Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9117836/FA25EDE2431D11EE868CA40FC4F9AE02/EAA5793C367411EF98F49F1CC4F9AE02.roa
File:                     EAA5793C367411EF98F49F1CC4F9AE02.roa (raw, json)
Hash identifier:          /RysZ9FFrvGFWhnZrMrChDiZQuIFgZEdesdb5vE5fVc=
Subject key identifier:   7A:D3:E1:8D:09:69:A9:0B:5F:7D:18:48:EC:4D:02:EA:4F:B9:34:34
Certificate issuer:       /CN=A9117836/serialNumber=6F67581038534D4DBCE3C81B5F2D8861C536B67C
Certificate serial:       D4
Authority key identifier: 6F:67:58:10:38:53:4D:4D:BC:E3:C8:1B:5F:2D:88:61:C5:36:B6:7C
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/b2dYEDhTTU2848gbXy2IYcU2tnw.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9117836/FA25EDE2431D11EE868CA40FC4F9AE02/EAA5793C367411EF98F49F1CC4F9AE02.roa
Signing time:             Mon 09 Sep 2024 07:39:18 +0000
ROA not before:           Mon 09 Sep 2024 07:39:18 +0000
ROA not after:            Mon 01 Dec 2025 00:00:00 +0000
asID:                     151779
IP address blocks:        2001:df2:da40::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9117836/FA25EDE2431D11EE868CA40FC4F9AE02/b2dYEDhTTU2848gbXy2IYcU2tnw.crl
                          rsync://rpki.apnic.net/member_repository/A9117836/FA25EDE2431D11EE868CA40FC4F9AE02/b2dYEDhTTU2848gbXy2IYcU2tnw.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/b2dYEDhTTU2848gbXy2IYcU2tnw.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 30 Nov 2024 02:50:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 212 (0xd4)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9117836/serialNumber=6F67581038534D4DBCE3C81B5F2D8861C536B67C
        Validity
            Not Before: Sep  9 07:39:18 2024 GMT
            Not After : Dec  1 00:00:00 2025 GMT
        Subject: CN=66dea626-6c49
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:d8:09:45:8e:20:fc:e8:17:15:91:0a:fb:4d:
                    38:a2:3d:62:5d:34:97:74:bc:b2:44:48:d1:c9:ca:
                    fe:6f:78:b9:c4:32:78:9c:3d:17:a9:be:e0:29:31:
                    02:b7:68:2e:1d:02:83:a0:8f:88:d0:6d:8b:c4:bd:
                    4f:a2:bc:31:b7:15:e2:e7:88:3c:52:8e:24:3e:7e:
                    00:40:14:29:81:fe:ed:6c:89:d8:fd:b1:ec:0c:65:
                    46:fb:26:ed:62:8b:0a:9b:1e:23:69:4a:f1:98:e5:
                    a6:80:0d:97:b2:ad:49:f4:64:66:cd:82:41:40:55:
                    27:ca:27:68:bf:8a:fd:a2:6f:c9:2b:84:bb:2c:47:
                    71:67:eb:e6:43:43:c3:7d:f0:f5:ac:72:a3:76:07:
                    e5:71:12:c5:17:ab:19:7a:0c:8b:6c:a0:6b:a8:11:
                    d4:3c:79:f9:81:78:7e:b4:ec:7e:5f:fd:bd:a5:7b:
                    58:89:8c:65:fb:a2:f2:4a:05:eb:36:41:28:64:e7:
                    22:10:23:6a:e7:05:bd:de:96:83:b2:c9:dc:2d:70:
                    ad:58:13:be:35:af:88:c6:59:59:27:94:8c:d9:aa:
                    a6:26:90:1c:ef:55:b4:d4:fd:1a:21:11:31:07:31:
                    02:27:ae:6c:59:90:3e:f2:6f:94:85:ba:fd:55:50:
                    d2:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7A:D3:E1:8D:09:69:A9:0B:5F:7D:18:48:EC:4D:02:EA:4F:B9:34:34
            X509v3 Authority Key Identifier:
                keyid:6F:67:58:10:38:53:4D:4D:BC:E3:C8:1B:5F:2D:88:61:C5:36:B6:7C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9117836/FA25EDE2431D11EE868CA40FC4F9AE02/b2dYEDhTTU2848gbXy2IYcU2tnw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/b2dYEDhTTU2848gbXy2IYcU2tnw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9117836/FA25EDE2431D11EE868CA40FC4F9AE02/EAA5793C367411EF98F49F1CC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:df2:da40::/48

    Signature Algorithm: sha256WithRSAEncryption
         1b:2a:05:13:61:c8:fb:af:2e:d9:c0:f2:56:86:00:76:88:59:
         a8:ee:a4:53:be:e0:93:a6:45:3e:9c:7e:32:f5:96:27:ca:6a:
         09:c6:2a:16:e9:32:c2:ed:dd:d6:24:be:a0:03:48:d3:a9:3f:
         05:47:16:51:8d:d2:04:e6:15:15:8c:08:07:b7:0c:c2:20:7c:
         a9:bb:41:9b:41:44:8a:72:0f:e1:1c:b0:5b:39:82:69:69:16:
         64:f7:54:2d:28:99:b4:fe:31:17:df:9a:27:7a:39:26:a8:07:
         33:b6:b3:eb:55:a6:f3:8e:86:de:c5:f2:65:e3:ac:47:37:55:
         54:5f:c7:9d:0f:26:fd:bd:dd:cf:0e:35:73:39:7d:50:c9:17:
         f2:a9:b0:38:97:77:05:20:84:ba:24:91:5d:10:69:27:68:c5:
         cc:cf:65:a6:42:1d:3e:dd:dc:2b:3b:7f:05:79:88:b0:0e:4e:
         dc:10:83:96:89:c7:4d:93:9b:07:ee:ee:96:3d:df:08:8a:9d:
         cd:4c:cf:82:6f:da:ba:22:99:54:98:a5:95:0c:c0:2c:ca:e3:
         d1:28:8e:dd:b6:fe:a5:ef:ab:ec:05:72:56:54:70:b0:9b:b3:
         4d:1a:a9:fd:5d:87:ae:cb:fb:74:77:3d:58:ec:4b:b4:f2:87:
         a4:52:02:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 06:13:00 2024 by rpki-client on console-ams.rpki-client.org