Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9183798/9017B50A4A2711E9ACF17C26C4F9AE02/9F08E8B2D28E11EB9F83683DC4F9AE02.roa
File:                     9F08E8B2D28E11EB9F83683DC4F9AE02.roa (raw, json)
Hash identifier:          Fsu/HK3XMCbKO/w8ZndR2l8l0xehLMWKk/qGPWPuAq0=
Subject key identifier:   E8:24:29:B9:9E:32:7A:FC:5C:A1:9C:1C:7E:EA:66:E9:50:CF:88:ED
Certificate issuer:       /CN=A9183798/serialNumber=3A02EFF7CC9C8BAA12D7C852B6FFC69FB060989B
Certificate serial:       0EA1
Authority key identifier: 3A:02:EF:F7:CC:9C:8B:AA:12:D7:C8:52:B6:FF:C6:9F:B0:60:98:9B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OgLv98yci6oS18hStv_Gn7BgmJs.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9183798/9017B50A4A2711E9ACF17C26C4F9AE02/9F08E8B2D28E11EB9F83683DC4F9AE02.roa
Signing time:             Wed 24 May 2023 18:48:29 +0000
ROA not before:           Wed 24 May 2023 18:48:29 +0000
ROA not after:            Tue 30 Jul 2024 00:00:00 +0000
asID:                     142437
IP address blocks:        2405:3340:e011::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9183798/9017B50A4A2711E9ACF17C26C4F9AE02/OgLv98yci6oS18hStv_Gn7BgmJs.crl
                          rsync://rpki.apnic.net/member_repository/A9183798/9017B50A4A2711E9ACF17C26C4F9AE02/OgLv98yci6oS18hStv_Gn7BgmJs.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OgLv98yci6oS18hStv_Gn7BgmJs.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 27 May 2024 18:14:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3745 (0xea1)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9183798/serialNumber=3A02EFF7CC9C8BAA12D7C852B6FFC69FB060989B
        Validity
            Not Before: May 24 18:48:29 2023 GMT
            Not After : Jul 30 00:00:00 2024 GMT
        Subject: CN=646e5bfc-5f93
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:89:a8:9d:62:b2:1a:67:f3:5d:ed:51:10:3f:
                    44:8f:43:8a:1e:91:46:f9:a8:bc:fa:76:28:43:5a:
                    18:39:bb:8d:86:fe:d2:e6:f2:30:17:27:b7:15:5d:
                    64:09:c3:45:68:bd:a5:8f:5c:8c:98:55:cb:6f:b2:
                    4b:41:ab:47:ea:52:04:df:7c:55:0e:d7:4d:ed:5e:
                    b3:85:2d:ec:70:b0:18:57:46:22:45:a5:09:ed:11:
                    b0:79:c5:ae:42:64:f9:78:71:8a:ea:69:a8:e6:1d:
                    d0:d4:62:42:81:1b:08:6b:c3:a0:73:1f:b3:f7:4a:
                    22:4d:27:c6:cb:96:97:63:ee:42:86:29:59:69:f7:
                    7a:3f:3f:77:10:f1:59:fb:44:b8:fd:82:b2:8c:7c:
                    07:51:b6:b7:c1:d7:f4:57:cf:60:9f:9e:d3:14:9d:
                    ed:7d:1b:a3:d6:7c:90:18:11:77:f1:aa:2b:63:0a:
                    b5:9c:f3:f8:0a:d0:d7:4a:a3:a1:8d:c9:89:08:0a:
                    62:2c:81:a1:6e:9c:e0:0d:77:a4:ef:aa:53:54:fc:
                    1e:a6:a1:90:f8:32:71:fc:3f:dd:c7:eb:39:df:97:
                    fb:f1:27:05:f3:66:96:07:82:6d:d8:a1:57:58:79:
                    75:0e:a2:da:42:96:49:6d:92:2d:96:9a:42:3e:7d:
                    07:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E8:24:29:B9:9E:32:7A:FC:5C:A1:9C:1C:7E:EA:66:E9:50:CF:88:ED
            X509v3 Authority Key Identifier:
                keyid:3A:02:EF:F7:CC:9C:8B:AA:12:D7:C8:52:B6:FF:C6:9F:B0:60:98:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9183798/9017B50A4A2711E9ACF17C26C4F9AE02/OgLv98yci6oS18hStv_Gn7BgmJs.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OgLv98yci6oS18hStv_Gn7BgmJs.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9183798/9017B50A4A2711E9ACF17C26C4F9AE02/9F08E8B2D28E11EB9F83683DC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  2405:3340:e011::/48

    Signature Algorithm: sha256WithRSAEncryption
         6a:fe:ea:7d:08:92:f6:09:ee:f0:83:ab:cb:03:6d:68:35:17:
         09:4a:6f:34:3e:9b:f0:80:8a:f7:37:5e:10:d1:46:1f:c8:e3:
         b7:ff:18:68:fb:c8:9f:e6:7b:00:12:3c:f0:56:9b:fb:d2:77:
         a1:f9:33:f5:4e:65:83:23:34:30:52:7c:2c:d9:db:24:20:01:
         fd:56:a8:58:6c:2c:66:9f:b3:6a:19:17:45:08:1c:39:a6:d4:
         cd:da:d5:aa:0c:5b:be:bb:5c:8e:50:78:8b:c6:1c:ce:6f:c6:
         c2:d1:f8:8e:1f:d6:46:3f:f1:3c:ad:74:d0:f9:7b:65:dd:30:
         75:01:73:a2:ff:41:74:5e:5e:f8:39:d4:10:91:aa:1a:72:78:
         57:d9:3a:66:c8:96:d2:c3:db:66:bc:33:19:7c:54:eb:9c:af:
         43:3d:67:c3:ae:65:61:74:75:76:9f:0e:d1:f2:c1:25:3f:34:
         7e:22:c1:8c:b3:a9:4d:4d:2f:ca:94:49:54:5d:e5:dd:0b:e5:
         7f:b5:76:af:61:4e:0f:71:50:ec:2a:65:fd:2d:c0:07:3d:18:
         86:0f:c5:16:92:ba:81:12:de:a3:ea:8a:82:e9:4a:c9:73:bf:
         04:57:5f:de:74:36:2d:ad:7e:03:04:b5:6e:23:75:da:14:a6:
         92:22:a0:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 20 19:20:08 2024 by rpki-client on console-fra.rpki-client.org