Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A911C28D/BDAB67F63A8011E5AE390155C4F9AE02/360880DAACC311EAB7256C55C4F9AE02.roa
File:                     360880DAACC311EAB7256C55C4F9AE02.roa (raw, json)
Hash identifier:          4jnK7laCVS60yhzcSVuYYNZQUIQpO+TJ9kufeaAY1cw=
Subject key identifier:   82:95:62:E8:39:6A:CD:AA:9D:CC:D8:EA:E9:58:AC:98:66:DF:EF:CB
Certificate issuer:       /CN=A911C28D/serialNumber=99DFB6BF7950E6B40195A59024F4B750863D3D93
Certificate serial:       2630
Authority key identifier: 99:DF:B6:BF:79:50:E6:B4:01:95:A5:90:24:F4:B7:50:86:3D:3D:93
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/md-2v3lQ5rQBlaWQJPS3UIY9PZM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A911C28D/BDAB67F63A8011E5AE390155C4F9AE02/360880DAACC311EAB7256C55C4F9AE02.roa
Signing time:             Sun 06 Aug 2023 16:12:58 +0000
ROA not before:           Sun 06 Aug 2023 16:12:58 +0000
ROA not after:            Mon 30 Sep 2024 00:00:00 +0000
asID:                     139073
IP address blocks:        2402:e380:100::/40 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A911C28D/BDAB67F63A8011E5AE390155C4F9AE02/md-2v3lQ5rQBlaWQJPS3UIY9PZM.crl
                          rsync://rpki.apnic.net/member_repository/A911C28D/BDAB67F63A8011E5AE390155C4F9AE02/md-2v3lQ5rQBlaWQJPS3UIY9PZM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/md-2v3lQ5rQBlaWQJPS3UIY9PZM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 07 May 2024 16:09:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 9776 (0x2630)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A911C28D/serialNumber=99DFB6BF7950E6B40195A59024F4B750863D3D93
        Validity
            Not Before: Aug  6 16:12:58 2023 GMT
            Not After : Sep 30 00:00:00 2024 GMT
        Subject: CN=64cfc68a-1e37
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:16:fd:72:d5:8e:62:d5:45:5d:29:9f:87:d1:
                    5d:87:44:e8:a9:4f:16:c5:c3:d6:8f:52:c5:f8:6e:
                    8f:84:7f:4f:61:f4:5b:21:5a:ad:cd:07:9f:10:55:
                    70:ca:5e:e2:00:70:ab:9a:90:ab:69:39:1b:84:50:
                    03:bc:89:b6:d6:98:c1:55:4a:da:e4:88:f1:f3:82:
                    bf:06:a4:f7:0a:e1:4a:9f:e1:e0:ca:2f:14:07:a8:
                    d3:46:de:77:04:a2:92:39:18:55:c6:c3:17:90:39:
                    71:8b:a2:07:96:3e:cc:be:d7:38:00:ea:69:bb:2b:
                    a2:76:d2:e9:bd:a3:40:00:17:96:da:f9:c7:83:6f:
                    dd:72:50:bd:d7:35:1d:53:b8:98:b0:d9:13:1f:98:
                    25:c9:f1:bf:4c:28:17:a2:c2:c6:ad:2b:82:e0:ac:
                    6c:06:67:b4:e6:31:5a:02:78:63:b4:d6:83:8c:27:
                    5f:25:68:8a:fc:e8:a9:bb:e9:e6:22:d8:46:f4:a6:
                    3d:4d:a7:8a:bb:82:ab:93:51:1f:82:94:de:d9:5f:
                    59:11:6b:ae:b0:d8:57:7d:c2:a2:f1:ca:4f:10:a9:
                    16:ad:43:59:96:2e:34:22:74:6f:28:5b:dc:e2:4a:
                    2e:54:5e:b7:9b:ad:bb:4d:6c:d7:78:83:40:71:85:
                    fb:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                82:95:62:E8:39:6A:CD:AA:9D:CC:D8:EA:E9:58:AC:98:66:DF:EF:CB
            X509v3 Authority Key Identifier:
                keyid:99:DF:B6:BF:79:50:E6:B4:01:95:A5:90:24:F4:B7:50:86:3D:3D:93

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A911C28D/BDAB67F63A8011E5AE390155C4F9AE02/md-2v3lQ5rQBlaWQJPS3UIY9PZM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/md-2v3lQ5rQBlaWQJPS3UIY9PZM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911C28D/BDAB67F63A8011E5AE390155C4F9AE02/360880DAACC311EAB7256C55C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  2402:e380:100::/40

    Signature Algorithm: sha256WithRSAEncryption
         6f:ff:64:7a:69:8f:4d:4f:a7:00:57:3e:5a:3f:40:4c:85:13:
         8a:96:a2:bb:f9:53:b1:a4:f8:df:bc:07:0c:b9:1e:ce:68:ac:
         d2:69:31:82:ee:34:54:af:f3:24:75:a1:96:be:d9:89:df:33:
         b3:55:c2:8b:cf:ec:2c:5a:86:eb:1c:0c:cc:39:b5:15:e7:7d:
         75:3a:a6:c9:e5:17:7b:42:97:8b:cc:0d:64:15:79:c4:eb:b8:
         34:ad:c6:12:1c:a2:f7:ce:4e:4c:d9:1c:c2:d8:a9:f2:e0:94:
         00:43:9f:4b:d5:29:e8:7e:19:a2:14:ef:e0:8e:da:b2:74:c0:
         ef:17:fa:47:90:95:5c:e4:00:e0:73:5b:65:d2:47:3f:98:3b:
         54:4b:83:b3:63:b4:76:ca:50:cc:e3:16:18:c6:34:29:78:1e:
         36:fb:3d:09:65:6b:29:a2:76:38:94:fc:1e:2a:9c:69:03:98:
         4b:bf:50:93:ee:92:9b:00:b8:ff:e6:f0:09:61:53:4c:cf:3a:
         42:07:ec:18:d2:1e:ed:d2:8c:40:cd:2c:0e:b0:da:38:72:50:
         7e:b3:93:71:96:03:a2:c8:66:02:c8:bf:67:27:d4:e2:a2:fe:
         a9:2f:58:a0:42:17:06:49:a6:ba:04:d2:aa:93:26:1e:92:83:
         48:48:dd:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 30 19:20:46 2024 by rpki-client on console-ams.rpki-client.org