Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A912FBCF/4AB576BEAA5A11E7AE436F32C4F9AE02/E8780C5EAC8011E79D9EAC60C4F9AE02.roa
File:                     E8780C5EAC8011E79D9EAC60C4F9AE02.roa (raw, json)
Hash identifier:          ZHOFogEh1vpLTCZhDm8iBsCQdlJRg0r2JfS1aS+eOH8=
Subject key identifier:   7B:A8:68:13:FF:61:FF:C0:3B:E4:BA:AB:73:43:D2:3C:4F:CC:D3:64
Certificate issuer:       /CN=A912FBCF/serialNumber=18700CB3D6507A3304BAEB270DEED1301CE3D902
Certificate serial:       172E
Authority key identifier: 18:70:0C:B3:D6:50:7A:33:04:BA:EB:27:0D:EE:D1:30:1C:E3:D9:02
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GHAMs9ZQejMEuusnDe7RMBzj2QI.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A912FBCF/4AB576BEAA5A11E7AE436F32C4F9AE02/E8780C5EAC8011E79D9EAC60C4F9AE02.roa
Signing time:             Mon 06 Nov 2023 17:24:31 +0000
ROA not before:           Mon 06 Nov 2023 17:24:31 +0000
ROA not after:            Fri 31 Jan 2025 00:00:00 +0000
asID:                     134410
IP address blocks:        2001:df2:bb00::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A912FBCF/4AB576BEAA5A11E7AE436F32C4F9AE02/GHAMs9ZQejMEuusnDe7RMBzj2QI.crl
                          rsync://rpki.apnic.net/member_repository/A912FBCF/4AB576BEAA5A11E7AE436F32C4F9AE02/GHAMs9ZQejMEuusnDe7RMBzj2QI.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GHAMs9ZQejMEuusnDe7RMBzj2QI.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 27 May 2024 17:03:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 5934 (0x172e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A912FBCF/serialNumber=18700CB3D6507A3304BAEB270DEED1301CE3D902
        Validity
            Not Before: Nov  6 17:24:31 2023 GMT
            Not After : Jan 31 00:00:00 2025 GMT
        Subject: CN=6549214f-3e04
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:95:b8:85:4d:c1:c3:e7:c6:43:2d:19:5c:33:
                    d0:2c:53:41:d1:ff:3f:67:b1:c5:7b:13:09:7c:b9:
                    16:b4:a1:cb:3d:48:db:9b:62:d6:c0:af:ae:3a:56:
                    3a:27:48:be:1b:f3:1a:44:91:52:c9:aa:f5:1b:15:
                    62:c1:df:9e:ab:95:38:6d:b2:9e:1e:07:dd:90:6f:
                    90:69:91:3a:f8:5a:99:65:97:46:1c:b3:ba:11:f7:
                    13:ff:48:2b:b3:6e:9a:cc:a8:d2:64:5e:25:ee:cd:
                    05:11:51:fc:da:84:5a:52:54:97:41:3f:d4:fc:62:
                    8a:83:fc:67:72:1c:d6:dc:e5:9f:38:32:33:3a:2b:
                    32:c7:04:53:39:34:5f:21:ea:03:0d:61:5f:da:06:
                    5e:42:ff:09:59:c9:fd:78:2a:58:b7:e0:19:d3:e0:
                    d5:56:a7:1d:f1:37:e3:14:5d:2b:3d:d0:3a:c3:e4:
                    ac:ab:27:fa:60:db:60:3b:ba:f5:7c:6a:19:8a:7c:
                    e3:0f:4e:d4:cf:36:23:10:fd:28:54:9b:a2:a3:a4:
                    d6:f1:0e:d3:5a:80:8e:92:56:e7:34:86:2d:14:dd:
                    54:cc:90:53:cf:32:a2:6c:bc:d0:f9:7a:49:45:cf:
                    8e:04:7e:45:81:8f:07:6d:9b:6c:52:08:38:18:74:
                    5d:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7B:A8:68:13:FF:61:FF:C0:3B:E4:BA:AB:73:43:D2:3C:4F:CC:D3:64
            X509v3 Authority Key Identifier:
                keyid:18:70:0C:B3:D6:50:7A:33:04:BA:EB:27:0D:EE:D1:30:1C:E3:D9:02

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A912FBCF/4AB576BEAA5A11E7AE436F32C4F9AE02/GHAMs9ZQejMEuusnDe7RMBzj2QI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GHAMs9ZQejMEuusnDe7RMBzj2QI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912FBCF/4AB576BEAA5A11E7AE436F32C4F9AE02/E8780C5EAC8011E79D9EAC60C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:df2:bb00::/48

    Signature Algorithm: sha256WithRSAEncryption
         50:69:d3:d7:25:33:00:2f:6f:4a:df:cf:92:40:ba:a2:2b:28:
         06:07:ee:ce:d3:25:4d:19:1f:a3:dc:40:45:7e:4a:19:bb:64:
         18:b1:9e:df:2d:d6:20:99:2d:a4:25:66:c4:7a:4b:e3:86:b2:
         c1:10:e4:c9:50:80:ac:f3:89:fa:1a:6b:c2:3f:90:7e:4a:d8:
         01:4b:5a:31:aa:c0:6b:d2:24:c2:54:45:3f:e3:f4:1d:96:8a:
         4c:50:c9:3e:ea:fe:00:d0:7c:59:31:7d:a3:24:30:c7:fa:c8:
         01:ae:16:3a:a5:80:ac:e0:37:e4:9b:7c:94:d9:5a:78:8e:a2:
         30:15:8c:e3:3c:29:3b:48:82:75:37:4b:cf:47:f4:9b:2b:07:
         ab:d9:0f:8d:5b:22:1f:19:19:42:3f:2b:35:77:a1:73:fc:e5:
         92:48:d8:7c:2b:59:b6:dc:45:a9:81:28:b8:d0:56:67:57:f1:
         f8:8a:4a:79:27:79:b1:af:95:98:9f:f5:c7:cb:a9:ee:ca:2d:
         6a:a1:ff:9b:58:c7:e1:75:04:9b:19:b5:5b:37:35:41:d5:75:
         4c:cf:d2:55:5b:eb:05:26:1a:c7:fc:ef:cd:40:7a:e3:90:06:
         40:86:80:77:c4:d4:70:33:45:37:5d:1b:f8:d7:a7:42:9f:b6:
         63:5e:96:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 20 19:20:04 2024 by rpki-client on console-fra.rpki-client.org