Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9148AC0/E4ED539431D811EE83006A41C4F9AE02/5D313B1C31DA11EEBE28A546C4F9AE02.roa
File:                     5D313B1C31DA11EEBE28A546C4F9AE02.roa (raw, json)
Hash identifier:          6x2mPRr8tFBujOQtjeq5IPE1uq8HvCy9BoUj1YCgyMk=
Subject key identifier:   6E:89:25:92:F9:F7:81:2A:E4:C9:F7:16:CA:47:DE:D5:D4:C0:43:73
Certificate issuer:       /CN=A9148AC0/serialNumber=766857BA3F7C728B680525AC41FA7CE2A1F0092D
Certificate serial:       38
Authority key identifier: 76:68:57:BA:3F:7C:72:8B:68:05:25:AC:41:FA:7C:E2:A1:F0:09:2D
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dmhXuj98cotoBSWsQfp84qHwCS0.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9148AC0/E4ED539431D811EE83006A41C4F9AE02/5D313B1C31DA11EEBE28A546C4F9AE02.roa
Signing time:             Sun 29 Oct 2023 05:57:11 +0000
ROA not before:           Sun 29 Oct 2023 05:57:11 +0000
ROA not after:            Mon 30 Dec 2024 00:00:00 +0000
asID:                     55891
IP address blocks:        2405:4cc1:100::/40 maxlen: 40
                          2405:4cc1:200::/40 maxlen: 40
                          2405:4cc1:300::/40 maxlen: 40
                          2405:4cc1:500::/40 maxlen: 40
                          2405:4cc1:600::/40 maxlen: 40
                          2405:4cc1:700::/40 maxlen: 40
                          2405:4cc1:800::/40 maxlen: 40
                          2405:4cc1:900::/40 maxlen: 40
                          2405:4cc1:b00::/40 maxlen: 40
                          2405:4cc1:1000::/40 maxlen: 40

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9148AC0/E4ED539431D811EE83006A41C4F9AE02/dmhXuj98cotoBSWsQfp84qHwCS0.crl
                          rsync://rpki.apnic.net/member_repository/A9148AC0/E4ED539431D811EE83006A41C4F9AE02/dmhXuj98cotoBSWsQfp84qHwCS0.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dmhXuj98cotoBSWsQfp84qHwCS0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 08 Jun 2024 07:43:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 56 (0x38)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9148AC0/serialNumber=766857BA3F7C728B680525AC41FA7CE2A1F0092D
        Validity
            Not Before: Oct 29 05:57:11 2023 GMT
            Not After : Dec 30 00:00:00 2024 GMT
        Subject: CN=653df437-7957
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:af:b2:d3:87:d9:f0:08:fb:e2:7a:2d:1f:fb:
                    b1:11:a1:82:72:c1:29:65:8f:9c:98:cf:78:13:92:
                    38:99:34:a8:49:42:32:0e:e4:91:6e:34:71:95:00:
                    01:3b:7f:ac:02:93:15:bc:11:f5:4e:7a:8b:ca:68:
                    1f:73:ee:b5:6a:8f:43:d1:5b:3f:ab:ee:aa:91:61:
                    8a:0f:4e:48:46:a2:41:95:1e:1b:65:5d:72:de:9d:
                    ec:a5:f1:dc:f9:55:d8:57:9f:18:bc:73:08:07:f0:
                    08:a0:60:89:d9:29:16:ea:0b:5e:95:e1:4d:db:6b:
                    98:9b:92:ca:25:a3:fc:9b:3c:ba:ea:0f:ba:5c:41:
                    ad:78:a2:5a:57:7c:04:ec:95:b5:b9:cf:e4:1e:6b:
                    3c:ed:92:7c:78:10:d2:bc:5b:50:bb:a4:87:ec:05:
                    86:83:5f:95:a8:ad:0c:e7:f7:08:aa:46:1e:17:c7:
                    ce:d2:3c:81:7f:f4:c7:2f:83:78:a0:b5:a7:4c:3f:
                    2e:68:cd:65:43:5a:52:e6:05:17:bf:08:5c:38:d5:
                    d6:8d:3a:61:1e:ae:9a:af:f4:69:7f:ec:3f:9f:b9:
                    70:aa:32:e2:ed:e6:79:57:b9:4b:b7:d6:5f:0b:bf:
                    76:30:4c:e3:97:1f:ca:e1:69:32:4d:4d:47:a9:71:
                    ae:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6E:89:25:92:F9:F7:81:2A:E4:C9:F7:16:CA:47:DE:D5:D4:C0:43:73
            X509v3 Authority Key Identifier:
                keyid:76:68:57:BA:3F:7C:72:8B:68:05:25:AC:41:FA:7C:E2:A1:F0:09:2D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9148AC0/E4ED539431D811EE83006A41C4F9AE02/dmhXuj98cotoBSWsQfp84qHwCS0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dmhXuj98cotoBSWsQfp84qHwCS0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9148AC0/E4ED539431D811EE83006A41C4F9AE02/5D313B1C31DA11EEBE28A546C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  2405:4cc1:100::-2405:4cc1:3ff:ffff:ffff:ffff:ffff:ffff
                  2405:4cc1:500::-2405:4cc1:9ff:ffff:ffff:ffff:ffff:ffff
                  2405:4cc1:b00::/40
                  2405:4cc1:1000::/40

    Signature Algorithm: sha256WithRSAEncryption
         87:df:ff:7c:d6:46:fa:1d:5b:a6:63:75:2d:d4:57:b1:92:eb:
         c5:0f:a6:ab:29:c9:53:e0:74:d8:a8:0c:75:7c:fd:e2:9a:d0:
         ad:1e:39:2f:6a:93:27:2f:c3:e4:8c:cc:43:ee:57:4f:4d:bc:
         10:2a:19:49:65:2d:d9:e3:26:59:6a:5d:84:f9:b7:db:1f:b6:
         55:91:12:99:c1:51:dc:70:aa:9f:69:79:5c:6f:7a:81:1c:97:
         f9:03:09:cf:c8:18:af:79:02:f5:b0:36:e8:14:e2:d7:19:e4:
         47:78:0f:a7:70:08:f5:44:42:9a:8d:d8:f4:5b:72:a1:bd:96:
         bb:b9:64:8d:c0:0a:d9:7e:7f:34:f5:29:8d:61:a9:f1:75:35:
         bf:41:a5:96:d4:cb:a4:c2:b5:34:ca:f2:57:be:ab:51:ab:76:
         0d:8b:ad:19:cf:59:32:7d:4c:1d:ea:f8:70:f5:e9:f0:52:eb:
         6f:f1:32:d4:b1:c2:dc:a2:ca:cd:28:ba:f9:9e:d3:e1:05:5d:
         e3:ec:81:1b:aa:8c:50:7d:57:c2:7a:c1:43:02:0f:c9:c3:0e:
         8b:b6:5b:77:7b:d2:07:e0:b6:43:c2:06:7e:f7:10:26:bb:cd:
         e6:c5:dd:d6:36:01:37:66:a1:8b:af:91:61:9b:ff:6f:e4:99:
         47:45:78:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 1 09:10:31 2024 by rpki-client on console-fra.rpki-client.org