Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91955C8/9CD3E8F6FF5811E2BB4B2E3F5911EA32/AF6D4D44B73311EC8392922AC4F9AE02.roa
File:                     AF6D4D44B73311EC8392922AC4F9AE02.roa (raw, json)
Hash identifier:          R4ybNnQ0mwoL4B+2xlweOTID4tc0Szqka+nYeqTHQpg=
Subject key identifier:   31:11:57:D3:C5:BA:79:1C:FB:A1:9F:84:39:6F:F3:53:A3:8D:8E:1D
Certificate issuer:       /CN=A91955C8/serialNumber=C6673D3648F43F4674F5F5EBFCBFA31BB964F64B
Certificate serial:       2FCC
Authority key identifier: C6:67:3D:36:48:F4:3F:46:74:F5:F5:EB:FC:BF:A3:1B:B9:64:F6:4B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xmc9Nkj0P0Z09fXr_L-jG7lk9ks.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91955C8/9CD3E8F6FF5811E2BB4B2E3F5911EA32/AF6D4D44B73311EC8392922AC4F9AE02.roa
Signing time:             Tue 30 Apr 2024 15:53:01 +0000
ROA not before:           Tue 30 Apr 2024 15:53:01 +0000
ROA not after:            Tue 01 Jul 2025 00:00:00 +0000
asID:                     4780
IP address blocks:        180.87.78.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91955C8/9CD3E8F6FF5811E2BB4B2E3F5911EA32/xmc9Nkj0P0Z09fXr_L-jG7lk9ks.crl
                          rsync://rpki.apnic.net/member_repository/A91955C8/9CD3E8F6FF5811E2BB4B2E3F5911EA32/xmc9Nkj0P0Z09fXr_L-jG7lk9ks.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xmc9Nkj0P0Z09fXr_L-jG7lk9ks.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 29 Nov 2024 15:29:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 12236 (0x2fcc)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91955C8/serialNumber=C6673D3648F43F4674F5F5EBFCBFA31BB964F64B
        Validity
            Not Before: Apr 30 15:53:01 2024 GMT
            Not After : Jul  1 00:00:00 2025 GMT
        Subject: CN=663113dd-76c8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:1b:38:78:ac:a1:53:94:d7:47:97:fb:c4:a2:
                    75:48:64:d8:9e:35:6b:1b:f6:03:a2:93:16:01:30:
                    5c:f2:84:9e:45:cb:9b:a0:c6:0e:c4:20:b5:ae:bb:
                    64:99:65:2b:20:e2:db:80:e2:38:44:d0:88:13:f5:
                    ca:eb:a7:f2:b1:62:cc:9b:ba:7a:cd:fe:54:e2:a7:
                    50:07:01:de:09:1a:df:93:bc:ec:39:ab:89:ca:02:
                    ad:0f:43:ee:84:50:89:39:72:01:e1:af:3c:a3:f6:
                    d4:7e:d5:92:67:81:e3:d2:75:ad:12:1c:5d:77:39:
                    25:87:61:45:3b:4e:14:1d:ba:43:7d:25:18:c1:c3:
                    8c:dc:a8:3a:9f:e5:87:7c:66:1a:18:00:f2:27:72:
                    6b:ea:a2:ae:35:03:23:88:62:08:82:b3:de:45:73:
                    85:30:68:48:23:66:8e:53:ce:fc:5e:da:b1:dc:37:
                    a0:58:8b:e5:44:76:7e:3f:32:82:3e:02:43:7b:1d:
                    36:d0:cc:16:2a:06:d6:34:dc:3e:e1:70:c3:72:dc:
                    b6:7b:a4:03:72:fc:82:84:fd:c0:ee:db:05:7b:4f:
                    20:a7:80:cc:75:17:56:ef:02:a7:56:d6:f3:b8:0f:
                    6f:2f:3e:fc:b3:bd:15:31:8a:0f:39:e2:dd:e3:a8:
                    65:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                31:11:57:D3:C5:BA:79:1C:FB:A1:9F:84:39:6F:F3:53:A3:8D:8E:1D
            X509v3 Authority Key Identifier:
                keyid:C6:67:3D:36:48:F4:3F:46:74:F5:F5:EB:FC:BF:A3:1B:B9:64:F6:4B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91955C8/9CD3E8F6FF5811E2BB4B2E3F5911EA32/xmc9Nkj0P0Z09fXr_L-jG7lk9ks.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xmc9Nkj0P0Z09fXr_L-jG7lk9ks.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91955C8/9CD3E8F6FF5811E2BB4B2E3F5911EA32/AF6D4D44B73311EC8392922AC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  180.87.78.0/24

    Signature Algorithm: sha256WithRSAEncryption
         2a:a0:df:f0:88:90:05:9f:cb:6d:fe:16:aa:05:8e:01:8e:2e:
         0e:6f:c2:29:68:6f:83:fd:ed:72:17:f9:ab:e6:21:93:c8:7d:
         9b:9c:e7:6d:4b:ac:ee:7c:22:63:b4:bf:7e:90:77:33:60:d2:
         da:d3:5c:9b:93:46:3f:bb:20:02:b7:9e:cc:d9:3e:db:df:b0:
         49:d2:94:c5:b5:3d:f8:d5:15:c3:d0:a9:42:10:d9:7f:41:88:
         06:99:2a:11:29:e2:cf:ed:b1:01:4c:81:c5:66:f3:e3:44:bc:
         ee:d1:5d:41:c5:fd:b7:3e:41:a0:6e:b1:f3:d9:76:34:a7:f8:
         d5:80:60:af:ca:71:32:f2:09:77:c4:c6:cc:ac:88:17:26:bf:
         29:94:d6:5d:fe:c4:be:dc:a6:32:73:2e:f7:1a:56:7d:f0:6e:
         e2:bf:0a:19:25:a8:3e:d7:e5:19:55:7f:23:90:61:3c:7c:8d:
         b2:71:8e:34:9d:d9:30:17:c5:01:7b:c1:0b:49:b2:35:7a:43:
         b3:62:ec:52:87:da:81:6c:92:27:c0:e0:df:26:26:f6:32:5a:
         ec:9f:e4:08:d2:07:53:f5:bf:74:84:5c:93:b5:a0:82:44:be:
         4a:de:52:e8:d2:6b:ab:ee:3d:33:cc:8e:90:4f:6e:e1:6c:b3:
         0f:34:ad:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 17:56:18 2024 by rpki-client on console-fra.rpki-client.org