Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A911C28D/BDAB67F63A8011E5AE390155C4F9AE02/EB263BE4DBF011EBA6E54586C4F9AE02.roa
File:                     EB263BE4DBF011EBA6E54586C4F9AE02.roa (raw, json)
Hash identifier:          yJ+SVca3dIEVbLRKvfj50dgEnl+0SPNec7gFGt3BMLw=
Subject key identifier:   9C:04:99:E9:BB:9E:86:D6:81:BC:D2:00:4D:40:B3:D5:4C:CD:82:D2
Certificate issuer:       /CN=A911C28D/serialNumber=99DFB6BF7950E6B40195A59024F4B750863D3D93
Certificate serial:       2763
Authority key identifier: 99:DF:B6:BF:79:50:E6:B4:01:95:A5:90:24:F4:B7:50:86:3D:3D:93
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/md-2v3lQ5rQBlaWQJPS3UIY9PZM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A911C28D/BDAB67F63A8011E5AE390155C4F9AE02/EB263BE4DBF011EBA6E54586C4F9AE02.roa
Signing time:             Tue 30 Jul 2024 16:04:13 +0000
ROA not before:           Tue 30 Jul 2024 16:04:12 +0000
ROA not after:            Tue 30 Sep 2025 00:00:00 +0000
asID:                     142561
IP address blocks:        2402:9e80:200::/44 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A911C28D/BDAB67F63A8011E5AE390155C4F9AE02/md-2v3lQ5rQBlaWQJPS3UIY9PZM.crl
                          rsync://rpki.apnic.net/member_repository/A911C28D/BDAB67F63A8011E5AE390155C4F9AE02/md-2v3lQ5rQBlaWQJPS3UIY9PZM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/md-2v3lQ5rQBlaWQJPS3UIY9PZM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 27 Nov 2024 15:46:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 10083 (0x2763)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A911C28D/serialNumber=99DFB6BF7950E6B40195A59024F4B750863D3D93
        Validity
            Not Before: Jul 30 16:04:12 2024 GMT
            Not After : Sep 30 00:00:00 2025 GMT
        Subject: CN=66a90efc-ff05
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:eb:b4:46:50:b6:f3:3c:86:e8:de:fa:72:07:69:
                    25:d3:b4:5b:6a:35:9c:42:24:2d:a1:8c:6a:4a:14:
                    72:dc:e4:91:a8:06:53:80:08:63:84:3a:89:a4:10:
                    9a:52:aa:91:a9:e2:27:f8:fa:7a:9c:ce:e0:f7:5f:
                    66:34:71:08:23:9f:24:bd:17:6d:02:ef:34:de:31:
                    be:fd:92:00:80:3a:0d:e5:32:6a:53:04:e9:1d:c3:
                    c8:2e:ca:84:52:f3:9a:0a:8b:37:bc:46:2f:74:58:
                    96:5d:5a:34:f7:62:07:4e:3b:f9:e0:0d:33:4a:39:
                    2c:85:dc:41:58:1d:3a:0b:d5:ae:61:ba:56:1c:78:
                    45:b3:6a:46:94:f8:a2:aa:8a:4f:72:b5:4e:29:40:
                    fe:f5:88:03:e3:07:af:92:a7:9f:30:01:b8:c1:7e:
                    94:7f:2d:f7:e4:7e:d7:2e:67:3d:91:d4:cf:83:60:
                    ac:74:5a:7c:9b:06:d3:53:00:f7:50:e1:1c:df:f3:
                    d1:a3:b6:7b:eb:6c:05:f0:2b:05:f9:90:3e:b6:d3:
                    18:ad:49:be:33:9f:9a:d9:7d:a8:86:e2:2a:40:8f:
                    ff:c1:00:9d:95:bf:32:dc:6f:9e:f7:c6:96:43:d4:
                    11:46:12:7d:27:d5:b8:a0:cc:b3:e1:77:09:27:c7:
                    0e:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9C:04:99:E9:BB:9E:86:D6:81:BC:D2:00:4D:40:B3:D5:4C:CD:82:D2
            X509v3 Authority Key Identifier:
                keyid:99:DF:B6:BF:79:50:E6:B4:01:95:A5:90:24:F4:B7:50:86:3D:3D:93

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A911C28D/BDAB67F63A8011E5AE390155C4F9AE02/md-2v3lQ5rQBlaWQJPS3UIY9PZM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/md-2v3lQ5rQBlaWQJPS3UIY9PZM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911C28D/BDAB67F63A8011E5AE390155C4F9AE02/EB263BE4DBF011EBA6E54586C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  2402:9e80:200::/44

    Signature Algorithm: sha256WithRSAEncryption
         40:f6:52:c6:d3:bd:2b:f3:4f:12:07:81:8f:4d:df:35:45:6f:
         d2:e8:9d:c8:cd:fa:b2:d6:ef:50:96:4b:48:34:ff:9a:24:8d:
         42:bf:c5:3d:6e:18:78:d0:b8:ea:1f:ee:3f:72:95:2b:f1:4e:
         8a:c2:7c:c9:5c:9d:8b:40:8b:1b:58:c8:6d:df:a7:d3:18:76:
         5c:14:4d:af:37:85:c1:cf:1f:0d:c8:a2:db:08:87:2c:55:a9:
         f7:6f:3f:ff:9b:69:5d:ab:06:73:97:cb:54:59:11:40:c8:e2:
         4e:5b:fb:f2:6f:d7:ab:4d:98:99:9e:7d:13:d5:1a:4d:b0:0e:
         a6:fd:8f:74:52:a3:6f:33:da:a1:c9:01:1f:b4:a5:71:a5:33:
         95:d1:bd:19:12:7b:96:d7:f9:65:fa:aa:68:67:92:76:81:3c:
         e5:ee:22:c1:5e:74:f3:7a:b3:f7:f1:b9:c3:2e:f5:e0:3d:08:
         f6:69:46:f8:d8:ef:44:a9:2d:41:e6:52:1d:d7:8b:19:36:72:
         67:59:5f:e0:e9:3d:ee:71:09:9f:29:1e:7d:f7:0d:46:72:3a:
         2d:15:a7:9a:0f:da:ad:03:59:1c:53:17:28:ae:09:c5:14:cf:
         71:53:b6:cc:9e:2d:1a:df:43:d5:81:a8:be:90:b4:14:4e:95:
         70:e6:43:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 20 19:05:11 2024 by rpki-client on console-ams.rpki-client.org