Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A911C28D/BDAB67F63A8011E5AE390155C4F9AE02/9DE98A76D9B511EBA4FC5B1AC4F9AE02.roa
File:                     9DE98A76D9B511EBA4FC5B1AC4F9AE02.roa (download)
Hash identifier:          GVBpw7aJUub44ZbJtEvSUbkIwE6PmkrwRxp/s21AmLw=
Subject key identifier:   0C:7F:FE:B4:77:2D:52:24:F9:97:45:35:4F:F4:D0:FE:55:B8:45:C9
Certificate issuer:       /CN=A911C28D/serialNumber=99DFB6BF7950E6B40195A59024F4B750863D3D93
Certificate serial:       24CE
Authority key identifier: 99:DF:B6:BF:79:50:E6:B4:01:95:A5:90:24:F4:B7:50:86:3D:3D:93
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/md-2v3lQ5rQBlaWQJPS3UIY9PZM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A911C28D/BDAB67F63A8011E5AE390155C4F9AE02/9DE98A76D9B511EBA4FC5B1AC4F9AE02.roa
ROA valid until:          Sep 30 00:00:00 2023 GMT
asID:                     20473
IP address blocks:
    1: 2402:9e80:10::/48 maxlen: 48

Validation: OK

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 9422 (0x24ce)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A911C28D/serialNumber=99DFB6BF7950E6B40195A59024F4B750863D3D93
        Validity
            Not Before: Aug  2 04:23:14 2022 GMT
            Not After : Sep 30 00:00:00 2023 GMT
        Subject: CN=62e8a6b2-01b6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:7c:32:01:65:26:7a:9e:29:44:87:98:01:71:
                    87:5a:92:b9:84:5e:8b:a3:80:d8:f6:b8:28:10:f8:
                    d0:c3:3b:2e:9f:b5:80:d4:5c:56:c0:60:a0:ef:f8:
                    59:5b:0d:2a:9c:ab:8e:e9:9d:d7:47:7d:8f:58:e4:
                    e6:27:12:fa:09:b4:7b:53:55:09:b3:67:61:4a:28:
                    7e:fd:c8:99:07:66:18:45:d2:ff:3f:5f:39:13:73:
                    ef:da:3e:a3:04:07:23:c2:be:89:1a:c1:ca:c1:dd:
                    56:72:1c:02:c8:ab:64:f0:7d:eb:18:2f:8f:ad:2b:
                    c4:85:a8:d9:b8:85:0e:21:fc:f4:b8:2f:df:26:84:
                    25:ab:84:d1:48:b2:0c:4a:a5:70:1b:d9:58:6f:ad:
                    a0:00:03:e6:be:69:ad:58:91:61:39:37:3c:a8:63:
                    0f:50:24:1f:39:df:fc:8c:74:03:32:30:0a:24:b2:
                    d7:d3:c2:aa:90:ff:79:0a:ee:d2:aa:63:4c:55:2a:
                    28:41:fc:d7:52:67:e9:8f:ad:29:cd:c4:2d:cd:7e:
                    1f:fd:5a:d2:ac:75:69:4a:28:1f:43:9b:9c:41:03:
                    ec:24:ec:62:d1:b5:62:9c:65:b2:0a:98:35:db:8a:
                    4a:c0:3a:ea:bb:18:db:b0:fa:36:aa:0b:ed:2c:52:
                    29:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier: 
                0C:7F:FE:B4:77:2D:52:24:F9:97:45:35:4F:F4:D0:FE:55:B8:45:C9
            X509v3 Authority Key Identifier: 
                keyid:99:DF:B6:BF:79:50:E6:B4:01:95:A5:90:24:F4:B7:50:86:3D:3D:93

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points: 

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A911C28D/BDAB67F63A8011E5AE390155C4F9AE02/md-2v3lQ5rQBlaWQJPS3UIY9PZM.crl

            Authority Information Access: 
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/md-2v3lQ5rQBlaWQJPS3UIY9PZM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access: 
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911C28D/BDAB67F63A8011E5AE390155C4F9AE02/9DE98A76D9B511EBA4FC5B1AC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  2402:9e80:10::/48

    Signature Algorithm: sha256WithRSAEncryption
         02:ac:51:b9:a8:44:d6:80:4c:6a:6b:67:b7:a5:8f:ac:db:5e:
         84:5a:5a:6d:1b:0c:25:c6:49:42:08:b6:1e:f0:3f:07:2f:17:
         df:1f:c6:57:5f:82:8a:a1:ff:72:fb:c3:56:be:ba:3d:dd:1d:
         f7:24:ca:2d:24:eb:a5:d9:33:15:40:9b:d7:aa:5f:35:88:5e:
         24:9e:eb:bd:f9:f7:2b:cf:2a:6e:35:e8:8d:10:9c:c3:e5:a8:
         36:bf:4f:e9:d2:ad:25:f5:0b:72:10:8f:38:6c:c7:53:d2:4b:
         39:a3:ae:7a:b0:c0:6a:a6:2a:30:43:8f:be:b7:6b:02:56:c5:
         30:df:f3:1d:2d:e8:dc:25:90:9f:ed:e4:73:9f:b3:f0:6f:9f:
         7c:2f:22:a4:e2:0c:a6:7a:c2:92:a1:ae:75:e3:23:b1:c8:59:
         7d:e3:71:28:73:be:c0:4c:b8:0a:68:fd:77:ee:8c:6e:72:07:
         c5:28:04:d5:13:c6:77:79:53:84:cd:eb:37:c7:f2:bb:07:b8:
         4a:04:1a:ee:0b:39:d6:82:d9:d5:57:cb:d5:02:8f:c9:60:39:
         36:db:ef:10:84:f6:a6:ba:97:55:94:55:6b:c7:d0:ae:ed:7e:
         ca:de:65:a1:35:2d:39:05:d0:62:c0:71:31:69:9a:dc:39:70:
         b0:46:2a:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Dec 9 01:29:06 2022 by rpki-client.