Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9137ABC/713D9FB01D7811E282868DC408B02CD2/F0A5F90452C311EAA49BC03BC4F9AE02.roa
File:                     F0A5F90452C311EAA49BC03BC4F9AE02.roa (raw, json)
Hash identifier:          gOTjEWfuPnyo/bNvkaP34yUBo1DWTXkIK95u+AQjJaU=
Subject key identifier:   76:66:D8:41:C9:82:A9:BE:2F:86:1D:96:0D:2B:57:BB:3C:FD:AE:C1
Certificate issuer:       /CN=A9137ABC/serialNumber=61BF3ED4C3BFBC0916EF9480AAFF222A437AF02C
Certificate serial:       36A0
Authority key identifier: 61:BF:3E:D4:C3:BF:BC:09:16:EF:94:80:AA:FF:22:2A:43:7A:F0:2C
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Yb8-1MO_vAkW75SAqv8iKkN68Cw.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9137ABC/713D9FB01D7811E282868DC408B02CD2/F0A5F90452C311EAA49BC03BC4F9AE02.roa
Signing time:             Sat 08 Jul 2023 14:30:47 +0000
ROA not before:           Sat 08 Jul 2023 14:30:47 +0000
ROA not after:            Mon 30 Sep 2024 00:00:00 +0000
asID:                     19047
IP address blocks:        2001:fb0:109f:10::/64 maxlen: 64
                          2001:fb0:109f:8006::/64 maxlen: 64

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9137ABC/713D9FB01D7811E282868DC408B02CD2/Yb8-1MO_vAkW75SAqv8iKkN68Cw.crl
                          rsync://rpki.apnic.net/member_repository/A9137ABC/713D9FB01D7811E282868DC408B02CD2/Yb8-1MO_vAkW75SAqv8iKkN68Cw.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Yb8-1MO_vAkW75SAqv8iKkN68Cw.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 25 May 2024 14:21:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 13984 (0x36a0)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9137ABC/serialNumber=61BF3ED4C3BFBC0916EF9480AAFF222A437AF02C
        Validity
            Not Before: Jul  8 14:30:47 2023 GMT
            Not After : Sep 30 00:00:00 2024 GMT
        Subject: CN=64a97317-2ba7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:84:1a:b0:69:8e:34:29:1e:3c:41:12:a2:c1:
                    b6:2e:a5:16:ea:ff:9d:81:f6:bf:22:e4:1e:55:35:
                    fe:23:79:4f:6f:a5:9c:5c:9d:c9:5b:07:62:14:6e:
                    9c:e0:f4:a7:3a:a9:87:88:76:fb:3b:5f:2d:a5:98:
                    14:f4:83:4a:b3:8c:95:76:65:43:d6:02:5d:26:ba:
                    fd:19:46:e2:6f:7d:a9:5c:49:d4:3f:32:eb:19:11:
                    02:73:24:96:85:29:dd:cf:b3:8f:9b:01:54:2e:a9:
                    9e:ac:81:53:a1:d2:ea:a5:e8:34:b0:96:94:96:49:
                    c8:50:7c:33:c3:bc:c8:27:25:4a:7e:07:33:59:d6:
                    f6:22:56:ae:92:75:b1:b9:47:92:e5:f5:d7:4b:bf:
                    4f:f8:6f:9d:29:2a:be:0a:94:73:c1:87:82:2a:83:
                    7a:17:0a:63:7a:1f:78:48:2e:6d:6e:b3:03:98:5a:
                    07:aa:46:58:c3:54:e6:00:49:64:39:7a:8c:82:87:
                    26:25:46:26:60:fe:9b:b8:d1:6b:4e:68:68:3d:c8:
                    ee:d4:ac:8b:af:1e:08:8a:e8:ca:39:f9:a4:be:f7:
                    e2:37:80:f0:f7:d9:95:51:45:f8:02:d9:4c:ef:ce:
                    11:02:a3:d0:91:7f:51:e8:5b:2e:8e:ed:31:5b:6e:
                    b2:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                76:66:D8:41:C9:82:A9:BE:2F:86:1D:96:0D:2B:57:BB:3C:FD:AE:C1
            X509v3 Authority Key Identifier:
                keyid:61:BF:3E:D4:C3:BF:BC:09:16:EF:94:80:AA:FF:22:2A:43:7A:F0:2C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9137ABC/713D9FB01D7811E282868DC408B02CD2/Yb8-1MO_vAkW75SAqv8iKkN68Cw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Yb8-1MO_vAkW75SAqv8iKkN68Cw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9137ABC/713D9FB01D7811E282868DC408B02CD2/F0A5F90452C311EAA49BC03BC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:fb0:109f:10::/64
                  2001:fb0:109f:8006::/64

    Signature Algorithm: sha256WithRSAEncryption
         1c:37:c4:26:ed:5c:e8:ff:ec:81:b5:63:97:2b:06:02:7b:5a:
         27:9d:3f:bc:39:c2:a9:49:a2:72:0e:9d:7a:97:cf:f8:d0:39:
         c8:36:82:4f:29:74:06:15:84:88:5f:6f:78:3f:41:16:16:76:
         6a:d1:c4:96:7f:fd:87:16:de:99:a9:a9:d0:51:43:a0:02:c9:
         aa:12:93:96:8e:b2:51:85:d3:2b:ff:e0:be:28:f4:99:47:86:
         14:c4:f8:88:0a:03:0c:d5:63:fb:03:af:e5:64:27:44:f9:2a:
         ef:2a:9c:c7:29:c9:50:bc:67:e9:55:f8:57:b9:b7:e0:bd:c8:
         4f:ec:ff:cd:78:50:42:f2:0c:96:03:be:d7:51:3c:87:c8:54:
         62:94:2a:ac:fb:52:cc:d2:3e:d9:20:83:9a:7a:57:ec:bc:59:
         d8:2b:92:c3:39:8e:43:72:ba:9d:31:5e:d1:f4:f1:52:91:b0:
         ff:33:05:79:f9:6a:3b:35:8d:ac:6b:5e:d8:c9:46:eb:70:49:
         bd:f5:e1:8d:c8:3f:4c:7d:80:eb:e1:93:6f:41:7a:ab:94:a4:
         4e:ff:29:be:f4:90:e3:04:a9:82:b7:7e:29:bb:6e:55:ce:73:
         d5:11:95:c9:66:9c:a4:72:ba:ec:73:2b:b7:1d:1e:78:02:66:
         ad:cb:30:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 18 15:58:21 2024 by rpki-client on console-ams.rpki-client.org