Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A911CA78/BE8846D235D811EAA730EC46C4F9AE02/6688CA76535F11EE9BC85F83C4F9AE02.roa
File:                     6688CA76535F11EE9BC85F83C4F9AE02.roa (raw, json)
Hash identifier:          XrqUPOjYhMntw2Ab+sJDBN2RmyGE/6hHM7tc2yB+haI=
Subject key identifier:   02:C2:14:28:20:FF:A2:06:E1:3C:EF:22:89:15:0F:F3:9C:8B:29:A7
Certificate issuer:       /CN=A911CA78/serialNumber=40562C143A29CB19C70FFC9B99B60BBECD1D73B6
Certificate serial:       0AEA
Authority key identifier: 40:56:2C:14:3A:29:CB:19:C7:0F:FC:9B:99:B6:0B:BE:CD:1D:73:B6
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QFYsFDopyxnHD_ybmbYLvs0dc7Y.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A911CA78/BE8846D235D811EAA730EC46C4F9AE02/6688CA76535F11EE9BC85F83C4F9AE02.roa
Signing time:             Mon 04 Dec 2023 20:08:07 +0000
ROA not before:           Mon 04 Dec 2023 20:08:07 +0000
ROA not after:            Sun 02 Mar 2025 00:00:00 +0000
asID:                     4202202111
IP address blocks:        112.137.160.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A911CA78/BE8846D235D811EAA730EC46C4F9AE02/QFYsFDopyxnHD_ybmbYLvs0dc7Y.crl
                          rsync://rpki.apnic.net/member_repository/A911CA78/BE8846D235D811EAA730EC46C4F9AE02/QFYsFDopyxnHD_ybmbYLvs0dc7Y.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QFYsFDopyxnHD_ybmbYLvs0dc7Y.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 07 Jun 2024 20:52:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2794 (0xaea)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A911CA78/serialNumber=40562C143A29CB19C70FFC9B99B60BBECD1D73B6
        Validity
            Not Before: Dec  4 20:08:07 2023 GMT
            Not After : Mar  2 00:00:00 2025 GMT
        Subject: CN=656e31a7-837e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:b4:fd:46:58:2a:f3:8c:5d:3b:ec:27:69:c6:
                    29:50:7e:6f:41:47:fb:82:19:00:3c:69:16:f9:d3:
                    83:a0:18:a8:f4:a4:91:74:fc:69:0c:32:de:40:59:
                    4c:09:bc:71:5c:1c:0d:e8:17:98:d2:59:ec:64:0a:
                    f0:6d:c4:49:fb:ea:ef:0f:2a:0e:05:93:32:0b:e2:
                    84:bf:5a:2a:6d:7a:c4:cf:f4:f5:ae:d9:9d:d5:dd:
                    88:9b:f4:ce:d0:52:02:b0:95:64:87:8e:e0:14:70:
                    0d:c0:43:88:66:a7:b1:e7:58:11:c8:86:c1:3f:f2:
                    b6:ab:a3:9d:e4:59:1a:14:b3:23:20:87:01:1d:ef:
                    84:a9:13:c7:78:9e:96:3f:dd:68:42:aa:4f:d3:fa:
                    53:ca:ed:b4:aa:a2:cf:3f:0b:e9:43:92:a8:6c:1c:
                    ff:8c:78:99:c5:7a:2c:97:a0:ee:1b:55:07:34:5f:
                    f7:be:f7:e2:f8:57:0d:8a:8b:2a:bf:fe:f8:d7:78:
                    8e:bc:e2:31:09:77:b0:08:78:bb:d5:1f:4a:a9:d3:
                    d7:d6:c2:7e:e8:92:94:14:e0:a7:20:d0:57:33:b2:
                    96:70:38:b1:51:a7:ae:33:04:e2:f2:78:36:d6:17:
                    41:45:f0:22:8b:49:a2:95:f3:60:33:8e:e5:c9:fd:
                    d4:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                02:C2:14:28:20:FF:A2:06:E1:3C:EF:22:89:15:0F:F3:9C:8B:29:A7
            X509v3 Authority Key Identifier:
                keyid:40:56:2C:14:3A:29:CB:19:C7:0F:FC:9B:99:B6:0B:BE:CD:1D:73:B6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A911CA78/BE8846D235D811EAA730EC46C4F9AE02/QFYsFDopyxnHD_ybmbYLvs0dc7Y.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QFYsFDopyxnHD_ybmbYLvs0dc7Y.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911CA78/BE8846D235D811EAA730EC46C4F9AE02/6688CA76535F11EE9BC85F83C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  112.137.160.0/24

    Signature Algorithm: sha256WithRSAEncryption
         17:73:18:21:75:05:54:e4:49:36:3c:bd:50:a7:af:4b:6b:08:
         54:e9:fa:48:3b:62:8d:d0:85:f9:12:45:13:48:cd:a3:c6:ed:
         9d:b5:a7:e9:4b:37:d8:ef:cc:83:83:b8:ac:21:26:c8:8b:26:
         4d:98:8f:06:8b:cd:56:47:bc:61:66:3f:78:ee:99:82:ed:02:
         ff:ab:36:38:66:74:58:45:4f:de:87:ef:b6:e7:ef:5b:c4:2f:
         b5:16:be:d2:82:9c:96:b6:82:ee:a3:78:fd:a6:26:16:61:2f:
         79:0a:3d:e5:4a:90:09:bf:fc:70:9f:6f:b6:e5:9d:7a:2f:28:
         65:91:8b:ee:5a:a2:eb:7b:0f:b1:3e:dd:a1:7c:7a:7f:a1:7e:
         99:6c:ab:60:cb:9a:6a:d8:77:2c:e6:1f:9d:92:36:66:c1:5e:
         09:32:eb:5a:8d:c3:49:ce:8e:15:db:56:4d:10:70:f1:05:62:
         94:e9:ff:41:24:01:96:66:b7:5d:cf:ef:84:c4:c4:12:28:a6:
         06:63:e7:a1:cd:12:86:ed:8e:65:01:dc:d6:9e:e4:53:65:b9:
         61:a2:be:39:e4:a2:84:2b:16:9f:3a:89:2f:9a:ef:c0:07:49:
         b9:ba:db:c2:06:aa:0f:41:26:a3:3f:42:20:69:a1:bc:bb:7d:
         fc:ec:f3:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 31 22:13:02 2024 by rpki-client on console-fra.rpki-client.org