Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A911BD54/3E281C98004911E5B4B64F63C4F9AE02/B42D2E32421511ECB7A6506EC4F9AE02.roa
File:                     B42D2E32421511ECB7A6506EC4F9AE02.roa (raw, json)
Hash identifier:          JctQt+DyfJWxiA5O/pgMOan91r6pZbXaU0V4wwgFbEk=
Subject key identifier:   80:27:CB:B5:D6:64:EC:75:CA:CB:F4:0E:8D:2F:B5:84:63:8F:7D:DC
Certificate issuer:       /CN=A911BD54/serialNumber=BCFAF8D33F18A8D3602029EBCEDE1E36AF20715C
Certificate serial:       2822
Authority key identifier: BC:FA:F8:D3:3F:18:A8:D3:60:20:29:EB:CE:DE:1E:36:AF:20:71:5C
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vPr40z8YqNNgICnrzt4eNq8gcVw.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A911BD54/3E281C98004911E5B4B64F63C4F9AE02/B42D2E32421511ECB7A6506EC4F9AE02.roa
Signing time:             Thu 28 Dec 2023 16:03:06 +0000
ROA not before:           Thu 28 Dec 2023 16:03:06 +0000
ROA not after:            Sun 02 Mar 2025 00:00:00 +0000
asID:                     148984
IP address blocks:        49.231.43.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A911BD54/3E281C98004911E5B4B64F63C4F9AE02/vPr40z8YqNNgICnrzt4eNq8gcVw.crl
                          rsync://rpki.apnic.net/member_repository/A911BD54/3E281C98004911E5B4B64F63C4F9AE02/vPr40z8YqNNgICnrzt4eNq8gcVw.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vPr40z8YqNNgICnrzt4eNq8gcVw.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 07 Jun 2024 16:10:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 10274 (0x2822)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A911BD54/serialNumber=BCFAF8D33F18A8D3602029EBCEDE1E36AF20715C
        Validity
            Not Before: Dec 28 16:03:06 2023 GMT
            Not After : Mar  2 00:00:00 2025 GMT
        Subject: CN=658d9c3a-7107
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:2c:98:d7:52:95:02:1d:76:91:04:36:8b:2d:
                    c7:7f:65:34:f6:08:db:fd:a2:fd:01:7d:fd:a5:5a:
                    91:f8:92:36:22:a5:84:0c:c0:3a:a8:6d:39:35:9a:
                    24:15:ab:e0:31:fe:b0:e9:f3:18:78:71:df:dd:ee:
                    e6:08:33:e1:5d:ff:f5:d4:05:d4:44:62:c2:25:ce:
                    d4:fe:e6:73:e1:6a:82:d0:38:05:e2:fb:a9:37:e6:
                    85:c4:e5:35:e7:29:98:2e:ec:ae:ad:e5:04:44:0c:
                    b5:0a:d8:58:5f:24:76:fa:a8:34:83:3d:0e:54:11:
                    b6:bd:f4:c2:3b:05:fe:f9:60:f4:97:b3:e1:ed:61:
                    62:ce:40:f0:f8:9d:25:37:f2:16:22:52:ff:ff:3a:
                    79:74:e1:7b:d9:7b:90:01:bf:26:eb:8d:99:2e:03:
                    b8:0a:c8:59:0b:53:42:fc:15:1b:38:00:43:fc:0b:
                    5f:60:b3:80:b1:2b:d4:ab:7c:ba:8a:c4:bf:86:f8:
                    2a:a5:08:b5:06:b3:21:8e:62:5d:7a:bd:6b:5f:35:
                    de:4c:ba:d8:fe:de:80:7e:7f:06:48:00:9b:fd:63:
                    8a:3c:55:ed:58:3d:8f:19:eb:c8:f2:82:70:5a:7a:
                    a1:f8:e4:db:6d:5b:08:ad:e6:fc:3d:6a:31:53:3b:
                    98:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                80:27:CB:B5:D6:64:EC:75:CA:CB:F4:0E:8D:2F:B5:84:63:8F:7D:DC
            X509v3 Authority Key Identifier:
                keyid:BC:FA:F8:D3:3F:18:A8:D3:60:20:29:EB:CE:DE:1E:36:AF:20:71:5C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A911BD54/3E281C98004911E5B4B64F63C4F9AE02/vPr40z8YqNNgICnrzt4eNq8gcVw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vPr40z8YqNNgICnrzt4eNq8gcVw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911BD54/3E281C98004911E5B4B64F63C4F9AE02/B42D2E32421511ECB7A6506EC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  49.231.43.0/24

    Signature Algorithm: sha256WithRSAEncryption
         60:45:d4:2c:39:6c:4d:21:3b:df:9d:dc:90:6d:e4:58:33:b7:
         85:53:58:c1:59:f9:a0:1a:84:13:f9:f2:5d:a5:f3:20:05:ca:
         00:e5:58:b2:2c:e1:b4:85:32:d3:eb:76:5b:8c:6f:99:6b:f5:
         3a:ff:73:ac:21:f4:41:ad:5e:56:ad:b9:df:5b:04:67:c5:23:
         97:d4:39:22:ba:94:42:fb:0f:6f:c3:e4:32:86:89:ff:48:24:
         0b:0d:68:3b:12:89:61:c4:e3:cf:9d:6c:81:7a:ac:34:a0:13:
         cd:d5:dd:a2:b4:17:98:76:51:72:bb:af:48:1d:49:f8:f8:d2:
         35:e5:64:5d:45:61:20:dd:52:5b:06:67:23:c5:7e:3e:58:c1:
         ec:1b:4d:7c:e9:21:87:fc:02:ed:e5:2c:9a:82:3b:6a:ba:cc:
         8e:7b:79:94:ce:ab:a5:f4:20:54:aa:86:24:08:bf:5d:78:9d:
         92:95:6e:1a:3e:31:58:b0:ec:4d:00:7d:3a:a0:64:28:bc:6c:
         cc:f2:3e:29:50:01:7d:76:31:e3:3c:30:03:fc:9b:39:9d:8e:
         c3:2c:07:5e:c3:6b:6b:b4:89:59:e4:85:4c:78:60:5f:6a:a2:
         26:42:4f:89:d7:53:95:04:d9:5e:ef:03:5d:b9:4a:dc:22:f9:
         3c:93:2c:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 31 20:33:57 2024 by rpki-client on console-ams.rpki-client.org