Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A917A66F/8FCC9D28C6F911EE97E6FB1DC4F9AE02/467B9370E1B311EE9D77BF36C4F9AE02.roa
File:                     467B9370E1B311EE9D77BF36C4F9AE02.roa (raw, json)
Hash identifier:          IbMf+jMoAKRjT7jXic3piCLKte/4GxfyHzyQEoYmfpg=
Subject key identifier:   BB:5E:D2:29:7E:FA:CB:23:06:5B:CA:87:7B:E4:6D:71:46:E5:B7:E9
Certificate issuer:       /CN=A917A66F/serialNumber=B22C3D0ABCD3919486A3E61E8D788923922BF6A5
Certificate serial:       19
Authority key identifier: B2:2C:3D:0A:BC:D3:91:94:86:A3:E6:1E:8D:78:89:23:92:2B:F6:A5
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/siw9CrzTkZSGo-YejXiJI5Ir9qU.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A917A66F/8FCC9D28C6F911EE97E6FB1DC4F9AE02/467B9370E1B311EE9D77BF36C4F9AE02.roa
Signing time:             Thu 14 Mar 2024 03:31:00 +0000
ROA not before:           Thu 14 Mar 2024 03:31:00 +0000
ROA not after:            Thu 31 Oct 2024 00:00:00 +0000
asID:                     137897
IP address blocks:        2403:27c0:c03::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A917A66F/8FCC9D28C6F911EE97E6FB1DC4F9AE02/siw9CrzTkZSGo-YejXiJI5Ir9qU.crl
                          rsync://rpki.apnic.net/member_repository/A917A66F/8FCC9D28C6F911EE97E6FB1DC4F9AE02/siw9CrzTkZSGo-YejXiJI5Ir9qU.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/siw9CrzTkZSGo-YejXiJI5Ir9qU.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 08 Jun 2024 08:57:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 25 (0x19)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A917A66F/serialNumber=B22C3D0ABCD3919486A3E61E8D788923922BF6A5
        Validity
            Not Before: Mar 14 03:31:00 2024 GMT
            Not After : Oct 31 00:00:00 2024 GMT
        Subject: CN=65f26f73-9517
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:c2:13:05:5b:63:07:be:3d:ab:14:77:61:59:
                    13:c2:a2:6d:aa:dd:03:4e:a0:79:40:81:6b:ca:72:
                    5c:f6:5b:bf:a4:ef:77:21:50:93:db:78:ad:94:b6:
                    3c:d3:de:d2:ce:11:3d:8b:e6:79:06:1a:67:5c:9c:
                    2a:a4:e3:23:21:88:fe:00:4d:35:26:fc:81:e9:d0:
                    ed:af:f3:10:b7:5b:cb:e8:79:84:ab:a8:a1:c5:2e:
                    fc:1b:67:65:24:25:c7:a8:5d:0a:27:4a:18:3c:49:
                    e7:06:3e:2c:23:cd:dd:e9:63:85:f4:c4:dd:d0:06:
                    00:47:ab:06:2a:97:e8:31:04:85:f3:ec:c2:a4:e2:
                    52:95:f6:5e:80:0e:ba:c0:0d:6b:2e:f7:b7:0a:65:
                    9d:3c:ed:47:53:46:27:fb:0d:31:de:2b:a3:1b:f1:
                    03:3a:c0:da:13:89:84:7d:74:b9:6b:54:f7:94:bc:
                    a2:a0:eb:93:69:1b:b7:84:e6:07:ab:38:c9:a5:7a:
                    bf:32:97:d1:34:cb:ba:01:96:d1:3a:1f:9c:94:2f:
                    29:e0:a7:8c:3c:9c:be:96:d1:68:59:db:3d:ba:42:
                    d6:88:c4:f7:28:70:a8:34:8a:04:ef:8b:8c:3a:04:
                    ba:38:62:cf:4e:ac:d4:ef:fe:05:b2:e5:ac:0e:f6:
                    4f:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BB:5E:D2:29:7E:FA:CB:23:06:5B:CA:87:7B:E4:6D:71:46:E5:B7:E9
            X509v3 Authority Key Identifier:
                keyid:B2:2C:3D:0A:BC:D3:91:94:86:A3:E6:1E:8D:78:89:23:92:2B:F6:A5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A917A66F/8FCC9D28C6F911EE97E6FB1DC4F9AE02/siw9CrzTkZSGo-YejXiJI5Ir9qU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/siw9CrzTkZSGo-YejXiJI5Ir9qU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917A66F/8FCC9D28C6F911EE97E6FB1DC4F9AE02/467B9370E1B311EE9D77BF36C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  2403:27c0:c03::/48

    Signature Algorithm: sha256WithRSAEncryption
         c1:9b:68:7f:79:c3:b3:28:8d:92:e2:c9:93:67:95:be:af:f1:
         b4:d3:36:a8:38:00:46:c7:4e:c8:1b:b3:ce:89:a8:c4:75:ce:
         76:f9:5a:0f:99:74:60:be:3b:61:21:44:82:11:ce:3b:ec:4e:
         f4:d0:61:83:9b:ef:91:7a:2f:03:96:60:80:35:51:af:42:3f:
         fd:90:3a:ed:b7:f4:5c:fd:0e:7b:3f:b5:d4:0b:80:02:f5:5a:
         b4:89:bd:07:aa:f9:4a:85:e3:34:33:7f:4b:6c:74:fb:80:be:
         3b:3e:39:ce:4b:fc:28:a5:24:2a:98:15:70:cc:36:7b:ef:9e:
         85:3f:db:8a:74:e7:aa:15:f4:7f:5c:0d:28:21:48:69:97:a2:
         ee:31:9b:3e:69:58:a2:31:1d:2e:ed:b8:35:52:39:55:35:bf:
         48:5e:f0:af:52:07:e9:7b:4d:64:6c:ac:bc:dc:18:4f:26:2d:
         23:42:9b:fb:2c:15:e0:c2:35:a9:f0:9c:61:1a:6f:45:c3:88:
         26:95:c4:8d:2e:4d:0d:06:ad:77:fe:33:1c:b8:63:f6:9b:40:
         49:7c:cb:f4:a1:44:b2:16:0f:33:89:10:c4:d5:aa:ac:d1:3a:
         85:e0:ec:f9:f6:97:89:d6:98:e6:36:59:bd:47:b4:3e:45:83:
         fd:e9:b1:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 1 11:14:29 2024 by rpki-client on console-fra.rpki-client.org