         fe:ad:23:3f:98:df:b1:78:14:4e:e0:36:e9:40:3e:8b:68:33:
         04:e0:c9:11:fb:4c:2c:2e:8f:0b:15:71:b2:3d:9f:54:4b:5b:
         b9:20:01:6d:a5:7c:cb:5e:e6:14:ce:47:06:78:db:94:0f:c6:
         e7:0c:bf:86:05:3b:04:d9:de:13:ed:56:98:af:8d:3a:be:aa:
         0d:49:47:ee:7f:2e:09:67:f3:19:92:07:00:bd:f6:da:64:ed:
         ee:29:e4:64:15:31:d6:7c:39:60:95:b5:50:4d:78:78:27:76:
         c5:5f:e3:fb:56:ae:ec:38:38:97:0c:cf:98:27:54:26:0c:15:
         a6:af:91:03:46:73:8a:6d:00:45:86:ad:36:5e:a9:42:23:a1:
         66:32:5b:5d:10:37:a1:19:ae:6a:ea:6e:41:e6:dd:d8:cf:4e:
         9a:d6:d6:47:83:53:20:38:43:27:c7:ac:44:26:33:30:e4:34:
         ad:f4:ad:b0:fa:8c:69:09:eb:ec:b4:3f:06:a9:ab:e2:64:1e:
         60:1a:5f:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 16 18:26:03 2024 by rpki-client on console-fra.rpki-client.org