Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A911C28D/BDAB67F63A8011E5AE390155C4F9AE02/DC28826E41C511E8BEC06D36C4F9AE02.roa
File:                     DC28826E41C511E8BEC06D36C4F9AE02.roa (raw, json)
Hash identifier:          Peetxa/7+SFc9eDt8lOuZGUJqI2PmCoVxoHecxTgBsI=
Subject key identifier:   9D:15:1E:6C:3A:E2:66:9C:3E:32:07:DE:02:81:92:27:7C:47:72:A0
Certificate issuer:       /CN=A911C28D/serialNumber=99DFB6BF7950E6B40195A59024F4B750863D3D93
Certificate serial:       2744
Authority key identifier: 99:DF:B6:BF:79:50:E6:B4:01:95:A5:90:24:F4:B7:50:86:3D:3D:93
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/md-2v3lQ5rQBlaWQJPS3UIY9PZM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A911C28D/BDAB67F63A8011E5AE390155C4F9AE02/DC28826E41C511E8BEC06D36C4F9AE02.roa
Signing time:             Tue 30 Jul 2024 16:03:44 +0000
ROA not before:           Tue 30 Jul 2024 16:03:44 +0000
ROA not after:            Tue 30 Sep 2025 00:00:00 +0000
asID:                     132352
IP address blocks:        2402:9e80:22::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A911C28D/BDAB67F63A8011E5AE390155C4F9AE02/md-2v3lQ5rQBlaWQJPS3UIY9PZM.crl
                          rsync://rpki.apnic.net/member_repository/A911C28D/BDAB67F63A8011E5AE390155C4F9AE02/md-2v3lQ5rQBlaWQJPS3UIY9PZM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/md-2v3lQ5rQBlaWQJPS3UIY9PZM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 29 Nov 2024 15:22:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 10052 (0x2744)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A911C28D/serialNumber=99DFB6BF7950E6B40195A59024F4B750863D3D93
        Validity
            Not Before: Jul 30 16:03:44 2024 GMT
            Not After : Sep 30 00:00:00 2025 GMT
        Subject: CN=66a90ee0-bf25
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:82:f2:1a:0c:4d:5c:fb:b5:e6:27:fd:7e:9d:
                    07:9c:41:fe:7e:4d:0f:d5:79:78:a5:84:81:df:8e:
                    b2:11:3d:4d:bd:53:5c:2f:f4:72:5a:83:5a:a5:e3:
                    c6:aa:f9:64:8c:0e:e0:d9:6a:a0:d8:f2:32:43:ec:
                    9a:7f:73:2a:d1:b6:85:ba:83:9b:ed:28:cd:39:a4:
                    6c:71:97:38:dd:07:07:8d:e4:0c:89:13:54:8b:7f:
                    cc:6c:29:7b:2a:67:af:82:ff:c8:d4:79:8a:fb:49:
                    a4:81:bb:10:ca:fa:a6:85:25:77:52:82:4d:e8:20:
                    f4:d0:51:cf:a1:2f:7e:7c:d7:7d:7d:92:b6:b3:e1:
                    92:bf:38:73:d9:06:f9:0a:91:4c:79:b9:99:82:a8:
                    49:3e:1f:09:76:23:9f:63:4f:89:95:a2:b4:fe:7f:
                    ad:fc:e5:b1:4c:a3:33:c3:4d:b7:7c:3e:38:da:90:
                    e0:de:9e:7f:8f:4b:44:26:1c:f9:14:7f:9c:64:e8:
                    39:6b:3b:a8:6c:ac:77:07:0e:13:7b:ee:48:9a:f6:
                    25:36:d1:7d:bf:23:c3:d1:e8:02:43:35:fc:9d:48:
                    6c:ed:e7:ff:a3:34:85:9d:ae:eb:8e:fd:1e:4b:3f:
                    ba:01:4b:cd:dd:45:c4:ae:a2:bc:f7:45:ab:9d:a1:
                    f0:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9D:15:1E:6C:3A:E2:66:9C:3E:32:07:DE:02:81:92:27:7C:47:72:A0
            X509v3 Authority Key Identifier:
                keyid:99:DF:B6:BF:79:50:E6:B4:01:95:A5:90:24:F4:B7:50:86:3D:3D:93

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A911C28D/BDAB67F63A8011E5AE390155C4F9AE02/md-2v3lQ5rQBlaWQJPS3UIY9PZM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/md-2v3lQ5rQBlaWQJPS3UIY9PZM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911C28D/BDAB67F63A8011E5AE390155C4F9AE02/DC28826E41C511E8BEC06D36C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  2402:9e80:22::/48

    Signature Algorithm: sha256WithRSAEncryption
         14:ae:3d:e2:dc:9c:41:b8:b2:4e:3e:c6:e4:cc:cd:46:c5:81:
         24:57:33:8a:b7:d9:35:b9:45:e5:60:71:6a:d3:b0:45:b1:fa:
         52:11:78:51:84:ee:2a:69:f1:70:57:c7:aa:4d:cd:88:37:5e:
         1e:9b:d8:1b:07:c9:21:88:19:40:13:5a:77:c2:6a:45:be:f3:
         53:7c:2f:8c:96:9d:f6:39:da:6d:1d:26:88:25:08:a5:a6:67:
         72:a7:90:34:96:44:9a:0d:b0:41:b5:4d:bb:94:e5:07:8e:20:
         11:3f:35:62:88:a2:44:d3:e7:6a:d5:45:b0:cd:ee:37:2f:f6:
         74:6b:e9:3f:26:c6:8f:3b:32:5e:d1:3b:e1:15:d8:9a:b3:bf:
         43:ad:67:3b:d6:c0:1b:41:91:25:a7:1f:6a:60:a6:de:b8:06:
         bf:08:9f:2e:74:08:f8:69:be:72:93:55:25:05:5b:01:3e:9c:
         f9:4c:5a:25:86:37:fb:0d:85:2b:0b:81:a7:93:1c:e3:48:20:
         37:4f:f8:03:0f:e4:a6:c1:a8:04:d3:3d:35:58:3e:a7:ef:50:
         0d:d1:ae:ef:23:74:d7:0c:20:55:5c:a7:ea:38:47:3f:7c:6e:
         32:65:91:d8:78:ce:e8:4b:84:b9:e9:33:c0:ea:6f:76:58:bb:
         dd:e9:dc:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 16:49:14 2024 by rpki-client on console-ams.rpki-client.org