Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A911C28D/BDAB67F63A8011E5AE390155C4F9AE02/2F36F25EFEC911E88E78993AC4F9AE02.roa
File:                     2F36F25EFEC911E88E78993AC4F9AE02.roa (raw, json)
Hash identifier:          RMTyF1uVj6VY8nxNhmDfSAr1MFyTvQHhmDo/BRp8UzQ=
Subject key identifier:   10:2F:EF:81:2E:0F:2E:92:7F:49:CB:EC:37:01:8A:51:34:AE:61:94
Certificate issuer:       /CN=A911C28D/serialNumber=99DFB6BF7950E6B40195A59024F4B750863D3D93
Certificate serial:       2625
Authority key identifier: 99:DF:B6:BF:79:50:E6:B4:01:95:A5:90:24:F4:B7:50:86:3D:3D:93
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/md-2v3lQ5rQBlaWQJPS3UIY9PZM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A911C28D/BDAB67F63A8011E5AE390155C4F9AE02/2F36F25EFEC911E88E78993AC4F9AE02.roa
Signing time:             Sun 06 Aug 2023 16:12:48 +0000
ROA not before:           Sun 06 Aug 2023 16:12:48 +0000
ROA not after:            Mon 30 Sep 2024 00:00:00 +0000
asID:                     138358
IP address blocks:        2402:9e80:28::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A911C28D/BDAB67F63A8011E5AE390155C4F9AE02/md-2v3lQ5rQBlaWQJPS3UIY9PZM.crl
                          rsync://rpki.apnic.net/member_repository/A911C28D/BDAB67F63A8011E5AE390155C4F9AE02/md-2v3lQ5rQBlaWQJPS3UIY9PZM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/md-2v3lQ5rQBlaWQJPS3UIY9PZM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 07 May 2024 16:09:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 9765 (0x2625)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A911C28D/serialNumber=99DFB6BF7950E6B40195A59024F4B750863D3D93
        Validity
            Not Before: Aug  6 16:12:48 2023 GMT
            Not After : Sep 30 00:00:00 2024 GMT
        Subject: CN=64cfc680-5de1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:59:fa:08:5a:53:67:96:a2:3d:de:62:05:e1:
                    b5:57:0d:b7:86:b7:21:a0:ce:51:a9:17:ed:be:06:
                    f4:85:89:7d:c2:80:59:cc:00:de:5b:6b:77:9d:b6:
                    a3:5e:31:75:76:2c:e6:de:f6:06:5c:2c:26:3d:01:
                    37:49:4a:0a:1b:e1:ee:dc:38:b3:51:08:c9:38:7a:
                    0f:c7:0b:ab:e3:15:33:0f:12:af:08:07:59:76:13:
                    0e:7e:cc:fc:44:41:1d:51:f1:e0:50:e1:64:d7:e6:
                    bb:fe:9a:48:b5:b1:94:1e:a7:33:12:c0:94:df:d7:
                    ef:6d:1b:70:a5:76:48:b2:9a:99:66:2f:f9:82:33:
                    89:dd:b1:ec:e9:2f:d3:54:73:83:62:fd:eb:1c:68:
                    06:1c:cb:46:38:48:ca:55:83:c2:60:3f:f3:b9:2e:
                    d7:4e:ca:ef:77:35:f9:ca:34:d1:44:3b:01:64:54:
                    ea:9c:58:4c:b4:4b:31:5c:65:9c:1f:08:14:74:98:
                    cd:81:46:6f:10:4b:1d:f2:b3:16:51:cd:7d:43:99:
                    ba:8d:4a:f2:d0:fa:70:0b:65:36:75:74:f5:76:fc:
                    7e:20:f3:f3:79:6f:4c:42:94:21:e9:63:f0:fc:ed:
                    0f:48:5d:55:ea:47:a7:36:a4:41:2f:67:7b:28:f8:
                    aa:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                10:2F:EF:81:2E:0F:2E:92:7F:49:CB:EC:37:01:8A:51:34:AE:61:94
            X509v3 Authority Key Identifier:
                keyid:99:DF:B6:BF:79:50:E6:B4:01:95:A5:90:24:F4:B7:50:86:3D:3D:93

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A911C28D/BDAB67F63A8011E5AE390155C4F9AE02/md-2v3lQ5rQBlaWQJPS3UIY9PZM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/md-2v3lQ5rQBlaWQJPS3UIY9PZM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911C28D/BDAB67F63A8011E5AE390155C4F9AE02/2F36F25EFEC911E88E78993AC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  2402:9e80:28::/48

    Signature Algorithm: sha256WithRSAEncryption
         b3:8a:d4:7b:4f:bf:b7:e5:40:ad:05:29:26:27:ae:e5:e9:a7:
         02:69:e1:fe:62:90:dc:a4:34:b7:ca:eb:c3:81:2c:6b:cf:9c:
         02:47:b3:ce:3f:66:60:3d:47:58:f9:48:3c:d3:05:9c:e1:56:
         fe:52:07:9a:a6:9d:cd:df:f4:1d:91:e0:ec:aa:06:48:70:86:
         68:f7:d4:c3:24:ec:ac:3d:da:40:89:0c:8f:48:4e:14:4b:59:
         93:88:7b:33:23:8b:2a:40:d2:97:70:e8:f6:6f:82:80:33:4f:
         52:a1:71:7e:c3:0d:76:ce:d6:fd:b8:71:e9:2f:e2:4a:7b:66:
         3c:45:a8:ca:99:f1:a6:91:9d:4d:48:b7:66:d3:f2:e6:1d:97:
         43:84:bd:d4:d1:1b:42:5b:65:e3:38:14:c0:73:5d:f5:be:b5:
         3e:4f:e3:5d:6e:fa:96:7e:a7:f7:41:98:ad:3a:08:fa:36:bb:
         b2:6d:70:b7:37:80:be:1e:89:fe:ff:fa:39:30:f0:84:fc:2f:
         f2:b2:bc:89:4c:90:e9:b0:c1:4c:e5:95:6f:d9:82:dd:e9:15:
         a5:ac:be:f0:32:e1:ae:95:7a:4a:19:0a:c6:c3:81:f5:91:46:
         97:39:d9:73:a0:b2:21:6e:2e:fe:9f:ab:43:20:a9:b3:2d:e4:
         46:d3:5f:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 30 18:56:55 2024 by rpki-client on console-fra.rpki-client.org