Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A916DB72/8611E62E31F411EFAE91A00CC4F9AE02/92F925C231F511EFA1744F0EC4F9AE02.roa
File:                     92F925C231F511EFA1744F0EC4F9AE02.roa (raw, json)
Hash identifier:          ys7Tf3/LcQFVZYWL3i7WWzdqMmvmM++iU4ympKZhLhE=
Subject key identifier:   1D:B1:30:27:CF:CB:64:DD:95:28:E0:13:DD:9D:6D:E3:BC:0C:5A:3D
Certificate issuer:       /CN=A916DB72/serialNumber=3393F9D070B2E70949ACA2AACC8E65E890E74099
Certificate serial:       02
Authority key identifier: 33:93:F9:D0:70:B2:E7:09:49:AC:A2:AA:CC:8E:65:E8:90:E7:40:99
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/M5P50HCy5wlJrKKqzI5l6JDnQJk.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A916DB72/8611E62E31F411EFAE91A00CC4F9AE02/92F925C231F511EFA1744F0EC4F9AE02.roa
Signing time:             Mon 24 Jun 2024 06:47:08 +0000
ROA not before:           Mon 24 Jun 2024 06:47:08 +0000
ROA not after:            Tue 30 Sep 2025 00:00:00 +0000
asID:                     152925
IP address blocks:        2001:df3:f6c0::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A916DB72/8611E62E31F411EFAE91A00CC4F9AE02/M5P50HCy5wlJrKKqzI5l6JDnQJk.crl
                          rsync://rpki.apnic.net/member_repository/A916DB72/8611E62E31F411EFAE91A00CC4F9AE02/M5P50HCy5wlJrKKqzI5l6JDnQJk.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/M5P50HCy5wlJrKKqzI5l6JDnQJk.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 30 Nov 2024 02:50:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2 (0x2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A916DB72/serialNumber=3393F9D070B2E70949ACA2AACC8E65E890E74099
        Validity
            Not Before: Jun 24 06:47:08 2024 GMT
            Not After : Sep 30 00:00:00 2025 GMT
        Subject: CN=6679166b-6695
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:f6:8f:d6:95:b6:a4:38:c7:c7:5b:94:95:c4:
                    df:51:05:18:5a:a5:12:98:4a:3d:85:66:f8:ab:34:
                    c6:cb:a8:17:96:0f:db:03:e2:8b:ed:3d:01:50:74:
                    cd:e7:d3:02:d4:6b:87:f1:20:b8:6d:92:e5:23:e5:
                    43:67:06:9f:78:b2:b8:74:89:01:81:ea:2a:00:29:
                    9b:30:61:cd:e6:f9:92:ad:72:46:00:9a:93:10:7d:
                    41:a7:2d:c4:6c:67:78:ce:13:58:2a:64:91:fa:80:
                    2f:32:34:e9:58:0e:e9:af:68:5a:f4:e9:9b:db:8c:
                    37:f9:58:99:1e:19:01:a5:2b:d2:d1:4d:9f:7a:b0:
                    65:42:7f:f6:a4:d5:2d:ce:9c:9e:18:c3:3d:ab:01:
                    73:1b:3e:46:76:fe:8c:65:24:6d:70:a3:b2:92:68:
                    0f:7e:6a:69:9d:77:b9:64:aa:2d:66:29:b3:91:25:
                    43:3f:16:1e:a9:8e:09:00:15:07:2a:76:b5:ee:9b:
                    5a:3f:1b:62:22:6a:85:c8:a3:99:07:21:a4:7c:20:
                    9d:29:ac:99:ff:c4:83:6a:88:da:4d:e1:77:40:3f:
                    49:4f:ba:ba:df:f4:00:9c:86:96:33:92:5a:88:ed:
                    20:ba:4a:1a:24:41:cb:cd:aa:ec:87:ed:01:8f:3b:
                    c6:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1D:B1:30:27:CF:CB:64:DD:95:28:E0:13:DD:9D:6D:E3:BC:0C:5A:3D
            X509v3 Authority Key Identifier:
                keyid:33:93:F9:D0:70:B2:E7:09:49:AC:A2:AA:CC:8E:65:E8:90:E7:40:99

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A916DB72/8611E62E31F411EFAE91A00CC4F9AE02/M5P50HCy5wlJrKKqzI5l6JDnQJk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/M5P50HCy5wlJrKKqzI5l6JDnQJk.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916DB72/8611E62E31F411EFAE91A00CC4F9AE02/92F925C231F511EFA1744F0EC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:df3:f6c0::/48

    Signature Algorithm: sha256WithRSAEncryption
         99:8e:0a:43:20:02:26:26:eb:34:64:10:13:c8:c1:da:6e:fc:
         b5:7d:25:b3:9c:40:52:23:81:87:59:06:d2:1f:cb:51:01:7e:
         6a:1b:31:f3:e7:71:9e:6e:1d:23:6a:cf:7d:29:c7:0b:ec:48:
         8b:0b:ef:63:d1:0d:dd:99:26:9c:12:e9:0c:76:24:44:17:3e:
         99:89:27:f8:3a:a3:72:f9:fb:c4:fd:27:bb:8d:f4:2e:7e:26:
         2d:0b:45:d1:ce:58:5a:fb:36:8e:4c:cc:16:06:f2:88:fc:da:
         d4:be:10:35:0d:1f:b4:29:e8:60:ce:43:6f:59:ef:0e:b2:62:
         0f:af:91:76:b8:6c:07:81:51:52:d5:1e:bc:07:e4:aa:2b:dc:
         c0:a7:43:0c:43:33:3f:2c:17:79:f9:0a:d8:4a:b3:9b:83:e0:
         e8:48:1c:9a:0a:95:3b:91:9a:99:0b:16:a5:c9:ff:3c:68:ce:
         30:e7:49:47:f8:af:8c:4e:34:48:63:61:7c:03:3b:66:ff:7d:
         fa:ec:3f:fc:cf:b3:25:c8:93:16:05:b4:52:39:61:99:72:7b:
         07:5d:ba:55:bb:0e:3d:cf:64:8a:c0:b2:64:1d:54:18:a7:15:
         e9:23:63:e0:00:eb:98:d6:54:c6:c5:67:f9:fe:2a:1a:d7:df:
         60:9e:56:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 06:13:08 2024 by rpki-client on console-ams.rpki-client.org