Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A911BD54/3E281C98004911E5B4B64F63C4F9AE02/648391F4DDD311E8B6169878C4F9AE02.roa
File:                     648391F4DDD311E8B6169878C4F9AE02.roa (raw, json)
Hash identifier:          69eiOwpEQe1ORyenMGjqqqJuCiiBeeln17y/RKIKDpA=
Subject key identifier:   AB:CE:39:8C:18:C3:4C:D6:E9:99:23:53:CF:D9:14:30:C2:C3:FB:81
Certificate issuer:       /CN=A911BD54/serialNumber=BCFAF8D33F18A8D3602029EBCEDE1E36AF20715C
Certificate serial:       283C
Authority key identifier: BC:FA:F8:D3:3F:18:A8:D3:60:20:29:EB:CE:DE:1E:36:AF:20:71:5C
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vPr40z8YqNNgICnrzt4eNq8gcVw.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A911BD54/3E281C98004911E5B4B64F63C4F9AE02/648391F4DDD311E8B6169878C4F9AE02.roa
Signing time:             Thu 28 Dec 2023 16:03:29 +0000
ROA not before:           Thu 28 Dec 2023 16:03:29 +0000
ROA not after:            Sun 02 Mar 2025 00:00:00 +0000
asID:                     55488
IP address blocks:        49.231.27.0/24 maxlen: 24
                          2405:9800:c910::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A911BD54/3E281C98004911E5B4B64F63C4F9AE02/vPr40z8YqNNgICnrzt4eNq8gcVw.crl
                          rsync://rpki.apnic.net/member_repository/A911BD54/3E281C98004911E5B4B64F63C4F9AE02/vPr40z8YqNNgICnrzt4eNq8gcVw.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vPr40z8YqNNgICnrzt4eNq8gcVw.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 27 Nov 2024 15:43:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 10300 (0x283c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A911BD54/serialNumber=BCFAF8D33F18A8D3602029EBCEDE1E36AF20715C
        Validity
            Not Before: Dec 28 16:03:29 2023 GMT
            Not After : Mar  2 00:00:00 2025 GMT
        Subject: CN=658d9c51-7b60
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:75:4f:bc:4a:39:b0:e6:e7:d1:4a:f2:65:12:
                    c0:92:10:1f:f7:08:2f:32:c4:1c:f3:de:3a:e8:85:
                    d4:9a:19:13:43:37:3c:71:31:ac:06:e9:ad:fa:10:
                    7f:da:81:b1:de:c8:62:d4:0f:fa:53:83:9e:54:08:
                    12:07:73:2f:f5:10:18:fd:44:46:9b:ae:7b:4a:fb:
                    04:4d:93:34:a8:3c:c9:62:ba:1a:bd:9b:3a:fb:f9:
                    22:69:92:62:8c:bd:a7:89:b0:6f:3a:d0:2e:b9:85:
                    dc:9d:fc:19:21:eb:3e:60:5b:5b:63:0a:0d:a4:b5:
                    6e:4b:bd:2e:c6:37:e0:a4:a3:74:7a:89:cf:e6:21:
                    83:1b:85:9b:f1:6c:f2:c2:97:0c:75:a7:21:68:26:
                    74:29:74:c0:5f:3f:af:93:4c:0a:44:dd:89:62:41:
                    1d:f4:08:9d:3a:db:63:f2:ef:37:56:1e:7d:3d:f3:
                    80:d5:10:e2:04:34:a5:79:62:15:72:a8:b9:0b:ea:
                    50:87:3e:af:8e:da:ed:8e:cb:60:ef:a8:d0:a3:6d:
                    40:b8:69:f0:bc:0f:60:4e:98:53:78:ec:73:fc:a3:
                    81:9b:32:ac:03:d0:54:7a:ec:67:d7:94:a5:1f:64:
                    e7:7a:f1:03:fe:c0:eb:18:19:6a:c8:0d:3e:9e:f4:
                    bb:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AB:CE:39:8C:18:C3:4C:D6:E9:99:23:53:CF:D9:14:30:C2:C3:FB:81
            X509v3 Authority Key Identifier:
                keyid:BC:FA:F8:D3:3F:18:A8:D3:60:20:29:EB:CE:DE:1E:36:AF:20:71:5C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A911BD54/3E281C98004911E5B4B64F63C4F9AE02/vPr40z8YqNNgICnrzt4eNq8gcVw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vPr40z8YqNNgICnrzt4eNq8gcVw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911BD54/3E281C98004911E5B4B64F63C4F9AE02/648391F4DDD311E8B6169878C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  49.231.27.0/24
                IPv6:
                  2405:9800:c910::/48

    Signature Algorithm: sha256WithRSAEncryption
         3c:f2:cc:bd:e4:3e:4e:91:e5:01:01:79:86:f0:20:b9:db:d3:
         39:25:64:d1:d8:f8:62:7a:6a:d4:ff:10:93:c1:ad:0a:4e:33:
         1f:bc:32:7c:86:42:b8:89:44:d7:1c:71:1c:a9:04:d5:e2:b1:
         98:31:62:be:e8:4a:48:b5:ef:0e:a6:ff:be:e3:f2:2e:0e:7d:
         b1:8b:6b:90:cb:46:76:17:41:46:f4:56:e8:c3:f0:69:e0:50:
         98:6e:35:2b:35:5b:12:de:91:29:7d:74:5a:85:42:1a:c4:a2:
         a1:8a:90:36:1a:ae:58:38:a8:7f:6d:63:11:74:bc:2d:82:c1:
         72:54:05:0f:17:05:4c:ec:bd:c4:b1:39:a8:3b:be:e6:14:4a:
         ef:a3:5b:4b:45:f0:6a:f5:da:c3:87:5f:34:44:da:be:8d:60:
         8e:8c:1c:72:b6:c7:dc:45:b6:4e:10:9b:a7:b9:03:3e:c2:fa:
         5b:57:8b:1d:f1:01:8f:65:22:b9:73:83:ba:ac:43:9f:8d:24:
         2f:75:e8:a9:dd:ee:d1:82:19:47:dc:b6:0d:6e:87:20:60:55:
         eb:69:da:5a:69:5a:e0:5c:53:39:c2:73:46:15:72:e2:0d:5a:
         d3:81:22:a6:74:f5:c0:4a:59:17:73:07:b6:a9:b2:4c:cd:51:
         9b:be:09:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 20 19:05:11 2024 by rpki-client on console-ams.rpki-client.org