Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A911BD54/3E281C98004911E5B4B64F63C4F9AE02/F420BF1EDF9811EDB93A9960C4F9AE02.roa
File:                     F420BF1EDF9811EDB93A9960C4F9AE02.roa (raw, json)
Hash identifier:          EFRC/cBAaIvFJ+qdrX8/PaRgvOzTST9PXie6or/SFbQ=
Subject key identifier:   79:4C:DD:A0:17:E1:D9:45:28:22:F1:F6:5E:B1:49:D9:49:21:62:E7
Certificate issuer:       /CN=A911BD54/serialNumber=BCFAF8D33F18A8D3602029EBCEDE1E36AF20715C
Certificate serial:       281B
Authority key identifier: BC:FA:F8:D3:3F:18:A8:D3:60:20:29:EB:CE:DE:1E:36:AF:20:71:5C
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vPr40z8YqNNgICnrzt4eNq8gcVw.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A911BD54/3E281C98004911E5B4B64F63C4F9AE02/F420BF1EDF9811EDB93A9960C4F9AE02.roa
Signing time:             Thu 28 Dec 2023 16:02:59 +0000
ROA not before:           Thu 28 Dec 2023 16:02:59 +0000
ROA not after:            Sun 02 Mar 2025 00:00:00 +0000
asID:                     138915
IP address blocks:        2405:9800:c92d::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A911BD54/3E281C98004911E5B4B64F63C4F9AE02/vPr40z8YqNNgICnrzt4eNq8gcVw.crl
                          rsync://rpki.apnic.net/member_repository/A911BD54/3E281C98004911E5B4B64F63C4F9AE02/vPr40z8YqNNgICnrzt4eNq8gcVw.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vPr40z8YqNNgICnrzt4eNq8gcVw.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 29 May 2024 15:54:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 10267 (0x281b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A911BD54/serialNumber=BCFAF8D33F18A8D3602029EBCEDE1E36AF20715C
        Validity
            Not Before: Dec 28 16:02:59 2023 GMT
            Not After : Mar  2 00:00:00 2025 GMT
        Subject: CN=658d9c33-e4fd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:30:bb:2e:d2:24:ba:95:a6:e9:f9:60:71:3f:
                    d2:02:33:a4:3c:4f:75:3b:14:10:af:e6:7b:64:b3:
                    3d:bd:7c:6c:69:db:bc:03:94:cc:6f:95:c9:d2:33:
                    98:52:93:7b:05:03:79:7c:83:11:a4:19:59:3a:17:
                    1e:31:bd:5c:53:e0:3d:20:69:ea:6c:b4:30:9d:46:
                    3e:74:94:7d:95:21:4e:c9:93:73:36:a6:17:9b:c1:
                    6f:c8:0a:bb:0a:96:4d:59:b2:fb:07:0b:4b:ba:7a:
                    df:00:f3:d2:a0:d0:52:79:88:02:c3:fd:45:db:ab:
                    6d:c4:44:b7:92:c4:97:0e:c8:26:80:ff:8a:1b:ff:
                    99:1d:27:49:7d:6b:b7:1c:3c:a0:19:22:3f:69:6d:
                    92:77:1d:2d:8e:23:b3:cd:17:8d:f9:30:57:d5:6e:
                    02:f2:c0:11:24:f5:db:0a:41:d5:1a:cf:e9:2a:2d:
                    18:3f:44:e9:34:ae:ba:0e:ff:fe:c8:07:c7:51:49:
                    f0:82:29:2c:c0:48:e1:7d:7b:b0:c6:5f:42:4e:57:
                    49:50:98:94:08:d4:17:39:6b:0e:de:c9:fe:67:3e:
                    28:de:6a:15:43:b1:cd:18:3f:34:e0:d7:69:68:f4:
                    53:4a:72:d6:b1:06:db:a2:bf:cc:29:f4:14:aa:f0:
                    68:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                79:4C:DD:A0:17:E1:D9:45:28:22:F1:F6:5E:B1:49:D9:49:21:62:E7
            X509v3 Authority Key Identifier:
                keyid:BC:FA:F8:D3:3F:18:A8:D3:60:20:29:EB:CE:DE:1E:36:AF:20:71:5C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A911BD54/3E281C98004911E5B4B64F63C4F9AE02/vPr40z8YqNNgICnrzt4eNq8gcVw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vPr40z8YqNNgICnrzt4eNq8gcVw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911BD54/3E281C98004911E5B4B64F63C4F9AE02/F420BF1EDF9811EDB93A9960C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  2405:9800:c92d::/48

    Signature Algorithm: sha256WithRSAEncryption
         10:f3:11:9f:20:4b:5c:c7:26:6c:81:df:3a:c3:5c:12:10:13:
         fc:88:a8:d6:89:44:fb:22:c6:8d:13:07:ef:95:c4:21:9e:57:
         fd:8d:ac:7f:b9:8a:f3:ea:23:33:fb:7f:dd:72:7a:20:f7:f6:
         46:3b:c5:af:c6:04:ef:1e:3e:83:1b:4f:2b:6b:02:de:db:d8:
         fc:78:96:8a:5a:61:35:48:5a:ad:ca:ae:50:e0:54:a9:51:5c:
         4f:a8:04:a9:69:a4:6e:57:4e:c8:90:d9:f9:ad:03:4c:61:b7:
         ca:3a:82:0f:f5:f7:3f:bc:33:8f:41:fb:e5:58:14:7a:2e:a8:
         89:77:a6:55:21:e6:99:49:04:f9:dd:70:aa:84:7c:a4:07:12:
         5e:3a:1c:d9:94:08:b1:51:e6:f2:b7:1e:c6:e8:4c:b9:6b:ea:
         d9:53:9b:d0:19:88:1b:77:4b:b9:da:7f:bf:ae:bd:e9:23:b8:
         de:35:b0:75:e4:f5:77:81:94:24:c1:57:c4:22:cc:82:a6:7b:
         ba:ba:5f:47:72:74:e2:ce:b2:e0:09:ed:ad:96:41:ca:7a:e6:
         0d:be:29:f7:23:b5:0c:03:20:db:28:82:77:7c:96:73:fa:dd:
         89:33:3d:c9:20:07:ed:ec:9c:02:3d:86:74:4a:bb:95:a7:d3:
         94:7f:c5:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 22 16:49:03 2024 by rpki-client on console-fra.rpki-client.org