Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A911C28D/BDAB67F63A8011E5AE390155C4F9AE02/E2D385AA41C511E8BEC06D36C4F9AE02.roa
File:                     E2D385AA41C511E8BEC06D36C4F9AE02.roa (raw, json)
Hash identifier:          DyBmAdnALuAG+BC7Mn1Sv8SDHm5yM2ahcyQ87t6NGNk=
Subject key identifier:   FF:0A:91:66:7D:AB:CC:4A:A8:97:EC:C1:0F:B4:4F:54:6B:7B:63:57
Certificate issuer:       /CN=A911C28D/serialNumber=99DFB6BF7950E6B40195A59024F4B750863D3D93
Certificate serial:       2620
Authority key identifier: 99:DF:B6:BF:79:50:E6:B4:01:95:A5:90:24:F4:B7:50:86:3D:3D:93
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/md-2v3lQ5rQBlaWQJPS3UIY9PZM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A911C28D/BDAB67F63A8011E5AE390155C4F9AE02/E2D385AA41C511E8BEC06D36C4F9AE02.roa
Signing time:             Sun 06 Aug 2023 16:12:44 +0000
ROA not before:           Sun 06 Aug 2023 16:12:44 +0000
ROA not after:            Mon 30 Sep 2024 00:00:00 +0000
asID:                     137033
IP address blocks:        2402:9e80:15::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A911C28D/BDAB67F63A8011E5AE390155C4F9AE02/md-2v3lQ5rQBlaWQJPS3UIY9PZM.crl
                          rsync://rpki.apnic.net/member_repository/A911C28D/BDAB67F63A8011E5AE390155C4F9AE02/md-2v3lQ5rQBlaWQJPS3UIY9PZM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/md-2v3lQ5rQBlaWQJPS3UIY9PZM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 07 May 2024 16:09:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 9760 (0x2620)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A911C28D/serialNumber=99DFB6BF7950E6B40195A59024F4B750863D3D93
        Validity
            Not Before: Aug  6 16:12:44 2023 GMT
            Not After : Sep 30 00:00:00 2024 GMT
        Subject: CN=64cfc67b-431c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f2:95:2a:89:c9:da:08:61:36:70:c6:7c:dc:0a:
                    4c:80:9d:cb:89:fa:8c:ce:71:37:f7:3d:5b:ee:09:
                    c8:8a:6d:81:65:9a:0c:6b:b9:56:ac:b4:12:f1:14:
                    ae:21:a9:69:1c:1f:50:70:d2:70:b3:77:f9:2f:f9:
                    2a:ce:4c:41:85:56:05:72:a7:26:5f:64:5b:3c:63:
                    61:22:bc:a6:e1:5f:29:7f:65:a4:d7:e6:e9:01:a6:
                    ce:2a:d0:a3:4a:52:6f:e8:43:d1:4c:c8:60:bd:4c:
                    94:db:70:d7:c8:67:55:ec:92:0c:da:68:12:da:7a:
                    c6:ae:ad:29:da:15:47:4b:89:f2:67:9f:5d:10:5e:
                    90:a6:00:32:12:44:b3:ff:2c:87:ef:02:37:c5:84:
                    da:5a:e4:dd:61:bb:03:9c:e0:5b:4b:cd:44:92:de:
                    da:d5:bc:61:ca:e9:a1:3c:fc:1f:13:9a:6f:6f:c9:
                    4f:e8:2f:45:69:e2:7c:f6:24:35:f2:f0:32:e7:35:
                    fe:44:de:93:7d:f4:98:a2:69:70:99:c9:d7:1d:de:
                    21:60:8e:0f:6c:c1:1f:b2:cf:b2:4d:87:8e:55:fd:
                    76:4d:86:93:da:e3:c5:92:5d:4f:a9:9a:4b:e1:2b:
                    a0:4c:47:be:60:b1:13:2a:2b:70:28:58:bc:f3:ed:
                    db:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FF:0A:91:66:7D:AB:CC:4A:A8:97:EC:C1:0F:B4:4F:54:6B:7B:63:57
            X509v3 Authority Key Identifier:
                keyid:99:DF:B6:BF:79:50:E6:B4:01:95:A5:90:24:F4:B7:50:86:3D:3D:93

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A911C28D/BDAB67F63A8011E5AE390155C4F9AE02/md-2v3lQ5rQBlaWQJPS3UIY9PZM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/md-2v3lQ5rQBlaWQJPS3UIY9PZM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911C28D/BDAB67F63A8011E5AE390155C4F9AE02/E2D385AA41C511E8BEC06D36C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  2402:9e80:15::/48

    Signature Algorithm: sha256WithRSAEncryption
         d7:c6:96:d2:8c:8c:d1:af:6f:52:54:d1:30:ba:ce:ac:ce:0c:
         5b:3e:fd:e0:f7:3e:ec:cf:10:20:b7:d8:f3:37:cb:d7:80:cf:
         40:ac:23:56:74:a6:b3:3e:09:ff:e0:67:c6:df:e4:2f:c8:e7:
         df:66:3b:6c:f7:7e:18:11:a9:3d:75:4d:bc:28:d3:0d:85:96:
         11:b9:b2:f6:95:2e:46:1a:67:79:0e:72:cb:3d:65:0d:30:70:
         6c:f6:d6:60:3a:ed:57:49:06:f2:f0:1e:d9:5c:a9:29:0a:99:
         43:0d:da:04:b4:58:89:29:3a:59:8d:06:f7:25:05:6f:6a:43:
         02:a9:a7:80:9b:2a:7d:4e:e2:ba:8b:79:11:02:1e:86:c6:6f:
         7e:14:70:0e:69:ea:a1:27:5b:c4:3b:a1:a1:93:41:0e:fa:b3:
         79:b1:4b:ed:f7:cd:5c:ca:21:5a:d6:8d:2c:2b:3c:55:4a:6d:
         ec:1b:05:07:9e:fc:1b:91:3e:b3:bb:88:57:16:2e:46:4e:1f:
         57:f3:db:78:46:23:36:2a:92:72:ca:7f:6e:9e:b9:7e:6f:d8:
         a0:8a:9e:3f:ef:d6:0a:b0:03:91:21:ef:cc:d3:bd:0b:e5:4f:
         e2:be:4c:2e:b9:4a:b5:e3:af:45:fa:de:3e:bc:70:06:3c:20:
         77:ee:0c:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 30 18:56:56 2024 by rpki-client on console-fra.rpki-client.org