Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91618BC/ED7B62AC5D8711EC9C1D702CC4F9AE02/1F1C0F0C64F711EC8F36652AC4F9AE02.roa
File:                     1F1C0F0C64F711EC8F36652AC4F9AE02.roa (raw, json)
Hash identifier:          EBWqqHjiOYwW5Q04CnIvQFsJhjfb1lqpgTe9LjYpnOo=
Subject key identifier:   F8:A1:12:4A:5F:FF:FB:E1:98:80:5E:4D:EE:77:C0:D2:D7:57:F4:B9
Certificate issuer:       /CN=A91618BC/serialNumber=1AEBCD82D7028343B745AD406739CDB92D4DFB77
Certificate serial:       03A6
Authority key identifier: 1A:EB:CD:82:D7:02:83:43:B7:45:AD:40:67:39:CD:B9:2D:4D:FB:77
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GuvNgtcCg0O3Ra1AZznNuS1N-3c.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91618BC/ED7B62AC5D8711EC9C1D702CC4F9AE02/1F1C0F0C64F711EC8F36652AC4F9AE02.roa
Signing time:             Wed 31 Jan 2024 03:05:16 +0000
ROA not before:           Wed 31 Jan 2024 03:05:15 +0000
ROA not after:            Mon 31 Mar 2025 00:00:00 +0000
asID:                     141173
IP address blocks:        2407:9240:2400::/40 maxlen: 40

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91618BC/ED7B62AC5D8711EC9C1D702CC4F9AE02/GuvNgtcCg0O3Ra1AZznNuS1N-3c.crl
                          rsync://rpki.apnic.net/member_repository/A91618BC/ED7B62AC5D8711EC9C1D702CC4F9AE02/GuvNgtcCg0O3Ra1AZznNuS1N-3c.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GuvNgtcCg0O3Ra1AZznNuS1N-3c.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 04 May 2024 02:43:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 934 (0x3a6)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91618BC/serialNumber=1AEBCD82D7028343B745AD406739CDB92D4DFB77
        Validity
            Not Before: Jan 31 03:05:15 2024 GMT
            Not After : Mar 31 00:00:00 2025 GMT
        Subject: CN=65b9b8eb-5a5e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:63:45:54:6a:b1:bf:7e:7f:e6:7a:88:09:2e:
                    80:93:7f:75:05:39:83:6f:29:7e:fd:26:23:93:30:
                    a5:0f:4f:ad:01:8f:fb:6c:d2:22:96:74:0f:ad:ec:
                    67:96:a1:ee:98:47:4d:e1:1f:a7:43:3b:9d:15:4f:
                    e9:6c:1d:d3:da:0e:8a:8a:ee:da:00:10:13:12:c3:
                    4d:d0:fa:ad:95:fc:d2:17:08:bb:8f:be:cb:76:09:
                    68:4b:04:6a:a2:c4:88:d9:47:ce:3d:6d:cd:1a:9e:
                    9d:26:02:87:ec:7c:a8:06:48:8e:57:0e:ac:ae:f3:
                    c3:8e:ac:01:e4:de:5b:2b:72:47:2b:29:17:d4:2b:
                    88:61:98:f8:b7:1f:33:02:05:5f:dd:d3:4b:93:53:
                    03:b6:e4:3d:82:92:cb:4f:78:2d:3a:76:cb:d2:2d:
                    88:4c:a0:b1:4b:b9:9b:5e:54:0e:39:ce:10:77:cd:
                    83:91:c1:8e:30:d3:cc:35:51:ec:0a:d1:41:80:7b:
                    b9:79:b8:fe:ba:e4:60:de:63:59:3c:65:1c:af:76:
                    ea:d9:e2:ff:12:ef:d8:4b:63:65:0c:95:0f:b3:3d:
                    21:dd:6f:d3:47:67:39:23:60:7b:9e:c3:45:d8:cd:
                    70:b6:dc:70:5f:54:f4:e0:a3:63:0b:d8:21:a0:3a:
                    24:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F8:A1:12:4A:5F:FF:FB:E1:98:80:5E:4D:EE:77:C0:D2:D7:57:F4:B9
            X509v3 Authority Key Identifier:
                keyid:1A:EB:CD:82:D7:02:83:43:B7:45:AD:40:67:39:CD:B9:2D:4D:FB:77

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91618BC/ED7B62AC5D8711EC9C1D702CC4F9AE02/GuvNgtcCg0O3Ra1AZznNuS1N-3c.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GuvNgtcCg0O3Ra1AZznNuS1N-3c.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91618BC/ED7B62AC5D8711EC9C1D702CC4F9AE02/1F1C0F0C64F711EC8F36652AC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  2407:9240:2400::/40

    Signature Algorithm: sha256WithRSAEncryption
         14:d1:81:7b:4e:14:24:bf:97:ae:b2:30:0a:d3:46:b9:de:f6:
         48:03:fa:a0:ac:89:8e:2a:ee:3a:cf:17:34:56:1a:13:1f:6c:
         3f:4f:e8:9c:77:c4:53:bd:0b:36:70:d6:ee:6e:c2:d0:08:61:
         62:a9:c1:28:ae:d2:13:47:dd:52:03:54:62:4d:57:a2:47:1e:
         11:46:ce:60:6f:aa:38:42:e7:96:a9:e1:f4:6d:fc:f8:32:5c:
         78:48:13:29:2f:88:b8:ca:e8:b1:5d:c7:9b:76:aa:74:51:52:
         6c:c8:a4:e6:b0:48:b0:7d:3a:91:37:d8:c2:05:ad:5e:87:58:
         9f:a2:a9:22:8a:b7:b4:31:ca:61:5f:b9:d1:da:a1:33:aa:55:
         a7:5f:5d:2f:a3:46:fc:85:d0:85:07:e3:52:ba:e9:f0:eb:03:
         0c:e1:b0:a7:97:5d:0d:4a:5a:33:ca:e2:c6:c7:c5:88:42:72:
         39:c8:97:57:e4:da:3d:60:07:14:fc:0b:14:9a:41:4a:d4:87:
         f4:52:33:56:bb:4e:8e:50:40:d4:ea:43:a2:8e:7d:be:cc:85:
         fc:5e:ad:ac:be:a6:82:cc:81:7d:8c:0c:cb:f4:f1:eb:4b:15:
         6e:2a:a6:31:f6:3b:9d:0a:ec:f5:d3:0c:0e:15:5a:7e:ae:5c:
         7e:f8:a9:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 27 10:19:01 2024 by rpki-client on console-ams.rpki-client.org