Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A911DA8C/546EF3BA4B9911EEBB360B55C4F9AE02/B6369EA2521711EE899DAC80C4F9AE02.roa
File:                     B6369EA2521711EE899DAC80C4F9AE02.roa (raw, json)
Hash identifier:          xuCx/RBnsBpgZFOhauVuk4dGW5HAynFqSYETruU/9ss=
Subject key identifier:   C9:FE:DF:7D:87:FC:23:64:88:81:CA:9A:F2:69:32:1F:D6:A1:4C:D6
Certificate issuer:       /CN=A911DA8C/serialNumber=BB9AD1AF69314B2EF2F64941F036FDE0F7CC4F02
Certificate serial:       0A
Authority key identifier: BB:9A:D1:AF:69:31:4B:2E:F2:F6:49:41:F0:36:FD:E0:F7:CC:4F:02
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/u5rRr2kxSy7y9klB8Db94PfMTwI.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A911DA8C/546EF3BA4B9911EEBB360B55C4F9AE02/B6369EA2521711EE899DAC80C4F9AE02.roa
Signing time:             Wed 13 Sep 2023 09:27:09 +0000
ROA not before:           Wed 13 Sep 2023 09:27:09 +0000
ROA not after:            Thu 31 Oct 2024 00:00:00 +0000
asID:                     55769
IP address blocks:        167.179.192.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A911DA8C/546EF3BA4B9911EEBB360B55C4F9AE02/u5rRr2kxSy7y9klB8Db94PfMTwI.crl
                          rsync://rpki.apnic.net/member_repository/A911DA8C/546EF3BA4B9911EEBB360B55C4F9AE02/u5rRr2kxSy7y9klB8Db94PfMTwI.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/u5rRr2kxSy7y9klB8Db94PfMTwI.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 14 Jun 2024 04:06:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 10 (0xa)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A911DA8C/serialNumber=BB9AD1AF69314B2EF2F64941F036FDE0F7CC4F02
        Validity
            Not Before: Sep 13 09:27:09 2023 GMT
            Not After : Oct 31 00:00:00 2024 GMT
        Subject: CN=6501806d-1933
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:53:99:97:d2:c6:c4:69:ff:d6:f8:5e:ef:3a:
                    4e:1b:5b:df:37:e2:d0:b3:6f:e6:5c:08:b1:b8:cf:
                    b1:90:64:52:4e:f5:80:4e:e5:12:8b:a6:72:b8:d8:
                    34:b3:42:e6:e4:f2:a7:6c:c1:f5:51:40:bb:b4:78:
                    e1:61:a3:0c:3c:41:94:9d:d1:6e:68:b4:f8:5c:6f:
                    f0:ea:d3:aa:a5:a3:1f:51:c8:41:37:8f:b6:85:23:
                    64:ab:b4:97:b1:de:5e:b4:20:ef:45:22:a0:06:31:
                    ab:32:8e:65:89:5e:b6:2f:d8:83:19:fd:3d:67:a1:
                    c1:ce:8a:fd:aa:ec:bd:5c:23:3f:b6:38:ca:ec:64:
                    d2:05:15:9b:9b:a1:65:9e:09:8a:13:06:bf:09:59:
                    1f:67:01:27:02:06:81:d3:cc:28:53:7a:e6:65:11:
                    d4:90:22:13:01:85:77:52:74:56:92:dd:9c:9b:ee:
                    03:0e:37:ed:7b:ed:14:64:4c:00:b8:90:07:30:5c:
                    3e:e7:72:83:67:0c:23:85:e5:3a:ab:95:0b:b0:d4:
                    85:f8:65:7d:99:d3:b2:e6:a7:a7:b1:fb:70:53:fd:
                    d3:3b:6e:50:d2:f1:7c:de:20:a3:95:84:39:4d:01:
                    fe:34:40:41:18:da:42:76:f9:e2:7a:e0:6d:bb:52:
                    63:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C9:FE:DF:7D:87:FC:23:64:88:81:CA:9A:F2:69:32:1F:D6:A1:4C:D6
            X509v3 Authority Key Identifier:
                keyid:BB:9A:D1:AF:69:31:4B:2E:F2:F6:49:41:F0:36:FD:E0:F7:CC:4F:02

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A911DA8C/546EF3BA4B9911EEBB360B55C4F9AE02/u5rRr2kxSy7y9klB8Db94PfMTwI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/u5rRr2kxSy7y9klB8Db94PfMTwI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911DA8C/546EF3BA4B9911EEBB360B55C4F9AE02/B6369EA2521711EE899DAC80C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  167.179.192.0/22

    Signature Algorithm: sha256WithRSAEncryption
         6d:f9:96:14:87:ac:d6:c3:18:ae:6e:a2:2c:20:a8:15:25:be:
         ef:59:c4:78:df:dc:2d:03:b5:15:b3:e7:a9:9b:5e:57:a8:31:
         6e:8c:55:3b:5b:57:d6:05:37:6b:18:65:05:bb:10:29:71:7e:
         14:c4:c1:82:2e:b3:f0:dc:40:36:52:97:12:34:9c:23:e5:39:
         4d:57:b2:a2:76:fa:30:21:dc:42:4b:4a:47:6a:dd:65:49:2a:
         69:7b:5a:a1:d4:20:e7:c5:da:5c:15:f6:c0:92:fe:58:0b:b9:
         e1:93:bd:8c:8d:67:e4:41:8f:c8:90:d1:4a:84:cc:63:fb:ce:
         c9:fb:ca:03:ca:01:8e:c2:d5:af:e2:08:57:3a:dc:a5:c0:ca:
         22:19:1e:86:87:d0:02:db:b3:a0:45:fd:b1:12:ce:cb:d7:85:
         d8:9f:3a:22:17:93:18:c5:0e:91:05:e2:f8:d4:7e:5e:31:80:
         94:93:9a:6d:eb:3b:00:6e:f3:ea:11:6b:5b:6b:52:22:7f:e1:
         7f:2d:02:ea:fd:5c:e7:e9:ff:75:37:bd:fa:bc:e8:21:b0:64:
         51:71:15:52:b3:27:98:34:39:56:74:b0:35:62:91:1e:a4:38:
         47:53:d4:89:2c:e1:c7:37:d3:ef:f2:f5:9b:58:cd:76:07:20:
         7c:b3:20:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 7 05:32:03 2024 by rpki-client on console-fra.rpki-client.org