Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A912BE9D/D305E4EE990E11EB89B76D68C4F9AE02/671FC40EE29211EE94348874C4F9AE02.roa
File:                     671FC40EE29211EE94348874C4F9AE02.roa (raw, json)
Hash identifier:          g2vv7AHTfE7hgVuhQQ+LRP82Za1gQekByhs+A7odt4o=
Subject key identifier:   46:28:6D:B9:7C:3A:79:EB:5F:01:78:CE:BC:FB:B1:03:8F:E6:66:D6
Certificate issuer:       /CN=A912BE9D/serialNumber=BF6AD1ABC9D91619A09287FB6C64F4647B9FD31C
Certificate serial:       05BD
Authority key identifier: BF:6A:D1:AB:C9:D9:16:19:A0:92:87:FB:6C:64:F4:64:7B:9F:D3:1C
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/v2rRq8nZFhmgkof7bGT0ZHuf0xw.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A912BE9D/D305E4EE990E11EB89B76D68C4F9AE02/671FC40EE29211EE94348874C4F9AE02.roa
Signing time:             Fri 15 Mar 2024 06:09:17 +0000
ROA not before:           Fri 15 Mar 2024 06:09:17 +0000
ROA not after:            Mon 30 Sep 2024 00:00:00 +0000
asID:                     17762
IP address blocks:        2403:8600:c0::/44 maxlen: 44
                          2403:8600:d0::/44 maxlen: 44

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A912BE9D/D305E4EE990E11EB89B76D68C4F9AE02/v2rRq8nZFhmgkof7bGT0ZHuf0xw.crl
                          rsync://rpki.apnic.net/member_repository/A912BE9D/D305E4EE990E11EB89B76D68C4F9AE02/v2rRq8nZFhmgkof7bGT0ZHuf0xw.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/v2rRq8nZFhmgkof7bGT0ZHuf0xw.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 14 Jun 2024 01:17:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1469 (0x5bd)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A912BE9D/serialNumber=BF6AD1ABC9D91619A09287FB6C64F4647B9FD31C
        Validity
            Not Before: Mar 15 06:09:17 2024 GMT
            Not After : Sep 30 00:00:00 2024 GMT
        Subject: CN=65f3e60d-45e8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:28:88:ba:b2:b8:d6:3e:3a:08:10:60:d8:53:
                    20:84:f1:30:41:0a:90:49:7e:6f:a6:b8:dd:be:57:
                    84:db:d4:dc:63:2c:57:f2:aa:ca:63:29:7d:f5:9e:
                    94:41:9b:4a:a5:ad:65:55:34:f7:70:3d:25:4c:26:
                    f1:cc:c1:f7:5a:ae:be:94:b6:2c:c1:bb:33:62:8d:
                    c0:66:ce:6c:6a:34:15:c0:48:df:fb:72:00:65:0c:
                    b7:6a:b3:bf:8c:cf:42:fb:63:ce:9f:c5:8f:0c:35:
                    81:6a:18:ba:f9:7d:0b:75:25:86:de:7b:34:5c:59:
                    2b:b9:67:5e:18:14:5f:b3:ab:dc:6f:0a:01:45:19:
                    ee:72:15:5b:8b:03:8b:ea:f1:03:86:89:da:37:ae:
                    06:3c:3d:90:26:0b:fa:1a:77:56:95:5e:8c:74:7b:
                    a5:8e:1f:ab:4f:2a:55:dc:bf:1a:6d:4d:58:70:04:
                    10:23:51:d9:18:85:ab:d1:30:5a:48:52:83:b7:77:
                    32:d6:17:43:e6:d2:31:41:54:75:92:8c:03:d7:00:
                    49:61:c6:3d:2c:79:d4:f4:69:7f:55:8b:1a:32:be:
                    c9:ee:93:fa:43:5c:76:d4:b4:82:d4:18:51:56:09:
                    dc:de:98:72:b8:df:ea:c6:d4:82:c8:0d:98:ce:9d:
                    01:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                46:28:6D:B9:7C:3A:79:EB:5F:01:78:CE:BC:FB:B1:03:8F:E6:66:D6
            X509v3 Authority Key Identifier:
                keyid:BF:6A:D1:AB:C9:D9:16:19:A0:92:87:FB:6C:64:F4:64:7B:9F:D3:1C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A912BE9D/D305E4EE990E11EB89B76D68C4F9AE02/v2rRq8nZFhmgkof7bGT0ZHuf0xw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/v2rRq8nZFhmgkof7bGT0ZHuf0xw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912BE9D/D305E4EE990E11EB89B76D68C4F9AE02/671FC40EE29211EE94348874C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  2403:8600:c0::/43

    Signature Algorithm: sha256WithRSAEncryption
         53:78:0a:10:3c:95:8c:d3:e6:7b:28:ac:43:0c:d9:ad:fe:2c:
         36:c0:97:9f:b2:6d:95:0a:20:10:7b:9b:5a:c3:78:bf:27:fa:
         b1:21:02:ea:2f:ee:5a:6f:0a:94:ce:2c:ba:af:df:65:5b:ae:
         71:db:61:d0:86:7d:5d:9e:ef:0b:ee:6a:f1:f7:b8:c7:d4:80:
         59:7d:c7:14:37:6b:45:f4:23:94:af:17:5e:5f:5b:30:17:d1:
         92:d5:fc:0a:a1:d2:81:33:c5:36:ec:c4:fd:97:c0:46:8c:18:
         c4:e2:07:be:3b:9b:3c:6c:ac:e8:05:a6:20:e2:9c:e0:1c:a8:
         15:27:4b:c9:7c:43:f9:59:61:1e:9a:3f:ef:ab:be:b5:54:2b:
         31:02:5d:4a:86:c0:84:11:f4:8e:8f:e8:28:ae:4c:53:50:00:
         ee:a6:85:95:6d:9c:90:a9:ed:7d:0d:dc:42:fa:65:4e:d3:60:
         f0:f9:bb:7a:b2:73:e0:8d:47:24:ba:54:39:88:ec:65:a7:79:
         00:51:f3:9e:ba:8c:53:83:56:a5:fb:2e:9d:c5:30:b0:3f:25:
         d1:f1:5c:c4:3a:9f:58:b5:7c:b6:83:86:c4:e6:02:7e:d2:82:
         d9:fb:49:66:cc:b9:eb:81:e5:85:34:25:52:81:ae:f0:38:8c:
         c0:88:fc:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 7 03:18:09 2024 by rpki-client on console-ams.rpki-client.org