Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A919536C/75B98BF0366011EE88E0F530C4F9AE02/9D563A7A366311EEB376DC3AC4F9AE02.roa
File:                     9D563A7A366311EEB376DC3AC4F9AE02.roa (raw, json)
Hash identifier:          BYplY/wntciUA2J0T8T8FVcwE4PqqVE8ReSEUDiKaLI=
Subject key identifier:   DD:13:C3:E1:A5:D0:B9:9B:2B:7C:A0:99:E7:C0:E2:91:90:10:7D:6A
Certificate issuer:       /CN=A919536C/serialNumber=A090E520BF9D51F2FDCEED413AF27AC758F6AE1D
Certificate serial:       03
Authority key identifier: A0:90:E5:20:BF:9D:51:F2:FD:CE:ED:41:3A:F2:7A:C7:58:F6:AE:1D
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/oJDlIL-dUfL9zu1BOvJ6x1j2rh0.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A919536C/75B98BF0366011EE88E0F530C4F9AE02/9D563A7A366311EEB376DC3AC4F9AE02.roa
Signing time:             Wed 09 Aug 2023 03:19:56 +0000
ROA not before:           Wed 09 Aug 2023 03:19:56 +0000
ROA not after:            Sat 31 Aug 2024 00:00:00 +0000
asID:                     132876
IP address blocks:        96.30.112.0/24 maxlen: 24
                          96.30.122.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A919536C/75B98BF0366011EE88E0F530C4F9AE02/oJDlIL-dUfL9zu1BOvJ6x1j2rh0.crl
                          rsync://rpki.apnic.net/member_repository/A919536C/75B98BF0366011EE88E0F530C4F9AE02/oJDlIL-dUfL9zu1BOvJ6x1j2rh0.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/oJDlIL-dUfL9zu1BOvJ6x1j2rh0.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 08 Jun 2024 08:15:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3 (0x3)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A919536C/serialNumber=A090E520BF9D51F2FDCEED413AF27AC758F6AE1D
        Validity
            Not Before: Aug  9 03:19:56 2023 GMT
            Not After : Aug 31 00:00:00 2024 GMT
        Subject: CN=64d305dc-ffdc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:83:14:af:6c:7d:19:8f:ea:19:a7:c3:5e:7f:
                    c9:18:5a:11:3c:8d:b1:58:34:92:80:48:61:26:2d:
                    b1:1a:87:33:04:c7:e7:40:2d:5e:15:5b:be:7f:87:
                    8a:dd:e9:50:65:1c:d0:6d:fb:12:e7:44:bc:c7:71:
                    da:fd:a2:93:96:11:e1:ad:c4:e3:61:e7:e0:c9:f1:
                    e5:f1:87:53:5e:05:4e:3a:53:c0:f3:14:4e:95:74:
                    4b:c7:98:bc:00:fc:80:cc:56:ac:67:ec:6e:49:ea:
                    f7:51:09:82:ab:65:90:30:8b:28:8c:eb:2c:2d:fd:
                    14:0a:3c:a9:2f:73:a8:ac:01:7a:a8:5f:b5:4a:c8:
                    f1:b3:02:f6:d6:48:c9:bc:b4:79:b4:0d:a0:35:1c:
                    cb:d5:48:26:33:fc:b8:a8:46:f9:ba:1d:cb:c6:c8:
                    1b:9c:be:fd:ed:2d:a6:f6:ec:b8:f7:f4:84:e0:57:
                    7b:98:16:64:e9:75:0a:46:60:54:a1:36:90:11:d7:
                    50:9d:5a:b0:c5:44:bf:ac:67:dc:fd:04:7c:18:ff:
                    cf:80:27:18:a4:48:f9:59:bb:1d:0f:36:5a:f7:ac:
                    0b:72:56:8e:f4:2a:59:34:2e:c8:87:23:35:9b:3a:
                    68:48:29:dc:7a:aa:6d:8a:f9:a3:72:31:9f:0b:f2:
                    ab:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DD:13:C3:E1:A5:D0:B9:9B:2B:7C:A0:99:E7:C0:E2:91:90:10:7D:6A
            X509v3 Authority Key Identifier:
                keyid:A0:90:E5:20:BF:9D:51:F2:FD:CE:ED:41:3A:F2:7A:C7:58:F6:AE:1D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A919536C/75B98BF0366011EE88E0F530C4F9AE02/oJDlIL-dUfL9zu1BOvJ6x1j2rh0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/oJDlIL-dUfL9zu1BOvJ6x1j2rh0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919536C/75B98BF0366011EE88E0F530C4F9AE02/9D563A7A366311EEB376DC3AC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  96.30.112.0/24
                  96.30.122.0/24

    Signature Algorithm: sha256WithRSAEncryption
         0a:7e:7e:85:e1:c1:7f:5d:9a:d3:fa:a1:02:39:2c:16:94:77:
         16:46:61:1e:5d:77:45:91:a8:91:e5:ea:0b:1e:81:ef:14:86:
         cd:de:fc:7a:4a:cf:38:b4:38:36:63:56:3f:c7:49:a5:1b:6b:
         4e:f5:45:2a:96:fb:b0:5d:24:19:1c:f0:ab:8e:8d:f1:f3:ed:
         11:90:65:d8:81:d5:4b:f3:96:7e:4f:aa:89:88:fa:58:9f:a8:
         ac:89:79:73:a0:46:94:e4:8b:cb:be:b9:7f:53:2a:70:e1:18:
         5b:70:6c:33:9f:93:bb:e6:94:31:3a:00:b5:01:2e:ee:38:c9:
         a9:f7:dc:98:94:c4:57:33:20:d3:39:fa:90:1a:cf:c4:71:3c:
         e6:48:9d:d7:2a:3d:f9:1e:95:3f:b9:83:11:b4:a7:c4:7a:a8:
         e5:ec:6d:23:6b:bf:a5:cc:77:c1:37:a5:bd:f9:35:44:6c:e5:
         f9:c5:fd:f9:70:09:7e:b6:f1:c7:4d:49:96:58:6e:41:62:66:
         60:7e:8f:6f:58:e1:ef:f4:ce:72:c4:8f:ad:04:ac:6e:39:18:
         c7:87:07:df:17:9a:ec:61:f9:59:72:b7:5e:c5:a1:25:a7:6b:
         e7:ac:62:a4:fa:d0:89:19:d9:5a:d6:76:2c:c2:9a:90:e7:37:
         47:80:13:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 1 11:47:21 2024 by rpki-client on console-ams.rpki-client.org