Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A911C28D/BDAB67F63A8011E5AE390155C4F9AE02/E03999C441C511E8BEC06D36C4F9AE02.roa
File:                     E03999C441C511E8BEC06D36C4F9AE02.roa (raw, json)
Hash identifier:          aAJLZjPUJuACCTvpSy1kxXadKYkNDTXzx0xj86mXBww=
Subject key identifier:   13:B9:8B:DA:67:84:52:A0:A6:76:37:6A:5F:52:46:F7:F3:2C:41:E1
Certificate issuer:       /CN=A911C28D/serialNumber=99DFB6BF7950E6B40195A59024F4B750863D3D93
Certificate serial:       261B
Authority key identifier: 99:DF:B6:BF:79:50:E6:B4:01:95:A5:90:24:F4:B7:50:86:3D:3D:93
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/md-2v3lQ5rQBlaWQJPS3UIY9PZM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A911C28D/BDAB67F63A8011E5AE390155C4F9AE02/E03999C441C511E8BEC06D36C4F9AE02.roa
Signing time:             Sun 06 Aug 2023 16:12:39 +0000
ROA not before:           Sun 06 Aug 2023 16:12:39 +0000
ROA not after:            Mon 30 Sep 2024 00:00:00 +0000
asID:                     135605
IP address blocks:        2402:9e80:19::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A911C28D/BDAB67F63A8011E5AE390155C4F9AE02/md-2v3lQ5rQBlaWQJPS3UIY9PZM.crl
                          rsync://rpki.apnic.net/member_repository/A911C28D/BDAB67F63A8011E5AE390155C4F9AE02/md-2v3lQ5rQBlaWQJPS3UIY9PZM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/md-2v3lQ5rQBlaWQJPS3UIY9PZM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 07 May 2024 16:09:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 9755 (0x261b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A911C28D/serialNumber=99DFB6BF7950E6B40195A59024F4B750863D3D93
        Validity
            Not Before: Aug  6 16:12:39 2023 GMT
            Not After : Sep 30 00:00:00 2024 GMT
        Subject: CN=64cfc677-e27e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:18:3b:62:60:2d:2b:b3:be:63:b5:a3:2f:09:
                    dd:42:ac:df:8d:66:9e:de:e6:8b:6c:f0:60:96:f4:
                    c4:0d:a0:84:ea:cc:ff:1e:e2:dd:4b:e1:e8:76:80:
                    d3:a7:b8:f0:48:b4:62:9a:b0:b1:3f:7b:f8:f4:10:
                    06:e9:5b:f0:42:12:f5:b5:59:ed:11:1b:72:6b:c9:
                    e6:87:d7:87:55:b1:2d:73:9d:c0:70:dd:fe:db:bb:
                    85:26:67:2b:bf:1d:40:85:d0:ba:e8:d6:d1:4e:9e:
                    6c:95:89:37:13:46:46:44:97:8c:e6:cb:e8:c4:55:
                    9a:f8:0b:1d:64:75:d7:ea:26:92:06:ad:1c:90:ad:
                    ac:f7:4c:7c:ed:29:8e:91:43:6a:18:c1:c2:68:78:
                    fd:d4:a6:18:40:5d:71:bc:38:b3:35:24:78:a9:df:
                    3a:df:33:48:36:52:8d:3b:32:4c:ec:d9:5b:da:03:
                    94:37:04:12:b3:c1:aa:81:5a:67:57:b3:0c:3c:24:
                    02:49:79:8c:83:82:76:b4:50:b2:2c:14:05:c4:34:
                    1c:4e:34:81:c1:e9:2e:20:0d:28:07:27:aa:58:70:
                    ff:52:10:5a:64:95:17:ca:a9:cc:5f:dd:2b:e0:8f:
                    b4:19:8f:6d:07:9d:da:d8:5b:15:0f:d3:62:37:c3:
                    24:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                13:B9:8B:DA:67:84:52:A0:A6:76:37:6A:5F:52:46:F7:F3:2C:41:E1
            X509v3 Authority Key Identifier:
                keyid:99:DF:B6:BF:79:50:E6:B4:01:95:A5:90:24:F4:B7:50:86:3D:3D:93

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A911C28D/BDAB67F63A8011E5AE390155C4F9AE02/md-2v3lQ5rQBlaWQJPS3UIY9PZM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/md-2v3lQ5rQBlaWQJPS3UIY9PZM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911C28D/BDAB67F63A8011E5AE390155C4F9AE02/E03999C441C511E8BEC06D36C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  2402:9e80:19::/48

    Signature Algorithm: sha256WithRSAEncryption
         03:f5:ad:38:60:d6:d4:0f:9d:ec:a0:03:75:05:64:50:a2:16:
         4a:78:c8:3e:8c:7f:af:82:e4:85:5a:9f:be:35:07:5a:7e:97:
         5a:aa:a1:59:55:0e:5f:05:3f:d2:4d:49:ef:00:92:0f:01:a1:
         78:57:5a:31:2f:5b:c7:6e:9a:09:5f:a1:ba:39:36:c4:9a:8b:
         d6:83:ef:87:15:78:12:a9:a3:a4:6b:23:00:3b:29:ba:90:25:
         b7:3a:c1:84:f2:be:1f:4a:e3:5c:ad:7d:c9:e2:bb:c5:a1:f2:
         71:65:d1:b8:6a:c0:c9:19:21:f8:f8:d0:10:20:8a:a0:a3:af:
         a5:49:8c:68:ad:c2:db:39:87:48:bf:e9:8a:5a:5e:ae:ff:cd:
         92:93:e3:15:bb:b7:a8:ca:50:c3:3d:1f:50:b1:c0:4e:10:11:
         8d:9a:4a:8d:48:91:e5:51:cb:2a:43:93:d7:bd:db:e1:67:3c:
         59:af:57:f3:a4:b6:37:cd:ad:40:0c:0f:10:05:d4:5e:a6:cf:
         2f:12:6f:f5:79:86:4b:12:7b:9d:5c:d6:5c:79:ed:3c:a0:e4:
         2a:8e:ee:3e:f5:99:e7:ca:af:7d:c5:11:c7:fb:c8:5d:d4:62:
         6d:8b:ea:6c:d5:e2:32:c7:04:db:8a:0c:f2:fd:2b:b3:02:15:
         65:c0:7f:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 30 18:56:56 2024 by rpki-client on console-fra.rpki-client.org