Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91697FA/27F83B701D8311E2932921D808B02CD2/4EE07E481F7F11ECA7242F6CC4F9AE02.roa
File:                     4EE07E481F7F11ECA7242F6CC4F9AE02.roa (raw, json)
Hash identifier:          M9fI6A69PBlrtaZv9mFzlc19/hv0PUmlZYVxL/+othI=
Subject key identifier:   B5:EA:26:2C:51:59:31:99:76:D2:3F:D1:29:F6:DD:7C:E6:D8:FF:47
Certificate issuer:       /CN=A91697FA/serialNumber=9F82DBC9466312C5BA2E921279302400956A982A
Certificate serial:       33DB
Authority key identifier: 9F:82:DB:C9:46:63:12:C5:BA:2E:92:12:79:30:24:00:95:6A:98:2A
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/n4LbyUZjEsW6LpISeTAkAJVqmCo.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91697FA/27F83B701D8311E2932921D808B02CD2/4EE07E481F7F11ECA7242F6CC4F9AE02.roa
Signing time:             Tue 20 Jun 2023 14:50:17 +0000
ROA not before:           Tue 20 Jun 2023 14:50:17 +0000
ROA not after:            Thu 31 Oct 2024 00:00:00 +0000
asID:                     134461
IP address blocks:        2405:a000:20::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91697FA/27F83B701D8311E2932921D808B02CD2/n4LbyUZjEsW6LpISeTAkAJVqmCo.crl
                          rsync://rpki.apnic.net/member_repository/A91697FA/27F83B701D8311E2932921D808B02CD2/n4LbyUZjEsW6LpISeTAkAJVqmCo.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/n4LbyUZjEsW6LpISeTAkAJVqmCo.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 07 Jun 2024 14:23:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 13275 (0x33db)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91697FA/serialNumber=9F82DBC9466312C5BA2E921279302400956A982A
        Validity
            Not Before: Jun 20 14:50:17 2023 GMT
            Not After : Oct 31 00:00:00 2024 GMT
        Subject: CN=6491bca8-8e79
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:46:bd:80:1f:32:57:6b:e1:ee:49:04:7e:e8:
                    70:dd:a3:0b:f3:6a:0b:5e:1e:77:7e:08:75:69:c6:
                    c4:5f:3e:b6:f0:7e:35:89:18:82:03:90:54:4e:10:
                    c0:87:c8:51:06:af:95:91:2a:9f:f3:be:f9:ff:fb:
                    8d:bc:cb:15:2d:47:f3:68:eb:8a:5d:b9:91:01:32:
                    cb:a9:7c:34:ad:19:61:54:33:a6:18:93:f0:6d:cd:
                    42:4f:03:f2:6c:25:03:da:bc:eb:47:44:56:9d:8e:
                    6a:c4:fd:0b:8a:29:3a:4e:60:82:ed:83:ee:43:e7:
                    a0:39:36:b0:6e:e0:e4:b4:f2:93:90:ea:e6:34:16:
                    86:2c:be:98:48:a8:30:7b:9f:8b:e4:6c:ea:c9:83:
                    42:d1:a8:fd:91:32:db:c5:1a:60:04:50:89:ba:2b:
                    2c:d4:e6:ec:ca:41:3e:31:bb:6d:9d:ce:06:85:6b:
                    4a:c7:92:5f:f0:1c:74:9e:e6:71:0c:55:b8:a4:45:
                    f4:fb:fb:92:dd:51:9c:4b:e5:b1:d5:30:2b:7c:60:
                    59:04:86:0c:b3:55:49:02:39:16:e5:9b:b1:65:37:
                    a4:f8:46:6a:5d:b1:e0:b5:6a:9e:f2:9a:b4:b8:9c:
                    c7:f8:53:e6:b5:e6:70:e2:08:8b:92:8f:2c:72:f6:
                    90:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B5:EA:26:2C:51:59:31:99:76:D2:3F:D1:29:F6:DD:7C:E6:D8:FF:47
            X509v3 Authority Key Identifier:
                keyid:9F:82:DB:C9:46:63:12:C5:BA:2E:92:12:79:30:24:00:95:6A:98:2A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91697FA/27F83B701D8311E2932921D808B02CD2/n4LbyUZjEsW6LpISeTAkAJVqmCo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/n4LbyUZjEsW6LpISeTAkAJVqmCo.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91697FA/27F83B701D8311E2932921D808B02CD2/4EE07E481F7F11ECA7242F6CC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  2405:a000:20::/48

    Signature Algorithm: sha256WithRSAEncryption
         64:22:fc:a1:65:d9:48:43:6e:dc:f7:52:27:b6:ad:c7:69:ce:
         16:ea:16:a1:20:cb:56:8c:1f:6a:a1:82:27:48:70:35:0c:6b:
         4a:33:0b:b7:3f:ae:32:5f:54:11:7c:4d:c5:58:2b:22:a5:cb:
         a5:10:0c:5b:42:4e:21:69:55:47:5c:61:9a:09:b2:11:89:a9:
         09:c6:c0:bb:4a:bc:e6:9a:0e:2a:d7:3b:76:cb:54:75:47:af:
         74:29:75:55:74:30:5b:cc:e7:02:9c:f3:88:da:ff:68:39:41:
         40:7f:e1:81:69:ea:37:2c:55:33:18:69:89:cc:26:e7:c3:32:
         f7:d8:a3:6f:c1:61:d7:34:b1:1e:5b:77:37:76:d2:ce:7f:df:
         25:bb:20:a3:85:ee:76:d0:13:c9:0d:11:85:83:65:50:59:b0:
         9f:ad:2f:58:bd:fc:a6:9d:16:fb:8c:5e:82:13:91:92:00:57:
         fb:6a:ad:fb:e3:56:07:dc:e3:c9:cf:2f:9d:e9:a4:cb:95:bb:
         5d:b4:7b:09:ba:95:33:8c:78:94:28:29:49:bd:c0:3a:c3:f0:
         b5:a0:e6:03:dd:93:95:62:b6:8e:9d:b4:62:cf:7c:3c:0e:64:
         eb:de:5e:a2:d3:14:bc:35:39:f9:2c:6c:ed:ab:c1:53:38:cb:
         76:b9:82:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 31 16:40:57 2024 by rpki-client on console-ams.rpki-client.org