Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A911C28D/BDAB67F63A8011E5AE390155C4F9AE02/E1944C7441C511E8BEC06D36C4F9AE02.roa
File:                     E1944C7441C511E8BEC06D36C4F9AE02.roa (raw, json)
Hash identifier:          Qh7RN7YeyLrBGg7zxhK2Oe7wCm6h247/lDwDvm2kiNU=
Subject key identifier:   AD:9E:CE:C5:16:38:22:2B:E2:82:8C:22:A2:B6:F6:E4:72:43:FB:E0
Certificate issuer:       /CN=A911C28D/serialNumber=99DFB6BF7950E6B40195A59024F4B750863D3D93
Certificate serial:       261E
Authority key identifier: 99:DF:B6:BF:79:50:E6:B4:01:95:A5:90:24:F4:B7:50:86:3D:3D:93
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/md-2v3lQ5rQBlaWQJPS3UIY9PZM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A911C28D/BDAB67F63A8011E5AE390155C4F9AE02/E1944C7441C511E8BEC06D36C4F9AE02.roa
Signing time:             Sun 06 Aug 2023 16:12:42 +0000
ROA not before:           Sun 06 Aug 2023 16:12:42 +0000
ROA not after:            Mon 30 Sep 2024 00:00:00 +0000
asID:                     136559
IP address blocks:        2402:9e80:16::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A911C28D/BDAB67F63A8011E5AE390155C4F9AE02/md-2v3lQ5rQBlaWQJPS3UIY9PZM.crl
                          rsync://rpki.apnic.net/member_repository/A911C28D/BDAB67F63A8011E5AE390155C4F9AE02/md-2v3lQ5rQBlaWQJPS3UIY9PZM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/md-2v3lQ5rQBlaWQJPS3UIY9PZM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 07 May 2024 16:09:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 9758 (0x261e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A911C28D/serialNumber=99DFB6BF7950E6B40195A59024F4B750863D3D93
        Validity
            Not Before: Aug  6 16:12:42 2023 GMT
            Not After : Sep 30 00:00:00 2024 GMT
        Subject: CN=64cfc67a-b464
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:3e:4a:a3:55:17:dd:c3:8d:18:41:d1:93:50:
                    41:3a:2d:0d:34:b5:35:f9:3d:b4:7a:ae:6d:64:ad:
                    c6:e9:b6:a8:75:bc:60:af:09:b6:5f:e5:ad:64:b9:
                    4d:8b:44:ba:67:50:fc:4c:15:12:5b:4a:cc:68:79:
                    9e:80:48:ef:ee:42:2e:8a:73:27:b4:1c:ad:b7:11:
                    d8:e8:35:57:c6:4c:64:0c:77:68:05:58:62:be:92:
                    c8:d4:ec:2a:54:85:1c:e2:00:20:98:35:9a:ea:9d:
                    e5:d3:0d:1c:18:39:ac:39:13:72:51:81:77:87:ba:
                    7f:f2:9d:8b:98:b1:6b:48:73:bb:03:62:da:ca:f3:
                    69:6f:a8:7f:40:aa:2f:bf:b5:ef:43:fb:30:44:bf:
                    96:e4:1e:07:1a:bb:05:7f:bd:f1:03:df:27:37:27:
                    44:15:55:89:9d:d1:e1:d4:06:a3:86:e3:4c:6c:32:
                    84:d6:25:80:d4:13:ec:48:89:0a:c2:ee:dc:76:d6:
                    28:5d:6a:9f:7b:a5:53:c5:71:a8:15:e5:9f:c8:1b:
                    b6:ff:5a:de:7c:a6:58:86:5f:bd:e1:54:50:48:0b:
                    89:a4:6f:60:cc:87:cd:19:01:18:c7:c2:d9:1c:86:
                    a5:3f:d5:77:16:26:e3:a3:1c:53:4a:02:b3:44:de:
                    d4:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AD:9E:CE:C5:16:38:22:2B:E2:82:8C:22:A2:B6:F6:E4:72:43:FB:E0
            X509v3 Authority Key Identifier:
                keyid:99:DF:B6:BF:79:50:E6:B4:01:95:A5:90:24:F4:B7:50:86:3D:3D:93

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A911C28D/BDAB67F63A8011E5AE390155C4F9AE02/md-2v3lQ5rQBlaWQJPS3UIY9PZM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/md-2v3lQ5rQBlaWQJPS3UIY9PZM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911C28D/BDAB67F63A8011E5AE390155C4F9AE02/E1944C7441C511E8BEC06D36C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  2402:9e80:16::/48

    Signature Algorithm: sha256WithRSAEncryption
         63:fa:2b:6d:b7:33:14:d0:d3:09:3d:71:e8:9f:9b:0d:ab:3f:
         df:66:d6:57:4c:5e:51:89:67:8c:c3:94:eb:76:58:51:9b:9c:
         f7:d6:c1:78:35:14:4f:59:69:42:95:da:17:8a:83:87:eb:8a:
         2e:fa:ad:c8:fc:93:e9:94:93:b2:24:c3:7e:65:f9:63:00:bb:
         9c:ed:55:0d:c4:a2:ea:15:bf:f6:6a:0b:f5:43:68:b8:28:4b:
         84:dd:3d:e6:07:f5:be:c9:71:83:b5:90:7b:a2:bb:84:24:47:
         bb:1e:5f:22:97:54:f8:26:3d:23:02:42:35:48:58:80:96:4a:
         b0:50:b4:6b:ee:0b:34:19:a0:19:b2:23:23:f2:7e:d5:d5:a5:
         31:14:8b:8b:4e:be:3f:ba:05:ff:3c:81:07:50:f1:e7:dd:3f:
         04:2f:58:e5:55:f1:83:6a:71:41:5b:69:13:98:f8:28:c7:f6:
         05:4d:7c:27:41:1a:f8:32:09:4e:e2:cf:51:8a:5c:bc:6c:cf:
         a2:1b:63:28:ba:6c:8d:f6:af:c9:c0:81:c6:f4:93:95:29:dc:
         e6:cb:d9:b8:d4:1d:ab:67:43:8b:1e:4b:3e:8d:8e:b0:a2:04:
         d6:c3:22:35:cf:89:bd:96:24:67:5b:b5:04:d5:64:35:7d:b2:
         73:24:67:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 30 19:20:46 2024 by rpki-client on console-ams.rpki-client.org