Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A911BD54/3E281C98004911E5B4B64F63C4F9AE02/44A19870784F11E8A84DBE2EC4F9AE02.roa
File:                     44A19870784F11E8A84DBE2EC4F9AE02.roa (raw, json)
Hash identifier:          8MdfToCmTrb/49sqyI2eT3gHkmnbmaQhxSaC+MJjj7o=
Subject key identifier:   2A:EF:8F:B4:A7:A3:3C:D3:F1:6E:0C:22:5B:DE:09:58:3A:C2:3C:BB
Certificate issuer:       /CN=A911BD54/serialNumber=BCFAF8D33F18A8D3602029EBCEDE1E36AF20715C
Certificate serial:       2985
Authority key identifier: BC:FA:F8:D3:3F:18:A8:D3:60:20:29:EB:CE:DE:1E:36:AF:20:71:5C
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vPr40z8YqNNgICnrzt4eNq8gcVw.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A911BD54/3E281C98004911E5B4B64F63C4F9AE02/44A19870784F11E8A84DBE2EC4F9AE02.roa
Signing time:             Tue 31 Dec 2024 15:53:13 +0000
ROA not before:           Tue 31 Dec 2024 15:53:13 +0000
ROA not after:            Mon 02 Mar 2026 00:00:00 +0000
asID:                     38443
IP address blocks:        2405:9800:9c00::/40 maxlen: 40
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A911BD54/3E281C98004911E5B4B64F63C4F9AE02/vPr40z8YqNNgICnrzt4eNq8gcVw.crl
                          rsync://rpki.apnic.net/member_repository/A911BD54/3E281C98004911E5B4B64F63C4F9AE02/vPr40z8YqNNgICnrzt4eNq8gcVw.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vPr40z8YqNNgICnrzt4eNq8gcVw.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 21 Feb 2025 05:15:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 10629 (0x2985)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A911BD54
        Validity
            Not Before: Dec 31 15:53:13 2024 GMT
            Not After : Mar  2 00:00:00 2026 GMT
        Subject: CN=67741369-13ac
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:da:bc:1b:36:1a:eb:df:a1:03:ef:b3:64:71:
                    dd:cd:cc:0b:a7:a5:6a:b5:85:e4:67:73:29:43:20:
                    2e:05:a4:a6:82:70:f9:8e:06:d1:54:16:7a:9e:e5:
                    85:cf:c2:71:0f:04:c0:c8:e2:35:b4:06:21:d9:79:
                    a2:7a:20:d4:5e:ab:1e:fa:ff:3d:87:54:3c:0e:1c:
                    94:b1:52:bd:ba:23:67:a9:88:cb:a0:f0:82:42:b3:
                    25:dd:94:66:f2:b3:46:d4:5d:e1:2f:17:52:32:e3:
                    ee:1a:e7:62:c3:f0:c5:06:0b:7e:62:a1:42:c7:35:
                    bc:07:89:48:27:da:95:2e:ac:35:4e:e6:5a:d0:f5:
                    64:db:0c:ec:d4:1c:0e:28:90:98:0a:19:c9:6a:81:
                    65:d8:e1:d6:a2:64:87:3c:f9:75:6f:0d:47:df:da:
                    fc:26:7a:da:e5:24:41:3e:a5:6e:ca:2e:03:c8:37:
                    00:c2:3d:ec:ef:95:68:23:4f:69:3f:cf:76:cd:06:
                    11:af:83:c0:ca:a2:80:fd:fc:fa:df:47:cf:eb:f5:
                    14:11:f6:f9:f6:f2:9e:6e:bf:e3:ca:f5:ca:f8:18:
                    d8:10:2a:b0:91:e2:07:70:30:db:03:90:09:af:f4:
                    06:78:da:ee:95:55:6c:90:c7:fd:72:14:2e:5a:cf:
                    79:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2A:EF:8F:B4:A7:A3:3C:D3:F1:6E:0C:22:5B:DE:09:58:3A:C2:3C:BB
            X509v3 Authority Key Identifier:
                keyid:BC:FA:F8:D3:3F:18:A8:D3:60:20:29:EB:CE:DE:1E:36:AF:20:71:5C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A911BD54/3E281C98004911E5B4B64F63C4F9AE02/vPr40z8YqNNgICnrzt4eNq8gcVw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vPr40z8YqNNgICnrzt4eNq8gcVw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911BD54/3E281C98004911E5B4B64F63C4F9AE02/44A19870784F11E8A84DBE2EC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  2405:9800:9c00::/40

    Signature Algorithm: sha256WithRSAEncryption
         ac:56:38:85:ad:7b:d4:cc:3d:cf:00:2e:47:76:53:9e:91:c3:
         c2:61:34:66:73:f8:7d:a9:b4:3a:c2:6a:00:0d:97:09:b3:be:
         30:97:c4:d4:f6:3d:8d:81:eb:46:ac:30:66:dd:0e:04:ef:60:
         60:da:08:06:c1:01:c7:26:07:88:76:03:e8:22:c5:a1:86:09:
         54:ae:c2:44:2e:2c:53:5f:0a:ff:3d:d8:c5:85:0a:5f:ad:db:
         0a:f3:89:b3:57:4a:3f:ea:58:06:8e:3a:74:07:0c:bb:de:39:
         96:3e:5e:1f:7e:58:6e:f4:e2:be:ba:78:9e:9b:91:8f:7d:24:
         44:42:cb:b4:06:57:39:50:f0:c0:19:02:85:ec:ba:59:29:07:
         26:f4:27:61:1f:27:af:6a:e6:93:ff:8d:c4:c4:c2:31:40:38:
         76:30:c3:ba:96:8b:71:be:3b:e2:83:9b:81:2b:50:6e:13:f2:
         5f:cc:73:aa:41:82:9e:e9:dd:e8:7e:bc:af:09:7c:3e:71:10:
         85:11:18:39:91:72:78:cb:7e:77:0f:f3:8c:b1:0f:a0:c1:41:
         91:06:be:12:d9:07:9d:1b:d5:e0:d0:43:3f:dd:86:83:65:67:
         29:49:4e:e0:19:54:15:4b:85:df:3c:82:9a:9b:1e:b7:eb:71:
         24:18:2a:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 20:24:54 2025 by rpki-client