Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9165568/BD1A95D21D8711E29BE3E6DF08B02CD2/A75964A28E4B11EA8A347A3EC4F9AE02.roa
File:                     A75964A28E4B11EA8A347A3EC4F9AE02.roa (raw, json)
Hash identifier:          6KmMNzHs39Hbebeh/wdix0UtI7gBt79tuL29k7NloPA=
Subject key identifier:   E0:3A:E1:CB:78:DA:4D:6C:DD:ED:78:29:1E:C6:E1:C2:F1:D9:F3:4F
Certificate issuer:       /CN=A9165568/serialNumber=67097E492F73D6DBD31FA016A2D5B5B86A9B3FD8
Certificate serial:       1B82
Authority key identifier: 67:09:7E:49:2F:73:D6:DB:D3:1F:A0:16:A2:D5:B5:B8:6A:9B:3F:D8
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Zwl-SS9z1tvTH6AWotW1uGqbP9g.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9165568/BD1A95D21D8711E29BE3E6DF08B02CD2/A75964A28E4B11EA8A347A3EC4F9AE02.roa
Signing time:             Fri 20 Oct 2023 14:40:29 +0000
ROA not before:           Fri 20 Oct 2023 14:40:29 +0000
ROA not after:            Fri 31 Jan 2025 00:00:00 +0000
asID:                     131471
IP address blocks:        119.30.85.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9165568/BD1A95D21D8711E29BE3E6DF08B02CD2/Zwl-SS9z1tvTH6AWotW1uGqbP9g.crl
                          rsync://rpki.apnic.net/member_repository/A9165568/BD1A95D21D8711E29BE3E6DF08B02CD2/Zwl-SS9z1tvTH6AWotW1uGqbP9g.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Zwl-SS9z1tvTH6AWotW1uGqbP9g.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 15 May 2024 02:42:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 7042 (0x1b82)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9165568/serialNumber=67097E492F73D6DBD31FA016A2D5B5B86A9B3FD8
        Validity
            Not Before: Oct 20 14:40:29 2023 GMT
            Not After : Jan 31 00:00:00 2025 GMT
        Subject: CN=6532915d-f6cc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:63:86:ab:a5:ad:0e:eb:fa:12:db:93:13:66:
                    b1:b8:ae:63:82:54:a8:6f:f0:f1:5f:d9:17:1e:c6:
                    6f:b2:d0:85:31:0f:9d:e6:ad:30:d3:84:1c:2a:f6:
                    03:56:87:43:28:69:d4:d9:cd:50:53:8f:39:f6:5c:
                    f1:1a:56:a6:22:23:c3:c3:39:b9:dc:f9:47:f3:11:
                    63:a3:6c:88:92:94:04:b7:3f:31:b7:22:fc:ab:dd:
                    c4:cf:8e:71:e6:e8:be:67:75:2a:41:92:5a:b4:13:
                    48:52:c3:3f:15:95:79:49:98:5d:7f:a0:08:6e:73:
                    6c:ac:d8:b8:0b:b8:b1:6b:f9:d8:00:c3:09:ae:07:
                    9f:89:2b:7f:ca:0d:a2:fb:91:c8:3c:b8:dc:0c:ba:
                    5b:0f:52:06:e6:2b:a7:d3:4f:c1:d3:a4:8e:c7:53:
                    ba:e9:37:55:6c:43:4f:a1:1d:49:5c:65:7b:7c:74:
                    c7:06:f0:56:f4:80:86:45:2b:5e:b5:4c:4e:3d:2d:
                    e1:97:45:55:96:d6:41:1a:d5:14:0f:e3:8b:40:df:
                    c5:a6:12:69:48:5f:c7:ee:93:fe:71:65:55:62:a5:
                    08:8c:82:47:e6:dd:32:d0:a2:d2:96:8a:c6:0c:02:
                    1e:74:b1:93:28:d5:58:b8:7d:c5:25:35:aa:67:0f:
                    4b:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E0:3A:E1:CB:78:DA:4D:6C:DD:ED:78:29:1E:C6:E1:C2:F1:D9:F3:4F
            X509v3 Authority Key Identifier:
                keyid:67:09:7E:49:2F:73:D6:DB:D3:1F:A0:16:A2:D5:B5:B8:6A:9B:3F:D8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9165568/BD1A95D21D8711E29BE3E6DF08B02CD2/Zwl-SS9z1tvTH6AWotW1uGqbP9g.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Zwl-SS9z1tvTH6AWotW1uGqbP9g.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9165568/BD1A95D21D8711E29BE3E6DF08B02CD2/A75964A28E4B11EA8A347A3EC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  119.30.85.0/24

    Signature Algorithm: sha256WithRSAEncryption
         76:cd:1f:87:8a:68:29:81:a9:86:52:7e:c7:b4:39:50:df:21:
         82:33:22:fa:c3:c8:28:5e:51:17:09:43:63:6f:6c:fa:11:96:
         a7:13:6c:56:12:ed:a5:5f:6f:f4:96:2e:a3:64:8e:6a:4b:63:
         0a:36:38:ec:f3:dc:06:50:6e:61:a8:33:77:f3:6b:9e:9d:07:
         02:75:37:51:8a:7e:00:09:69:83:66:d3:26:5a:79:5a:22:dc:
         1b:be:45:f8:fd:41:19:99:65:0e:16:46:d5:c5:32:27:bd:fa:
         62:44:53:15:47:d1:71:a9:6d:fb:2d:c8:df:ee:00:e1:a9:94:
         a3:ba:95:11:a4:74:78:e1:7d:4b:89:e0:c1:d8:18:fd:8f:a8:
         f7:7d:e8:35:3c:0c:02:b4:78:1e:65:fc:8e:1a:aa:3a:7c:2b:
         e7:e8:bf:b7:1a:f2:00:48:dd:e2:22:ba:4f:8e:6a:f8:4a:91:
         65:bf:88:ed:00:8f:9e:73:5b:47:32:c0:86:8a:e7:bb:78:71:
         7c:59:84:ca:81:d5:1d:15:12:e9:7f:31:e9:54:93:9c:d1:a6:
         7b:c1:cb:fc:50:2a:0f:44:5c:b1:4d:fe:be:1f:08:be:f3:c7:
         03:ec:2d:27:b5:aa:0a:62:7b:3c:a7:6a:d3:c9:5b:35:62:66:
         15:a4:18:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 12 17:42:44 2024 by rpki-client on console-fra.rpki-client.org