Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91803DB/0DC35D3E8DD411E9BFE2C556C4F9AE02/F3011EAAB88311EBB2078C50C4F9AE02.roa
File:                     F3011EAAB88311EBB2078C50C4F9AE02.roa (raw, json)
Hash identifier:          1zBOBiinS/ZloM5sq5YNcMVSwVBiTUnO/TIbAYD4XQ0=
Subject key identifier:   AC:0C:E8:0E:F0:87:52:77:21:CB:02:50:E4:62:5C:5D:6D:75:39:B8
Certificate issuer:       /CN=A91803DB/serialNumber=36ED8B675EA7238085AFA06C093E54A9D3FD7B60
Certificate serial:       0F51
Authority key identifier: 36:ED:8B:67:5E:A7:23:80:85:AF:A0:6C:09:3E:54:A9:D3:FD:7B:60
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Nu2LZ16nI4CFr6BsCT5UqdP9e2A.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91803DB/0DC35D3E8DD411E9BFE2C556C4F9AE02/F3011EAAB88311EBB2078C50C4F9AE02.roa
Signing time:             Wed 16 Aug 2023 18:16:13 +0000
ROA not before:           Wed 16 Aug 2023 18:16:13 +0000
ROA not after:            Mon 30 Sep 2024 00:00:00 +0000
asID:                     142130
IP address blocks:        2404:f4c0:fa80::/44 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91803DB/0DC35D3E8DD411E9BFE2C556C4F9AE02/Nu2LZ16nI4CFr6BsCT5UqdP9e2A.crl
                          rsync://rpki.apnic.net/member_repository/A91803DB/0DC35D3E8DD411E9BFE2C556C4F9AE02/Nu2LZ16nI4CFr6BsCT5UqdP9e2A.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Nu2LZ16nI4CFr6BsCT5UqdP9e2A.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 29 May 2024 18:30:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3921 (0xf51)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91803DB/serialNumber=36ED8B675EA7238085AFA06C093E54A9D3FD7B60
        Validity
            Not Before: Aug 16 18:16:13 2023 GMT
            Not After : Sep 30 00:00:00 2024 GMT
        Subject: CN=64dd126d-a99c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:f8:eb:bf:db:e5:31:19:f4:11:fe:ba:11:b5:
                    51:cb:f0:8a:94:02:1f:dc:49:cf:87:22:fa:02:02:
                    2a:46:59:41:d7:8b:2e:d3:18:c6:5d:5e:73:70:78:
                    8b:cc:4d:4c:d7:cb:dc:00:89:73:1d:70:9c:8d:40:
                    1f:eb:65:c1:e4:d4:87:63:5b:1e:63:07:f0:be:ba:
                    7f:d5:1e:45:b8:d7:fc:c9:f2:a5:a0:98:f0:ad:13:
                    bd:2b:08:65:45:0e:fc:58:0f:2b:e0:3f:a9:98:bc:
                    de:82:82:fc:59:cf:a7:c3:e6:60:7e:7b:1a:9c:22:
                    ed:01:83:d3:62:42:eb:02:d2:90:ef:c3:59:5d:5d:
                    66:67:6c:33:d7:6e:a9:d3:54:58:2d:f5:0e:cc:09:
                    d2:19:48:dc:7e:d3:36:51:8e:25:cb:85:28:aa:d9:
                    e6:ce:d1:90:10:6b:54:bb:61:ce:95:46:ec:5b:4a:
                    f0:08:8d:1c:73:0f:3d:0a:0a:4b:c4:86:cb:6d:7f:
                    00:45:c7:f5:20:f7:22:6b:76:43:83:a6:77:11:1d:
                    33:60:43:38:d1:2a:af:93:2f:59:25:e6:29:5a:4e:
                    5a:dd:fe:16:cf:45:d1:93:cf:24:5e:96:97:f0:59:
                    36:0a:6a:53:a5:45:b2:51:36:de:aa:a7:75:0e:d1:
                    0c:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AC:0C:E8:0E:F0:87:52:77:21:CB:02:50:E4:62:5C:5D:6D:75:39:B8
            X509v3 Authority Key Identifier:
                keyid:36:ED:8B:67:5E:A7:23:80:85:AF:A0:6C:09:3E:54:A9:D3:FD:7B:60

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91803DB/0DC35D3E8DD411E9BFE2C556C4F9AE02/Nu2LZ16nI4CFr6BsCT5UqdP9e2A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Nu2LZ16nI4CFr6BsCT5UqdP9e2A.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91803DB/0DC35D3E8DD411E9BFE2C556C4F9AE02/F3011EAAB88311EBB2078C50C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  2404:f4c0:fa80::/44

    Signature Algorithm: sha256WithRSAEncryption
         2a:d9:5b:b3:da:0c:1f:f8:09:c9:39:cb:26:e6:45:7c:34:33:
         9f:b6:86:b0:50:c4:1f:b7:ae:b7:9a:14:9b:c5:06:d1:a9:d0:
         58:2e:a3:71:79:e6:e8:5d:f6:86:d3:b8:f5:8d:68:33:87:18:
         42:d3:2a:46:a3:36:d3:85:2b:60:b4:a8:2e:fa:14:9a:ed:73:
         36:e6:60:14:ec:c4:7f:37:2d:e8:7b:00:b6:3c:62:c7:a0:04:
         10:fd:46:83:b7:d3:15:60:3e:37:29:2f:f1:c3:06:a9:1e:fb:
         75:f8:41:12:9b:85:d6:9d:fb:84:b5:b1:bb:40:0f:ff:4e:a4:
         cd:ca:ba:83:84:c1:9d:f6:af:a3:d2:6f:25:7f:b6:3e:76:14:
         50:55:2a:f9:52:43:68:19:9e:d6:cc:db:86:1b:dd:e0:8f:27:
         c8:43:ad:48:2f:5b:d3:ab:ae:e9:1e:cb:77:32:9f:4f:f5:66:
         cc:02:5d:ca:ee:01:a3:4a:c1:9b:c2:ec:1e:15:e4:a1:f1:20:
         7c:1d:ed:91:49:35:be:24:ba:71:d5:79:3b:ab:70:4f:23:45:
         48:42:5b:36:b6:3a:c1:20:04:8e:e0:d3:4d:13:4e:9c:4b:15:
         65:46:34:e5:31:2c:8a:12:b1:4a:e1:0f:f3:a3:2f:ed:8c:cc:
         e2:23:22:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 22 20:42:48 2024 by rpki-client on console-fra.rpki-client.org