Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A912CB2A/E01C7A8490E011EBA105871FC4F9AE02/8A0E66D647FC11EE838F6160C4F9AE02.roa
File:                     8A0E66D647FC11EE838F6160C4F9AE02.roa (raw, json)
Hash identifier:          ySXxkDc51kEpYhdFRVWLwuVywdIahS4srP0fSYYLjiI=
Subject key identifier:   12:DD:60:82:43:71:98:30:A8:A5:AD:4E:7D:D2:E3:28:F1:06:6B:9A
Certificate issuer:       /CN=A912CB2A/serialNumber=147E9756439D9DB7156134AC78F91C233B9392A7
Certificate serial:       058C
Authority key identifier: 14:7E:97:56:43:9D:9D:B7:15:61:34:AC:78:F9:1C:23:3B:93:92:A7
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FH6XVkOdnbcVYTSsePkcIzuTkqc.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A912CB2A/E01C7A8490E011EBA105871FC4F9AE02/8A0E66D647FC11EE838F6160C4F9AE02.roa
Signing time:             Fri 15 Mar 2024 00:42:53 +0000
ROA not before:           Fri 15 Mar 2024 00:42:53 +0000
ROA not after:            Sat 31 Aug 2024 00:00:00 +0000
asID:                     150139
IP address blocks:        2403:6900:c000::/36 maxlen: 36

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A912CB2A/E01C7A8490E011EBA105871FC4F9AE02/FH6XVkOdnbcVYTSsePkcIzuTkqc.crl
                          rsync://rpki.apnic.net/member_repository/A912CB2A/E01C7A8490E011EBA105871FC4F9AE02/FH6XVkOdnbcVYTSsePkcIzuTkqc.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FH6XVkOdnbcVYTSsePkcIzuTkqc.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 08 Jun 2024 01:27:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1420 (0x58c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A912CB2A/serialNumber=147E9756439D9DB7156134AC78F91C233B9392A7
        Validity
            Not Before: Mar 15 00:42:53 2024 GMT
            Not After : Aug 31 00:00:00 2024 GMT
        Subject: CN=65f3998d-d101
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:8f:3d:ad:1c:0c:28:e2:4d:7c:c2:ad:0e:b0:
                    cc:ea:d8:01:3d:ea:64:43:38:4d:47:72:8a:a0:b0:
                    ad:2a:47:ab:68:b5:74:d0:16:85:6f:88:86:7f:04:
                    f4:88:59:95:5a:d8:f3:0d:3a:2d:3d:86:0f:37:3a:
                    dd:c5:c5:bf:52:af:3e:d7:f1:fe:52:11:0f:da:c9:
                    a4:43:a7:01:e1:ea:8d:e0:42:64:63:76:9a:ed:f6:
                    0d:40:19:7f:67:9e:b6:4d:1d:b7:ef:cb:ca:64:02:
                    9f:e6:24:90:cc:a7:a3:41:8b:82:d9:98:47:b8:ba:
                    61:88:11:d0:d1:64:50:7f:93:cb:51:19:52:d2:80:
                    43:f9:f4:5a:22:c8:8e:d0:bd:ab:fc:1d:49:f6:99:
                    25:73:07:46:73:23:2d:52:c7:50:e4:13:ba:9e:c3:
                    ea:37:85:a9:2c:f5:79:41:a0:69:84:70:a1:8b:dd:
                    ae:0e:c9:4c:bf:b5:3c:97:81:ef:38:f8:9a:64:b9:
                    31:24:4c:87:3b:8a:bf:b8:28:70:7f:c6:89:38:6c:
                    0c:81:88:02:6d:a4:cb:e3:4c:86:21:90:42:85:0d:
                    4c:7a:17:6a:26:a2:76:d9:20:d7:48:b6:4a:07:5d:
                    df:a4:56:be:9f:07:d6:fc:8d:0b:f3:e0:77:03:50:
                    56:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                12:DD:60:82:43:71:98:30:A8:A5:AD:4E:7D:D2:E3:28:F1:06:6B:9A
            X509v3 Authority Key Identifier:
                keyid:14:7E:97:56:43:9D:9D:B7:15:61:34:AC:78:F9:1C:23:3B:93:92:A7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A912CB2A/E01C7A8490E011EBA105871FC4F9AE02/FH6XVkOdnbcVYTSsePkcIzuTkqc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FH6XVkOdnbcVYTSsePkcIzuTkqc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912CB2A/E01C7A8490E011EBA105871FC4F9AE02/8A0E66D647FC11EE838F6160C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  2403:6900:c000::/36

    Signature Algorithm: sha256WithRSAEncryption
         9c:f6:31:7d:7e:9a:a6:76:9d:f3:3d:2b:cb:4a:fa:4a:30:1e:
         58:5c:c9:1c:74:1f:0f:06:da:d6:b0:8d:ea:6c:c4:81:32:22:
         3a:1f:ff:35:23:54:41:35:5c:f6:d9:1c:c4:74:90:7e:87:e6:
         34:a9:ec:0a:40:f9:b9:a7:95:e0:f1:3d:e0:2e:92:8b:47:96:
         31:cb:61:3b:5f:04:52:da:e9:e0:12:b3:fa:bd:dd:57:87:28:
         25:e5:cd:4c:32:d4:b7:b0:04:ff:22:06:27:da:7c:79:3e:cb:
         5b:ef:6d:3d:fd:e0:56:ab:c1:14:31:c8:fb:b6:07:d8:6d:b2:
         a1:63:d6:b1:c1:d8:5c:49:77:f5:66:4d:67:63:60:1f:c8:24:
         76:33:dd:97:52:9c:50:c7:4e:4f:00:57:aa:d3:80:cf:16:f7:
         a4:06:fb:8d:fb:14:fc:13:3a:7e:2d:a0:18:9b:ed:c4:e2:91:
         cc:c7:64:fb:d0:86:03:90:ba:af:52:d1:30:ff:cc:7f:55:f4:
         12:15:a3:e7:f3:9a:45:fd:de:0a:5c:23:cf:a5:bf:f4:ce:19:
         96:da:0e:b3:b4:34:f9:9b:ca:3f:26:b9:da:b1:19:2b:94:3b:
         0f:72:7c:17:50:dd:a2:f5:78:03:85:3d:56:91:8b:59:94:12:
         b6:f2:29:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 1 02:55:15 2024 by rpki-client on console-fra.rpki-client.org