Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A916B837/9D90AB62C15A11ECA44F5360C4F9AE02/E0AE0960457811EDA501504AC4F9AE02.roa
File:                     E0AE0960457811EDA501504AC4F9AE02.roa (raw, json)
Hash identifier:          RleZY/hYq9zhrkVLuNa22Q1WPIbwX43FRRfcBUVtX90=
Subject key identifier:   47:A7:DD:6A:3A:82:F0:4D:44:AD:79:AC:D7:41:25:99:6E:AC:99:51
Certificate issuer:       /CN=A916B837/serialNumber=F5522DE313844E96E3EBF38034ECA09BE2AA0AD5
Certificate serial:       02B2
Authority key identifier: F5:52:2D:E3:13:84:4E:96:E3:EB:F3:80:34:EC:A0:9B:E2:AA:0A:D5
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9VIt4xOETpbj6_OANOygm-KqCtU.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A916B837/9D90AB62C15A11ECA44F5360C4F9AE02/E0AE0960457811EDA501504AC4F9AE02.roa
Signing time:             Mon 13 May 2024 04:08:01 +0000
ROA not before:           Mon 13 May 2024 04:08:01 +0000
ROA not after:            Wed 30 Jul 2025 00:00:00 +0000
asID:                     202820
IP address blocks:        2400:70e0:bad::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A916B837/9D90AB62C15A11ECA44F5360C4F9AE02/9VIt4xOETpbj6_OANOygm-KqCtU.crl
                          rsync://rpki.apnic.net/member_repository/A916B837/9D90AB62C15A11ECA44F5360C4F9AE02/9VIt4xOETpbj6_OANOygm-KqCtU.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9VIt4xOETpbj6_OANOygm-KqCtU.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 08 Jun 2024 04:53:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 690 (0x2b2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A916B837/serialNumber=F5522DE313844E96E3EBF38034ECA09BE2AA0AD5
        Validity
            Not Before: May 13 04:08:01 2024 GMT
            Not After : Jul 30 00:00:00 2025 GMT
        Subject: CN=66419221-43a9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:56:5f:2a:da:af:d6:1f:3e:35:db:2a:8e:16:
                    e3:88:d8:97:72:78:d0:5e:15:71:30:ca:80:79:cb:
                    d6:36:ea:f1:8c:3e:3f:b6:0c:67:58:5b:e4:d7:27:
                    7f:9e:d4:42:f7:10:72:49:d0:8b:fb:4f:61:93:d8:
                    40:d1:fe:75:1c:d5:47:b6:97:30:80:e5:e9:9e:1a:
                    42:67:1f:c5:53:20:90:a8:d9:2a:63:74:ba:ce:7e:
                    29:fb:a6:36:47:fb:bc:15:4d:59:1f:51:65:bc:5f:
                    9a:49:4b:50:ac:bc:ee:41:43:c9:26:6b:8d:cc:80:
                    5b:c0:b6:4f:c9:c6:1a:4a:b1:e1:87:9b:b6:c4:a5:
                    eb:a7:c6:f2:43:d5:87:7d:ce:7d:21:4b:0a:45:aa:
                    8e:95:7f:40:97:77:54:88:75:5c:f0:1b:aa:a2:54:
                    9c:8d:41:86:d3:27:ef:6d:25:fe:78:4f:27:0b:44:
                    07:bd:6d:0c:a4:2c:81:f2:92:dd:d1:76:34:55:25:
                    0d:5d:12:eb:5a:2b:5c:b3:01:bd:55:45:2a:ae:b4:
                    6c:47:9c:cc:7a:1c:63:18:83:ea:b0:07:a9:d0:b3:
                    0e:f3:5f:d9:72:bf:ca:c9:e1:0a:a3:27:b4:ad:d7:
                    ed:e4:55:8f:20:4f:31:17:94:c1:7a:5e:53:14:41:
                    9c:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                47:A7:DD:6A:3A:82:F0:4D:44:AD:79:AC:D7:41:25:99:6E:AC:99:51
            X509v3 Authority Key Identifier:
                keyid:F5:52:2D:E3:13:84:4E:96:E3:EB:F3:80:34:EC:A0:9B:E2:AA:0A:D5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A916B837/9D90AB62C15A11ECA44F5360C4F9AE02/9VIt4xOETpbj6_OANOygm-KqCtU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9VIt4xOETpbj6_OANOygm-KqCtU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916B837/9D90AB62C15A11ECA44F5360C4F9AE02/E0AE0960457811EDA501504AC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  2400:70e0:bad::/48

    Signature Algorithm: sha256WithRSAEncryption
         55:95:73:59:24:fe:6c:81:69:34:40:4e:db:3b:af:5d:cf:9e:
         d4:9c:60:8e:c7:af:c8:90:9c:cf:1c:2a:81:21:9b:5f:b9:df:
         3f:27:90:7d:43:a5:0e:98:5b:35:71:72:2b:18:bb:72:cc:c7:
         d2:b3:66:92:c7:40:c0:7d:b0:ca:1f:9b:cc:6d:16:cc:d5:8e:
         04:81:d4:30:f2:74:99:3a:72:cf:9f:39:7d:ac:eb:90:7b:57:
         80:19:ac:51:7f:17:fc:e1:39:df:f8:04:80:6c:28:e9:e1:30:
         72:cf:de:f9:75:a1:81:09:64:fc:b2:85:2f:98:06:e6:41:6d:
         82:ac:67:83:8a:7b:ac:8c:aa:32:17:72:85:22:b2:d3:a0:3e:
         0a:35:48:a3:7a:1a:85:44:5b:3d:19:a1:3e:fe:4d:99:16:74:
         d3:d4:1c:3e:46:2b:f5:6f:e6:f0:b1:b0:08:f4:1c:45:aa:0c:
         8e:6d:9e:2b:88:48:9a:67:c2:dc:95:7c:90:0d:b9:b9:be:0f:
         54:54:c4:d5:dc:b7:ca:ab:9c:46:9a:22:b8:1e:30:4d:4f:69:
         77:36:b7:85:88:b2:5f:67:76:b9:2d:9d:15:b6:17:b4:93:00:
         c7:0f:f0:75:de:28:68:80:98:59:b3:1d:62:42:3e:f1:ee:56:
         92:79:ad:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 1 07:08:18 2024 by rpki-client on console-ams.rpki-client.org