Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A914BC7A/4C528F78450311E2BDCA1F732979BB20/EF1D0466455311E98FA31F68C4F9AE02.roa
File:                     EF1D0466455311E98FA31F68C4F9AE02.roa (raw, json)
Hash identifier:          OqgL79PVwss/L9YJSqF29Xvq2wNOU6UYyi3JyoLgqms=
Subject key identifier:   11:2F:0C:B2:D3:3A:47:75:2F:6A:94:37:25:00:28:20:4D:5F:5B:5A
Certificate issuer:       /CN=A914BC7A/serialNumber=5312F399A6F7EB0DDCD51C039F83F7B7A47A5F09
Certificate serial:       3434
Authority key identifier: 53:12:F3:99:A6:F7:EB:0D:DC:D5:1C:03:9F:83:F7:B7:A4:7A:5F:09
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UxLzmab36w3c1RwDn4P3t6R6Xwk.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A914BC7A/4C528F78450311E2BDCA1F732979BB20/EF1D0466455311E98FA31F68C4F9AE02.roa
Signing time:             Tue 20 Aug 2024 15:31:18 +0000
ROA not before:           Tue 20 Aug 2024 15:31:18 +0000
ROA not after:            Mon 01 Dec 2025 00:00:00 +0000
asID:                     55433
IP address blocks:        2405:8a00:6029::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A914BC7A/4C528F78450311E2BDCA1F732979BB20/UxLzmab36w3c1RwDn4P3t6R6Xwk.crl
                          rsync://rpki.apnic.net/member_repository/A914BC7A/4C528F78450311E2BDCA1F732979BB20/UxLzmab36w3c1RwDn4P3t6R6Xwk.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UxLzmab36w3c1RwDn4P3t6R6Xwk.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 29 Nov 2024 15:22:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 13364 (0x3434)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A914BC7A/serialNumber=5312F399A6F7EB0DDCD51C039F83F7B7A47A5F09
        Validity
            Not Before: Aug 20 15:31:18 2024 GMT
            Not After : Dec  1 00:00:00 2025 GMT
        Subject: CN=66c4b6c6-465a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:78:1e:ac:76:4b:ec:29:eb:39:76:6f:f4:f9:
                    f6:2f:4a:02:a5:35:8f:98:fd:a0:de:aa:6c:f3:56:
                    f8:07:ee:02:2b:4b:2b:87:22:a1:a2:d1:ea:60:dd:
                    ff:bc:c0:da:37:6e:ba:af:a6:fc:23:8a:47:50:9a:
                    14:ad:65:6a:64:13:da:bd:47:9d:65:ef:fd:5f:11:
                    38:b2:e2:41:b8:55:24:71:d3:27:fc:8b:90:f8:6f:
                    42:2d:fe:94:68:d7:ce:1e:8d:d0:08:6a:79:64:44:
                    12:18:b1:30:dc:42:fc:5c:48:2f:1e:99:6f:e8:dc:
                    d2:72:e1:2e:79:ae:6a:0b:08:d6:72:30:9c:51:38:
                    1e:36:0f:26:5c:ab:16:40:4f:ae:74:25:74:77:6f:
                    00:99:05:48:0e:93:e6:58:45:2f:b7:a7:77:94:8c:
                    65:f2:9c:7e:39:18:57:5a:39:66:e1:6d:80:10:19:
                    9e:cb:41:f0:11:3a:4b:09:1f:ff:b1:40:19:02:83:
                    04:a3:26:15:6b:a1:f7:2e:f2:ec:aa:c3:e9:20:3c:
                    d4:7c:1c:6a:6d:c5:58:cf:f7:d1:fc:ea:ac:ea:74:
                    13:14:8c:c7:9a:2e:1e:cc:e0:b1:17:04:63:15:81:
                    0a:52:65:3b:3b:36:be:a5:ab:e7:5e:be:93:fb:ac:
                    c3:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                11:2F:0C:B2:D3:3A:47:75:2F:6A:94:37:25:00:28:20:4D:5F:5B:5A
            X509v3 Authority Key Identifier:
                keyid:53:12:F3:99:A6:F7:EB:0D:DC:D5:1C:03:9F:83:F7:B7:A4:7A:5F:09

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A914BC7A/4C528F78450311E2BDCA1F732979BB20/UxLzmab36w3c1RwDn4P3t6R6Xwk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UxLzmab36w3c1RwDn4P3t6R6Xwk.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914BC7A/4C528F78450311E2BDCA1F732979BB20/EF1D0466455311E98FA31F68C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  2405:8a00:6029::/48

    Signature Algorithm: sha256WithRSAEncryption
         93:5c:cc:84:84:00:0d:03:27:85:a1:e2:ed:48:9e:0c:11:54:
         9f:50:e3:56:49:36:13:77:f1:65:83:30:9e:a6:e0:1c:b9:43:
         91:cc:6b:e6:e5:69:42:48:49:11:9e:e8:cd:21:47:2e:46:03:
         99:7d:f0:85:73:98:f4:bf:e9:30:2b:26:8f:64:45:e3:10:85:
         ea:42:98:d0:59:1d:04:d0:a6:3d:1b:89:f9:aa:73:de:7e:8a:
         8d:a6:11:e2:88:3e:9e:fc:92:b6:ec:80:66:0f:fb:b2:62:0b:
         5e:79:61:08:d1:3e:81:dc:9f:58:8b:8e:1e:c8:7c:fd:68:34:
         62:50:1b:47:8d:7a:76:1c:0e:29:a7:e4:f5:be:05:6c:3d:e1:
         43:4c:34:c9:92:99:6c:e6:cb:e5:c8:e1:f8:5a:42:18:2a:16:
         47:93:1a:96:6d:ab:94:82:81:75:28:6d:28:6b:76:9f:bc:9a:
         77:c6:e1:4e:81:0d:fc:0c:11:6d:51:c1:31:fe:6f:f7:d2:e3:
         87:46:71:43:16:d9:c0:76:95:ab:36:85:d7:f3:e9:b5:28:d6:
         94:f9:2e:46:ea:2f:83:9b:4c:18:d2:03:d8:85:94:87:33:30:
         b4:22:1c:52:70:b6:c5:5e:13:6f:6b:18:c8:6c:a3:20:2e:62:
         ca:bb:4b:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 16:49:19 2024 by rpki-client on console-ams.rpki-client.org