Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A917CC94/66DEBE6447F011EA83E3E71BC4F9AE02/E1CA8E9C1E5F11EFA3C7AD2CC4F9AE02.roa
File:                     E1CA8E9C1E5F11EFA3C7AD2CC4F9AE02.roa (raw, json)
Hash identifier:          MWKLZiOc08RILxXpK+iaUMCsApmEE9erpdjwjbLbXdM=
Subject key identifier:   DF:8A:78:46:B3:3B:08:37:37:78:87:BF:D3:7B:85:4E:13:75:6B:7A
Certificate issuer:       /CN=A917CC94/serialNumber=8BD83AD738DC4C57984DC2ECB21D5E9019BBC8CA
Certificate serial:       0A38
Authority key identifier: 8B:D8:3A:D7:38:DC:4C:57:98:4D:C2:EC:B2:1D:5E:90:19:BB:C8:CA
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/i9g61zjcTFeYTcLssh1ekBm7yMo.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A917CC94/66DEBE6447F011EA83E3E71BC4F9AE02/E1CA8E9C1E5F11EFA3C7AD2CC4F9AE02.roa
Signing time:             Thu 30 May 2024 08:37:43 +0000
ROA not before:           Thu 30 May 2024 08:37:43 +0000
ROA not after:            Sun 02 Mar 2025 00:00:00 +0000
asID:                     138473
IP address blocks:        2404:a40::/32 maxlen: 34

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A917CC94/66DEBE6447F011EA83E3E71BC4F9AE02/i9g61zjcTFeYTcLssh1ekBm7yMo.crl
                          rsync://rpki.apnic.net/member_repository/A917CC94/66DEBE6447F011EA83E3E71BC4F9AE02/i9g61zjcTFeYTcLssh1ekBm7yMo.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/i9g61zjcTFeYTcLssh1ekBm7yMo.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 29 Nov 2024 19:21:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2616 (0xa38)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A917CC94/serialNumber=8BD83AD738DC4C57984DC2ECB21D5E9019BBC8CA
        Validity
            Not Before: May 30 08:37:43 2024 GMT
            Not After : Mar  2 00:00:00 2025 GMT
        Subject: CN=66583ad7-b26b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:c6:de:6e:d8:69:e3:b1:7d:64:31:75:15:2f:
                    e3:1a:88:65:a3:d5:b4:04:83:3b:16:6c:1e:8a:58:
                    0f:9e:3e:12:cf:b6:73:45:e6:db:72:67:86:ef:18:
                    9f:24:8b:74:57:5f:26:cd:e6:ab:a2:c0:bf:95:1c:
                    81:90:44:95:32:76:8a:33:5f:15:d0:e8:b2:14:0e:
                    13:18:b6:22:0c:f8:db:11:95:28:14:e5:2e:51:d8:
                    17:3a:f2:19:4b:84:08:74:8d:a7:af:42:ef:d3:a2:
                    ad:b1:18:67:69:14:02:4d:17:76:6d:68:29:49:87:
                    9d:3c:49:54:da:57:22:9e:e6:30:05:f7:7b:70:f3:
                    1f:29:88:98:ef:d8:a0:4a:91:98:d5:f4:81:90:55:
                    6a:c5:54:ff:dc:03:fd:ed:73:4e:8d:51:d0:16:47:
                    ca:9e:ed:ee:1f:fb:28:27:1a:2f:38:60:a0:dd:df:
                    50:83:ae:96:96:ef:be:ee:35:89:80:6d:60:80:74:
                    a0:3d:34:64:53:0c:a1:7e:92:ae:5a:f0:57:cd:fc:
                    dc:2e:d9:4f:c2:cb:8c:8a:42:66:26:2e:8a:42:ad:
                    ff:f9:44:f2:8a:06:ea:78:91:42:d7:5f:f5:a5:32:
                    55:40:30:37:09:d1:16:8e:2d:1e:c0:52:ba:b3:a1:
                    a9:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DF:8A:78:46:B3:3B:08:37:37:78:87:BF:D3:7B:85:4E:13:75:6B:7A
            X509v3 Authority Key Identifier:
                keyid:8B:D8:3A:D7:38:DC:4C:57:98:4D:C2:EC:B2:1D:5E:90:19:BB:C8:CA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A917CC94/66DEBE6447F011EA83E3E71BC4F9AE02/i9g61zjcTFeYTcLssh1ekBm7yMo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/i9g61zjcTFeYTcLssh1ekBm7yMo.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917CC94/66DEBE6447F011EA83E3E71BC4F9AE02/E1CA8E9C1E5F11EFA3C7AD2CC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  2404:a40::/32

    Signature Algorithm: sha256WithRSAEncryption
         c4:94:f2:0f:9f:a2:f3:45:59:78:30:dd:2c:57:42:54:bb:64:
         a0:bf:eb:59:4a:ee:fc:3e:7f:f4:29:8f:fb:c2:59:c3:9d:2d:
         97:de:12:bd:09:5a:5f:e5:68:3f:83:c8:a4:5b:73:85:40:85:
         fc:68:e5:3b:95:be:51:df:08:b3:de:57:d2:f4:76:e2:02:ca:
         77:03:ff:b1:04:42:eb:e5:27:1c:55:57:41:9a:ef:6f:81:ef:
         32:9e:04:a2:e9:4c:88:1a:05:73:c9:08:72:13:3f:98:5c:df:
         e1:00:0d:2c:16:cf:09:b9:db:c5:2a:44:f8:c2:72:90:85:27:
         73:fb:e7:c3:47:a5:45:91:66:9a:ef:72:75:b4:95:7a:cb:1d:
         60:31:fe:87:3c:0d:05:36:ea:d4:83:59:17:b4:51:a0:41:d4:
         86:17:04:a5:68:d1:63:b9:f9:a9:b3:7b:d4:b0:18:1b:69:e0:
         ab:3c:e4:9e:ee:01:dd:f2:5a:34:18:5f:90:13:9d:82:7e:28:
         bf:ff:9c:d4:3f:12:23:8b:e3:d1:7f:b1:37:1a:1e:5e:df:d2:
         70:a3:a6:52:a2:87:1a:00:21:1b:65:65:a3:81:39:aa:cf:93:
         96:69:f6:89:5b:5b:7c:eb:1a:a7:4b:7f:41:49:a0:35:c6:88:
         54:a1:1e:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 21:05:29 2024 by rpki-client on console-fra.rpki-client.org