Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A911513F/CCD7F934553B11EBB13DFE6FC4F9AE02/B9F42C72554D11EBA9D33130C4F9AE02.roa
File:                     B9F42C72554D11EBA9D33130C4F9AE02.roa (raw, json)
Hash identifier:          cB3h0BwU7n31UJ46QG5DLAIX4mE+Nr0sDLSdub3xWHw=
Subject key identifier:   BB:07:81:D5:0B:03:BE:7E:5E:8C:5D:B1:0E:20:DD:53:1E:FD:03:3A
Certificate issuer:       /CN=A911513F/serialNumber=EE1C8A1B06C36BDCC43C71024B52D91C6A6AF6BA
Certificate serial:       05B7
Authority key identifier: EE:1C:8A:1B:06:C3:6B:DC:C4:3C:71:02:4B:52:D9:1C:6A:6A:F6:BA
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7hyKGwbDa9zEPHECS1LZHGpq9ro.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A911513F/CCD7F934553B11EBB13DFE6FC4F9AE02/B9F42C72554D11EBA9D33130C4F9AE02.roa
Signing time:             Thu 16 Nov 2023 23:41:13 +0000
ROA not before:           Thu 16 Nov 2023 23:41:13 +0000
ROA not after:            Sun 02 Mar 2025 00:00:00 +0000
asID:                     9381
IP address blocks:        103.28.76.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A911513F/CCD7F934553B11EBB13DFE6FC4F9AE02/7hyKGwbDa9zEPHECS1LZHGpq9ro.crl
                          rsync://rpki.apnic.net/member_repository/A911513F/CCD7F934553B11EBB13DFE6FC4F9AE02/7hyKGwbDa9zEPHECS1LZHGpq9ro.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7hyKGwbDa9zEPHECS1LZHGpq9ro.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 27 Nov 2024 20:33:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1463 (0x5b7)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A911513F/serialNumber=EE1C8A1B06C36BDCC43C71024B52D91C6A6AF6BA
        Validity
            Not Before: Nov 16 23:41:13 2023 GMT
            Not After : Mar  2 00:00:00 2025 GMT
        Subject: CN=6556a899-43df
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:4a:73:0b:34:b4:64:36:a1:46:e3:bd:7e:77:
                    bc:77:5a:a7:8e:fa:8a:7c:a6:f6:89:03:68:0b:4d:
                    04:72:ef:6d:c3:fd:58:d2:89:30:45:4a:9d:d6:9f:
                    b0:2b:af:35:23:f3:09:c4:60:a6:17:89:12:9b:dd:
                    a3:19:cc:6e:fc:00:ac:c6:a7:4b:60:78:69:03:0e:
                    5d:7f:f5:6c:dd:6f:00:b5:20:67:5c:db:ec:58:c0:
                    1a:86:8b:7d:71:41:f9:92:5e:82:2e:9a:aa:a5:aa:
                    23:d4:97:e0:24:99:f6:82:ab:41:51:fa:58:30:f8:
                    00:9f:ed:37:f7:2a:69:cc:bb:99:4e:05:e3:a5:a7:
                    69:8b:b4:c0:69:fd:c7:f9:8f:54:0b:f9:74:95:29:
                    07:e4:4e:92:6a:b7:9a:f9:c9:aa:7f:3f:14:0b:26:
                    27:6f:ef:ae:45:02:3e:92:ff:95:11:68:1c:4a:bc:
                    2b:ee:ea:fc:41:a8:fb:e1:c4:b7:54:2c:37:4f:60:
                    0c:36:08:16:ec:1f:08:02:c6:34:9b:e9:2f:85:85:
                    57:5c:7b:65:36:d4:47:65:b2:71:a6:16:7d:8c:77:
                    f4:37:d5:de:1f:cf:43:c1:ee:f9:3a:b7:06:6e:d3:
                    c4:a4:f8:6d:5a:d1:3f:bb:e7:a6:7f:dc:ae:39:f4:
                    c5:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BB:07:81:D5:0B:03:BE:7E:5E:8C:5D:B1:0E:20:DD:53:1E:FD:03:3A
            X509v3 Authority Key Identifier:
                keyid:EE:1C:8A:1B:06:C3:6B:DC:C4:3C:71:02:4B:52:D9:1C:6A:6A:F6:BA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A911513F/CCD7F934553B11EBB13DFE6FC4F9AE02/7hyKGwbDa9zEPHECS1LZHGpq9ro.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7hyKGwbDa9zEPHECS1LZHGpq9ro.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911513F/CCD7F934553B11EBB13DFE6FC4F9AE02/B9F42C72554D11EBA9D33130C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.28.76.0/22

    Signature Algorithm: sha256WithRSAEncryption
         63:73:1a:c9:20:5f:1b:df:c6:31:c2:e1:36:12:bb:5e:ce:c0:
         bd:b0:f4:b3:73:16:e9:d9:3b:03:8e:e3:b9:80:aa:d6:c7:47:
         86:89:0f:83:67:69:ea:2b:81:6a:c2:71:34:a0:3d:6c:99:43:
         58:ff:11:67:00:9f:eb:c8:04:0c:fe:5f:45:c0:0e:93:5c:18:
         37:3e:2d:e4:a5:cf:f6:02:54:69:6f:62:96:1c:16:68:39:2a:
         ec:0b:8f:9d:c4:ab:ba:15:2f:97:a9:dc:cf:d3:8d:45:5d:0d:
         54:eb:81:27:03:ed:1c:a5:c9:eb:ed:55:d3:be:be:f6:4e:cd:
         2b:5f:3c:40:ed:52:97:c6:ba:92:98:d2:9c:54:4e:5d:b3:d0:
         16:8f:78:13:4d:6e:fa:94:97:6f:bb:6f:02:a5:85:81:d5:c3:
         5d:13:09:e4:2e:a9:02:27:08:3e:0b:e4:f0:01:a6:0f:0d:e1:
         5c:c7:d9:2e:37:8b:74:d7:80:88:d0:d2:b9:40:da:d0:d7:a6:
         3d:ef:a9:45:eb:ba:22:a3:a0:b0:48:a5:46:db:80:c7:6b:21:
         f6:b8:1b:b0:f7:5b:d6:13:1f:ee:db:25:da:02:8d:25:ba:9d:
         89:42:c6:a2:21:a4:97:14:42:28:b7:27:09:45:2d:ca:0a:86:
         59:f4:0d:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 20 23:11:42 2024 by rpki-client on console-fra.rpki-client.org