Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A911069A/961B2A4666F511EEA4384F74C4F9AE02/12C3947A66F611EE82864875C4F9AE02.roa
File:                     12C3947A66F611EE82864875C4F9AE02.roa (raw, json)
Hash identifier:          hooPbpOeDYXSJLtkqIONxh32EK1LA9hM6pLkGuGc1l4=
Subject key identifier:   6F:FC:AD:2C:C8:E0:84:30:12:82:F0:67:E3:FD:3B:8D:CA:AB:C3:1E
Certificate issuer:       /CN=A911069A/serialNumber=5B82E88C014132823D020D5C30A6BFB6D5B50221
Certificate serial:       03
Authority key identifier: 5B:82:E8:8C:01:41:32:82:3D:02:0D:5C:30:A6:BF:B6:D5:B5:02:21
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/W4LojAFBMoI9Ag1cMKa_ttW1AiE.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A911069A/961B2A4666F511EEA4384F74C4F9AE02/12C3947A66F611EE82864875C4F9AE02.roa
Signing time:             Mon 09 Oct 2023 22:49:16 +0000
ROA not before:           Mon 09 Oct 2023 22:49:16 +0000
ROA not after:            Thu 31 Oct 2024 00:00:00 +0000
asID:                     4768
IP address blocks:        117.120.36.0/23 maxlen: 23

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A911069A/961B2A4666F511EEA4384F74C4F9AE02/W4LojAFBMoI9Ag1cMKa_ttW1AiE.crl
                          rsync://rpki.apnic.net/member_repository/A911069A/961B2A4666F511EEA4384F74C4F9AE02/W4LojAFBMoI9Ag1cMKa_ttW1AiE.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/W4LojAFBMoI9Ag1cMKa_ttW1AiE.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 07 Jun 2024 07:27:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3 (0x3)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A911069A/serialNumber=5B82E88C014132823D020D5C30A6BFB6D5B50221
        Validity
            Not Before: Oct  9 22:49:16 2023 GMT
            Not After : Oct 31 00:00:00 2024 GMT
        Subject: CN=6524836c-26c6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:93:f0:98:a2:11:e8:03:b9:a0:d9:ae:6d:95:
                    29:00:6c:13:a3:0e:05:78:c3:85:51:a3:0d:56:3c:
                    fd:5f:ee:ea:ba:75:72:b5:4e:89:08:a9:8e:02:fa:
                    39:5d:80:b3:ae:e3:86:c5:88:55:5d:06:0c:1f:6a:
                    70:9d:e5:03:ad:a5:c5:0c:e7:56:30:a9:80:9d:43:
                    6e:9c:d7:f5:4c:8a:86:5b:ae:3a:76:a7:e2:1b:80:
                    23:be:69:40:83:99:29:b2:fc:e3:57:c1:cb:c2:18:
                    9f:a0:c9:17:e2:58:af:e9:ba:d2:37:a6:8b:3c:f4:
                    3c:81:89:f5:92:32:63:6a:94:1c:b2:13:48:89:9a:
                    b8:f6:59:92:e9:eb:5f:d2:1d:43:ed:aa:07:a4:38:
                    04:35:d2:19:14:8e:28:cc:af:b8:32:79:0f:a1:7b:
                    9f:bd:ee:a3:6d:b9:12:14:7d:ab:4c:e2:c3:64:32:
                    a7:99:26:52:60:9f:ff:6b:f5:72:f1:32:5e:1c:1e:
                    77:54:af:9f:9e:51:8f:5c:38:6b:88:b8:64:11:63:
                    f5:ec:58:f7:ed:f5:f0:1c:cf:b0:c5:13:7d:3c:ed:
                    14:ef:68:46:c0:32:b6:7c:1a:f8:f8:ed:56:22:dd:
                    2b:d6:cd:20:75:b3:e5:a8:de:ba:fc:19:24:cc:54:
                    86:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6F:FC:AD:2C:C8:E0:84:30:12:82:F0:67:E3:FD:3B:8D:CA:AB:C3:1E
            X509v3 Authority Key Identifier:
                keyid:5B:82:E8:8C:01:41:32:82:3D:02:0D:5C:30:A6:BF:B6:D5:B5:02:21

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A911069A/961B2A4666F511EEA4384F74C4F9AE02/W4LojAFBMoI9Ag1cMKa_ttW1AiE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/W4LojAFBMoI9Ag1cMKa_ttW1AiE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911069A/961B2A4666F511EEA4384F74C4F9AE02/12C3947A66F611EE82864875C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  117.120.36.0/23

    Signature Algorithm: sha256WithRSAEncryption
         4b:22:15:ce:86:70:33:3b:de:5d:a7:ca:40:f8:a4:43:3c:b9:
         ab:2f:fa:53:b4:ee:cf:7c:02:53:fd:eb:f8:17:2a:c1:11:2a:
         f0:3b:7a:38:e5:20:cd:de:81:4c:b1:5f:23:72:2a:4d:57:4d:
         f1:6e:26:7d:4d:ee:13:aa:82:38:4b:70:20:be:94:53:20:91:
         84:8d:5d:e4:de:9c:6a:e7:56:41:41:63:fb:40:8b:7a:6c:12:
         24:04:6f:e7:7c:6c:8d:d3:c4:22:3b:10:e6:1a:c4:14:df:8c:
         c1:06:29:27:94:a4:a8:41:97:85:25:13:f2:45:c8:f2:31:3f:
         7e:22:79:cf:86:94:c3:4e:9c:ab:22:c5:bb:c9:56:47:6a:60:
         56:cd:82:f6:4f:aa:d0:3c:78:3a:3d:4e:0e:51:47:19:6b:2b:
         97:b9:89:09:ed:77:38:8f:d5:41:e3:4d:17:39:06:34:55:50:
         92:e5:a4:3c:eb:5b:60:1e:8f:10:dd:00:5e:cf:13:cd:4b:53:
         47:19:17:a4:3d:9b:2d:20:4d:5b:38:7f:e6:25:33:47:ce:db:
         39:11:7d:46:4c:b8:b7:4e:ec:27:2a:30:32:3a:1b:a4:10:3c:
         b9:8c:98:7e:e8:c7:4e:1d:5f:47:2c:fb:f9:1c:15:5e:f1:54:
         f1:17:58:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 31 10:01:35 2024 by rpki-client on console-ams.rpki-client.org