Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A917ED5C/B56422D0860811EA92999571C4F9AE02/AE7DB208FCD111EEBE556018C4F9AE02.roa
File:                     AE7DB208FCD111EEBE556018C4F9AE02.roa (raw, json)
Hash identifier:          t6uC9gqAdFB6xPdZ6MvGubLm3J96rDj+dRZgDrkpmXA=
Subject key identifier:   83:37:A1:85:69:2A:1D:10:65:6F:A0:0C:0B:FC:37:A1:89:09:E8:A8
Certificate issuer:       /CN=A917ED5C/serialNumber=6FD2E1FE04EAFF9027CE5313150BE84DE11CA1A5
Certificate serial:       0C07
Authority key identifier: 6F:D2:E1:FE:04:EA:FF:90:27:CE:53:13:15:0B:E8:4D:E1:1C:A1:A5
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/b9Lh_gTq_5AnzlMTFQvoTeEcoaU.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A917ED5C/B56422D0860811EA92999571C4F9AE02/AE7DB208FCD111EEBE556018C4F9AE02.roa
Signing time:             Wed 17 Apr 2024 15:46:40 +0000
ROA not before:           Wed 17 Apr 2024 15:46:40 +0000
ROA not after:            Tue 30 Jul 2024 00:00:00 +0000
asID:                     152697
IP address blocks:        2406:840:fecd::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A917ED5C/B56422D0860811EA92999571C4F9AE02/b9Lh_gTq_5AnzlMTFQvoTeEcoaU.crl
                          rsync://rpki.apnic.net/member_repository/A917ED5C/B56422D0860811EA92999571C4F9AE02/b9Lh_gTq_5AnzlMTFQvoTeEcoaU.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/b9Lh_gTq_5AnzlMTFQvoTeEcoaU.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 15 May 2024 02:42:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3079 (0xc07)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A917ED5C/serialNumber=6FD2E1FE04EAFF9027CE5313150BE84DE11CA1A5
        Validity
            Not Before: Apr 17 15:46:40 2024 GMT
            Not After : Jul 30 00:00:00 2024 GMT
        Subject: CN=661feee0-95c6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:e0:67:7a:34:c6:8e:25:49:f4:8e:a4:90:09:
                    3e:da:62:d5:31:b8:b6:cf:0c:ba:d8:c9:e2:07:87:
                    42:b9:8f:e8:a0:9b:43:6e:20:9c:49:90:fd:db:27:
                    8c:37:49:66:b8:eb:bb:fa:e4:90:f8:c4:9a:1a:f3:
                    b4:79:c5:19:6d:29:0b:1c:5e:32:71:95:c6:bb:be:
                    e0:60:ba:59:1a:1b:d8:bc:16:80:fd:49:71:f6:3c:
                    4a:7b:dc:35:df:b6:27:b1:09:4a:d8:c7:aa:9e:2e:
                    ad:e1:ef:79:63:e0:38:52:c1:f3:35:48:63:bb:4c:
                    1f:06:4d:a0:ab:30:5d:72:87:14:5e:10:55:f2:3f:
                    03:05:e2:f9:f2:a3:3c:c7:c5:45:94:e0:99:11:58:
                    60:f5:a4:82:49:15:70:51:09:7f:f0:fb:49:61:31:
                    97:1e:90:e6:31:5b:61:91:3d:b4:15:9e:32:59:75:
                    44:58:fb:79:f3:4b:16:a8:08:19:69:8c:fb:b1:90:
                    d3:60:17:7e:39:57:44:16:60:7b:10:54:c8:f3:ed:
                    48:a6:b2:9b:e4:f8:ea:16:ef:c6:69:3e:86:c5:d6:
                    3b:1b:95:45:46:3f:11:5e:22:3c:7d:05:95:0e:6b:
                    b5:a5:74:0f:98:51:5a:6a:4b:80:a4:e8:d5:a4:1c:
                    b9:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                83:37:A1:85:69:2A:1D:10:65:6F:A0:0C:0B:FC:37:A1:89:09:E8:A8
            X509v3 Authority Key Identifier:
                keyid:6F:D2:E1:FE:04:EA:FF:90:27:CE:53:13:15:0B:E8:4D:E1:1C:A1:A5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A917ED5C/B56422D0860811EA92999571C4F9AE02/b9Lh_gTq_5AnzlMTFQvoTeEcoaU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/b9Lh_gTq_5AnzlMTFQvoTeEcoaU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917ED5C/B56422D0860811EA92999571C4F9AE02/AE7DB208FCD111EEBE556018C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  2406:840:fecd::/48

    Signature Algorithm: sha256WithRSAEncryption
         28:00:51:95:fe:2f:be:fe:e4:0b:f2:2e:ba:29:50:58:98:db:
         3a:c9:d7:e3:cd:29:83:b0:8d:25:6f:e8:e9:de:a7:41:bf:8f:
         c3:b8:18:14:9b:7a:96:8b:71:ff:d4:03:0e:f5:ce:12:49:db:
         36:98:3a:40:8d:32:2c:15:32:e3:c0:d2:8a:2c:e4:7b:63:c8:
         fe:07:79:da:a7:9e:58:5a:b2:2c:b9:ab:8b:15:04:c3:cc:7d:
         02:94:cb:84:31:cc:5f:74:86:51:00:dd:d1:65:8f:69:9b:04:
         42:2c:72:17:4e:e8:a8:ee:d9:14:a7:f6:4c:4f:2f:f8:9a:c8:
         5b:f2:60:b0:a6:c6:fa:b2:f2:a7:6e:4a:1c:ac:bf:aa:4e:4c:
         54:71:12:5c:22:6a:43:4c:2b:76:1e:a9:35:aa:cf:0e:75:e6:
         e7:6a:3f:e3:33:72:50:9f:9e:45:25:a4:26:0e:53:b3:9f:ae:
         3e:0d:ec:2b:83:3d:12:c6:fb:72:8e:84:11:50:e8:8e:47:75:
         37:9c:99:f9:6f:d2:a9:b5:31:f4:66:73:24:c2:e9:c0:30:4c:
         14:41:75:4c:ca:43:c2:9f:20:84:89:3c:90:cd:6b:fd:8b:8e:
         1f:f0:69:00:c5:51:81:b3:3e:76:42:21:bd:41:eb:76:bd:00:
         af:18:d4:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 10 23:55:00 2024 by rpki-client on console-fra.rpki-client.org