Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A919536C/75B98BF0366011EE88E0F530C4F9AE02/A309A0BA366311EEB376DC3AC4F9AE02.roa
File:                     A309A0BA366311EEB376DC3AC4F9AE02.roa (raw, json)
Hash identifier:          Gn0R+ynFNN1GakSbPgaa4CNevCbLowDZ1oQGYxlW1ts=
Subject key identifier:   41:68:33:56:23:DB:FF:BA:7B:F6:CE:97:F7:15:B2:9A:8B:DC:F7:DA
Certificate issuer:       /CN=A919536C/serialNumber=A090E520BF9D51F2FDCEED413AF27AC758F6AE1D
Certificate serial:       0C
Authority key identifier: A0:90:E5:20:BF:9D:51:F2:FD:CE:ED:41:3A:F2:7A:C7:58:F6:AE:1D
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/oJDlIL-dUfL9zu1BOvJ6x1j2rh0.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A919536C/75B98BF0366011EE88E0F530C4F9AE02/A309A0BA366311EEB376DC3AC4F9AE02.roa
Signing time:             Wed 09 Aug 2023 03:20:06 +0000
ROA not before:           Wed 09 Aug 2023 03:20:06 +0000
ROA not after:            Sat 31 Aug 2024 00:00:00 +0000
asID:                     24097
IP address blocks:        96.30.92.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A919536C/75B98BF0366011EE88E0F530C4F9AE02/oJDlIL-dUfL9zu1BOvJ6x1j2rh0.crl
                          rsync://rpki.apnic.net/member_repository/A919536C/75B98BF0366011EE88E0F530C4F9AE02/oJDlIL-dUfL9zu1BOvJ6x1j2rh0.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/oJDlIL-dUfL9zu1BOvJ6x1j2rh0.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 08 Jun 2024 05:22:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 12 (0xc)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A919536C/serialNumber=A090E520BF9D51F2FDCEED413AF27AC758F6AE1D
        Validity
            Not Before: Aug  9 03:20:06 2023 GMT
            Not After : Aug 31 00:00:00 2024 GMT
        Subject: CN=64d305e6-cecf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:5b:1c:ca:58:42:10:2f:ae:55:e3:06:bf:f2:
                    71:ef:b3:fb:bf:30:6b:44:eb:46:8d:c2:09:55:87:
                    c6:25:68:55:90:6d:66:55:d5:cd:a2:b7:35:2b:dc:
                    6e:02:e4:b6:1c:e2:7a:ef:3e:d9:bd:52:49:e5:bd:
                    a3:1e:c8:29:e5:c8:56:cf:7d:11:db:0b:02:18:7b:
                    d8:51:c6:36:1c:26:fa:3a:55:f3:81:7f:7f:c2:b9:
                    f2:ea:b5:09:eb:47:1d:f8:52:05:4d:bd:bf:5c:17:
                    71:50:0e:ea:58:96:48:21:da:66:0e:12:28:a0:c5:
                    c8:dc:61:f7:2a:64:80:67:40:53:5b:5f:b1:5a:a5:
                    7a:b7:7a:c6:ae:5b:b1:d8:50:d0:3a:4c:9f:cb:b3:
                    1e:90:3d:c5:8e:8d:07:0b:c0:83:4b:81:e0:e5:02:
                    b3:f6:0d:96:86:6e:9e:e2:e2:02:52:47:70:8f:fd:
                    05:c8:6e:83:94:c3:16:b2:be:5f:e5:5e:b1:08:58:
                    a8:3d:95:55:3b:2f:5d:0a:d4:3b:07:69:cc:90:30:
                    3c:ad:83:14:78:46:33:87:ff:93:62:d7:19:dd:f7:
                    7f:1c:1e:d5:3d:29:39:6c:31:bd:cd:d9:e8:2a:47:
                    e9:9c:97:41:85:dc:10:59:5f:b7:59:f1:0c:88:21:
                    db:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                41:68:33:56:23:DB:FF:BA:7B:F6:CE:97:F7:15:B2:9A:8B:DC:F7:DA
            X509v3 Authority Key Identifier:
                keyid:A0:90:E5:20:BF:9D:51:F2:FD:CE:ED:41:3A:F2:7A:C7:58:F6:AE:1D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A919536C/75B98BF0366011EE88E0F530C4F9AE02/oJDlIL-dUfL9zu1BOvJ6x1j2rh0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/oJDlIL-dUfL9zu1BOvJ6x1j2rh0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919536C/75B98BF0366011EE88E0F530C4F9AE02/A309A0BA366311EEB376DC3AC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  96.30.92.0/24

    Signature Algorithm: sha256WithRSAEncryption
         6c:9c:a2:ff:87:41:97:06:e0:8a:7c:cd:07:81:15:47:f5:bc:
         89:26:76:a4:5d:3f:09:33:d6:15:b9:8d:98:d0:ad:09:c5:bc:
         db:5a:01:51:3d:2b:c7:c7:b5:92:42:8f:f9:04:7d:6a:5a:e6:
         65:cf:df:da:80:da:3a:df:4b:ce:8f:7d:cc:7a:5b:29:f7:f8:
         9c:69:57:a1:2a:7e:83:44:20:98:b8:13:2e:53:09:dd:11:53:
         5d:04:49:ae:38:cd:c5:4e:7d:bd:57:1e:2c:b6:60:9c:3f:39:
         eb:4b:df:a3:12:dc:eb:34:67:26:31:ec:8a:ce:3d:4c:f6:45:
         d9:63:9a:41:1a:3a:c5:48:69:90:ac:4a:f1:2b:54:f8:f1:e2:
         e2:fe:d2:21:71:19:98:d5:49:2a:e8:9d:7a:e1:c3:b4:e2:8d:
         b3:23:30:93:e7:dd:34:45:f9:72:60:3e:82:ce:8c:c0:b7:55:
         66:0b:03:2f:88:00:f5:23:d0:f3:4b:f5:cf:9f:d9:0a:b9:07:
         01:c3:01:27:bf:29:0c:7b:cf:39:96:26:8f:f5:3d:42:68:bf:
         58:73:a0:a4:48:06:74:d9:60:8f:6d:47:c3:b2:22:16:9e:1b:
         2e:83:3d:05:63:90:25:5e:24:6a:3a:7b:56:f2:f3:16:e4:d5:
         dd:19:f6:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 1 09:10:35 2024 by rpki-client on console-fra.rpki-client.org