Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A917ED5C/B56422D0860811EA92999571C4F9AE02/B23BF526EEA811EEA9FA8348C4F9AE02.roa
File:                     B23BF526EEA811EEA9FA8348C4F9AE02.roa (raw, json)
Hash identifier:          mUD901/pvmcQxE9M4wMftXSHPzokeKP35vYR/90rnqQ=
Subject key identifier:   6F:C7:63:29:EB:01:1E:17:82:7F:64:81:6F:AC:8D:9B:77:2E:5F:20
Certificate issuer:       /CN=A917ED5C/serialNumber=6FD2E1FE04EAFF9027CE5313150BE84DE11CA1A5
Certificate serial:       0BF5
Authority key identifier: 6F:D2:E1:FE:04:EA:FF:90:27:CE:53:13:15:0B:E8:4D:E1:1C:A1:A5
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/b9Lh_gTq_5AnzlMTFQvoTeEcoaU.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A917ED5C/B56422D0860811EA92999571C4F9AE02/B23BF526EEA811EEA9FA8348C4F9AE02.roa
Signing time:             Sat 30 Mar 2024 15:18:01 +0000
ROA not before:           Sat 30 Mar 2024 15:18:01 +0000
ROA not after:            Tue 30 Jul 2024 00:00:00 +0000
asID:                     215743
IP address blocks:        2406:840:9160::/44 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A917ED5C/B56422D0860811EA92999571C4F9AE02/b9Lh_gTq_5AnzlMTFQvoTeEcoaU.crl
                          rsync://rpki.apnic.net/member_repository/A917ED5C/B56422D0860811EA92999571C4F9AE02/b9Lh_gTq_5AnzlMTFQvoTeEcoaU.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/b9Lh_gTq_5AnzlMTFQvoTeEcoaU.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 15 May 2024 02:42:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3061 (0xbf5)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A917ED5C/serialNumber=6FD2E1FE04EAFF9027CE5313150BE84DE11CA1A5
        Validity
            Not Before: Mar 30 15:18:01 2024 GMT
            Not After : Jul 30 00:00:00 2024 GMT
        Subject: CN=66082d28-c958
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:0d:ba:86:8d:8a:3b:25:47:b0:64:2a:5e:28:
                    49:22:76:c0:0e:80:73:90:8a:35:ed:18:13:9c:a0:
                    37:cd:57:86:bd:fb:2c:52:e2:0b:b7:a2:aa:83:f7:
                    df:43:06:f8:2b:cc:5f:b9:bd:a4:5a:60:7b:a2:f7:
                    d0:1e:64:d6:2a:b2:59:a3:7b:50:5a:9a:4e:65:c7:
                    a8:92:bc:0a:c2:e2:25:56:84:1f:47:31:3e:ef:09:
                    a5:fb:89:1d:d5:ed:72:f3:30:1f:a2:e1:f1:86:88:
                    77:55:ba:83:d6:ee:c8:69:f3:7a:33:c5:c1:0d:9b:
                    03:29:e0:d9:78:31:40:c0:2f:a4:15:e0:ef:8a:9a:
                    c9:62:ac:33:a3:f9:68:b3:1c:f4:5b:9f:be:dd:1c:
                    d7:f9:ad:dc:19:30:2f:55:7a:81:ac:56:1c:86:73:
                    df:97:a9:21:44:0b:81:52:14:66:1b:70:48:b0:5a:
                    e5:71:f1:47:fb:13:b1:2d:16:be:9c:c1:6b:53:fc:
                    6b:f2:f2:11:50:dc:3c:62:69:28:d8:76:d1:64:90:
                    1d:06:f1:c3:bc:52:b3:cd:94:05:c7:16:03:56:29:
                    bf:91:5b:bc:44:4c:d4:99:4e:8c:a3:d9:af:52:c6:
                    df:d1:35:83:84:a0:31:fa:77:3f:b7:a1:a1:76:78:
                    b4:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6F:C7:63:29:EB:01:1E:17:82:7F:64:81:6F:AC:8D:9B:77:2E:5F:20
            X509v3 Authority Key Identifier:
                keyid:6F:D2:E1:FE:04:EA:FF:90:27:CE:53:13:15:0B:E8:4D:E1:1C:A1:A5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A917ED5C/B56422D0860811EA92999571C4F9AE02/b9Lh_gTq_5AnzlMTFQvoTeEcoaU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/b9Lh_gTq_5AnzlMTFQvoTeEcoaU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917ED5C/B56422D0860811EA92999571C4F9AE02/B23BF526EEA811EEA9FA8348C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  2406:840:9160::/44

    Signature Algorithm: sha256WithRSAEncryption
         7f:0a:dc:f3:54:9c:78:ed:45:bf:8c:c5:0d:d4:1d:36:1c:5e:
         3b:64:68:1c:55:bb:00:84:08:86:68:ef:39:40:76:d5:08:ed:
         6e:eb:05:d4:87:19:f1:61:f5:e8:ea:7f:64:58:b8:f7:03:42:
         63:c7:b6:47:5f:0e:86:6e:f8:6f:73:be:52:66:fb:9f:e9:10:
         d4:ac:4e:29:c4:42:0c:53:41:06:1c:53:63:0f:db:37:fc:0a:
         2d:e8:1b:02:3a:64:de:fc:bc:d4:6a:fb:3c:26:40:f8:b4:77:
         95:0b:ec:8c:17:fa:b5:3d:22:1d:1c:0a:d5:11:97:2f:8c:05:
         34:23:6f:6d:33:22:2f:fb:00:b9:c1:41:c9:a4:12:f3:9a:d1:
         98:58:93:ee:37:d0:ca:4e:8c:c2:70:fc:84:bb:41:aa:ae:7d:
         ef:ae:9d:1e:4c:69:f6:64:fe:66:14:59:1e:5d:6a:12:dc:3c:
         4c:e1:c6:db:eb:e4:82:74:40:d1:a8:3f:19:80:8a:f2:3e:b0:
         b5:ec:39:9a:8c:e9:79:d4:10:4e:0c:c0:fa:b1:18:b7:6b:34:
         48:7a:44:e8:b0:e3:41:66:43:64:0e:ca:0f:e0:64:52:bd:0c:
         0b:97:68:5e:c3:ee:59:4b:9e:0d:a2:39:30:05:f2:18:ca:84:
         48:c1:fc:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 10 23:04:08 2024 by rpki-client on console-ams.rpki-client.org