Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9183798/9017B50A4A2711E9ACF17C26C4F9AE02/9F08E8B2D28E11EB9F83683DC4F9AE02.roa
File:                     9F08E8B2D28E11EB9F83683DC4F9AE02.roa (raw, json)
Hash identifier:          iALHLd+5YzK5LOstQ6oyhDwQQiSLhkDuBZ6ChxP5zKU=
Subject key identifier:   BC:C4:0D:AE:49:FA:68:7F:3D:E1:10:33:96:E4:58:8C:08:F1:9B:07
Certificate issuer:       /CN=A9183798/serialNumber=3A02EFF7CC9C8BAA12D7C852B6FFC69FB060989B
Certificate serial:       0F66
Authority key identifier: 3A:02:EF:F7:CC:9C:8B:AA:12:D7:C8:52:B6:FF:C6:9F:B0:60:98:9B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OgLv98yci6oS18hStv_Gn7BgmJs.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9183798/9017B50A4A2711E9ACF17C26C4F9AE02/9F08E8B2D28E11EB9F83683DC4F9AE02.roa
Signing time:             Thu 30 May 2024 18:51:48 +0000
ROA not before:           Thu 30 May 2024 18:51:48 +0000
ROA not after:            Wed 30 Jul 2025 00:00:00 +0000
asID:                     142437
IP address blocks:        2405:3340:e011::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9183798/9017B50A4A2711E9ACF17C26C4F9AE02/OgLv98yci6oS18hStv_Gn7BgmJs.crl
                          rsync://rpki.apnic.net/member_repository/A9183798/9017B50A4A2711E9ACF17C26C4F9AE02/OgLv98yci6oS18hStv_Gn7BgmJs.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OgLv98yci6oS18hStv_Gn7BgmJs.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 29 Nov 2024 17:29:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3942 (0xf66)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9183798/serialNumber=3A02EFF7CC9C8BAA12D7C852B6FFC69FB060989B
        Validity
            Not Before: May 30 18:51:48 2024 GMT
            Not After : Jul 30 00:00:00 2025 GMT
        Subject: CN=6658cac4-6772
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:e5:5d:56:83:62:3b:6e:10:59:27:8e:c0:1a:
                    68:26:c7:c6:4a:11:51:6a:73:f8:7f:6e:e6:4c:ce:
                    60:bb:98:25:f5:1a:bd:9c:fa:00:84:aa:82:b2:82:
                    48:80:33:04:b0:cd:a0:90:12:f6:37:d8:77:b2:7b:
                    4b:f0:4b:b7:ff:57:6b:8f:e9:0b:a2:48:ad:5c:d1:
                    13:fd:d3:7d:f6:a0:93:7c:de:49:76:e6:eb:cb:1f:
                    a7:b3:8d:14:70:b5:55:e3:e1:4d:d0:08:c2:f1:3e:
                    34:5f:df:ab:1c:3f:77:13:2b:3d:9e:41:99:d9:af:
                    ca:72:47:af:81:f8:cb:2e:cc:8e:b0:b6:14:0d:7e:
                    3f:8e:b5:57:66:5d:12:ac:ca:ec:b7:95:d1:5b:ae:
                    b1:0e:2c:e2:e4:05:21:3d:78:d9:ae:98:55:6d:10:
                    b7:75:21:d5:ac:c1:2c:3e:67:4f:43:ed:88:7d:bd:
                    18:e3:4f:fa:6f:a1:48:f0:cf:cb:a2:16:c0:9b:92:
                    6a:db:a6:92:ce:d7:f3:4f:a7:af:50:63:fd:0e:d4:
                    71:1c:c1:34:a8:73:b9:1a:dd:69:47:16:59:03:9d:
                    e5:be:be:c4:6a:0c:72:36:09:17:27:83:0f:34:61:
                    e3:12:02:7b:e2:9e:d3:9c:12:ef:93:36:a4:e6:bf:
                    fd:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BC:C4:0D:AE:49:FA:68:7F:3D:E1:10:33:96:E4:58:8C:08:F1:9B:07
            X509v3 Authority Key Identifier:
                keyid:3A:02:EF:F7:CC:9C:8B:AA:12:D7:C8:52:B6:FF:C6:9F:B0:60:98:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9183798/9017B50A4A2711E9ACF17C26C4F9AE02/OgLv98yci6oS18hStv_Gn7BgmJs.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OgLv98yci6oS18hStv_Gn7BgmJs.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9183798/9017B50A4A2711E9ACF17C26C4F9AE02/9F08E8B2D28E11EB9F83683DC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  2405:3340:e011::/48

    Signature Algorithm: sha256WithRSAEncryption
         57:a7:b6:36:cb:32:d0:dd:44:ad:5c:64:4f:4d:2f:61:d3:3b:
         f3:e4:1b:13:8c:24:70:d6:27:d5:ae:b2:c7:dd:17:07:bd:d2:
         4b:79:eb:69:02:3e:50:54:12:55:69:61:48:60:a4:27:69:38:
         e6:53:b0:bf:41:bb:01:d6:e2:36:b9:d5:37:b0:58:f5:32:f8:
         e0:6a:e9:27:20:07:e2:fb:e4:0c:c5:92:a5:bc:5f:f2:97:9f:
         66:ef:c2:b0:be:1e:bf:ec:65:a1:c4:0b:46:ba:7d:fc:52:35:
         7a:f0:55:a9:c5:cb:40:e1:68:3f:e2:9d:72:5e:11:8e:1c:23:
         ed:d3:bd:c7:0d:b3:5c:35:ca:63:e8:5d:62:47:90:96:df:68:
         73:0e:56:8c:a9:6a:50:88:ef:55:15:3a:61:1b:56:f9:5c:5b:
         4c:77:75:89:a6:5c:bc:a9:37:cb:cf:d0:22:ae:67:f9:21:d5:
         4b:6d:68:85:38:99:ba:a5:cd:51:54:fe:56:5f:de:c1:3d:79:
         76:60:89:12:32:bc:16:25:91:95:97:51:b1:3c:94:de:ef:2c:
         7d:6c:80:73:af:3a:9c:f2:c7:b2:b8:0f:17:04:a8:45:2d:4d:
         1c:74:13:b5:87:14:53:0c:db:49:92:bb:a5:89:dc:18:4c:60:
         83:79:6f:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 19:45:00 2024 by rpki-client on console-fra.rpki-client.org