Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91803DB/0DC35D3E8DD411E9BFE2C556C4F9AE02/438155FAAA0211ECB9C24020C4F9AE02.roa
File:                     438155FAAA0211ECB9C24020C4F9AE02.roa (raw, json)
Hash identifier:          QuwmZ+AGxSWEc5wCSNdmgZFC844AL9L/oxhwLXVnVr4=
Subject key identifier:   15:27:CE:46:69:5E:9D:B1:CE:19:7E:64:B3:83:69:15:2B:17:80:5E
Certificate issuer:       /CN=A91803DB/serialNumber=36ED8B675EA7238085AFA06C093E54A9D3FD7B60
Certificate serial:       0F65
Authority key identifier: 36:ED:8B:67:5E:A7:23:80:85:AF:A0:6C:09:3E:54:A9:D3:FD:7B:60
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Nu2LZ16nI4CFr6BsCT5UqdP9e2A.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91803DB/0DC35D3E8DD411E9BFE2C556C4F9AE02/438155FAAA0211ECB9C24020C4F9AE02.roa
Signing time:             Wed 16 Aug 2023 18:16:31 +0000
ROA not before:           Wed 16 Aug 2023 18:16:31 +0000
ROA not after:            Mon 30 Sep 2024 00:00:00 +0000
asID:                     38173
IP address blocks:        2404:f4c0:6660::/44 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91803DB/0DC35D3E8DD411E9BFE2C556C4F9AE02/Nu2LZ16nI4CFr6BsCT5UqdP9e2A.crl
                          rsync://rpki.apnic.net/member_repository/A91803DB/0DC35D3E8DD411E9BFE2C556C4F9AE02/Nu2LZ16nI4CFr6BsCT5UqdP9e2A.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Nu2LZ16nI4CFr6BsCT5UqdP9e2A.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 07 May 2024 18:46:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3941 (0xf65)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91803DB/serialNumber=36ED8B675EA7238085AFA06C093E54A9D3FD7B60
        Validity
            Not Before: Aug 16 18:16:31 2023 GMT
            Not After : Sep 30 00:00:00 2024 GMT
        Subject: CN=64dd127f-1d63
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e3:b0:ea:4b:4d:9c:84:a8:80:8a:a0:f4:31:f7:
                    a9:57:ec:e5:83:f7:6b:2c:01:35:d8:17:b2:e5:dc:
                    4e:89:fb:97:5e:c5:0a:9c:f9:dd:0c:15:e9:6d:34:
                    7c:9c:b5:29:36:f0:5d:35:3d:9d:61:d4:34:db:10:
                    74:31:94:52:5f:bc:ab:b6:39:42:ee:a9:62:1f:cb:
                    8f:02:d0:85:b8:4f:bd:af:72:1d:8b:a2:51:62:a7:
                    71:6b:f3:24:64:3c:3d:3f:da:df:cf:b8:5e:9c:3a:
                    02:2b:36:a6:24:1d:08:5d:01:b4:25:d4:68:bc:03:
                    b0:4a:b3:5a:3d:6a:41:df:26:82:7b:1b:f8:2f:16:
                    ab:ad:68:2e:b8:3f:e9:9c:fc:07:dd:89:91:e9:a0:
                    51:59:ab:7d:1d:9f:36:4c:d3:e2:ff:17:24:dd:65:
                    19:12:f2:77:8d:97:77:fb:15:f0:c7:78:2b:04:1d:
                    22:61:9f:66:ea:d9:7c:b7:7a:fb:ce:57:a8:10:6d:
                    7d:78:6a:ad:d8:0b:64:96:d1:fa:6d:87:17:3d:77:
                    54:a4:66:fc:b6:77:62:34:a8:ca:40:e9:e3:f9:b5:
                    bc:59:2d:79:ba:9a:22:d7:eb:b2:28:c3:d6:ac:cd:
                    e8:9c:8a:84:67:0f:3e:70:05:79:27:7e:80:5b:1a:
                    6e:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                15:27:CE:46:69:5E:9D:B1:CE:19:7E:64:B3:83:69:15:2B:17:80:5E
            X509v3 Authority Key Identifier:
                keyid:36:ED:8B:67:5E:A7:23:80:85:AF:A0:6C:09:3E:54:A9:D3:FD:7B:60

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91803DB/0DC35D3E8DD411E9BFE2C556C4F9AE02/Nu2LZ16nI4CFr6BsCT5UqdP9e2A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Nu2LZ16nI4CFr6BsCT5UqdP9e2A.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91803DB/0DC35D3E8DD411E9BFE2C556C4F9AE02/438155FAAA0211ECB9C24020C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  2404:f4c0:6660::/44

    Signature Algorithm: sha256WithRSAEncryption
         5e:c4:60:67:bf:c8:e2:e0:6c:67:fc:73:49:c5:4b:b4:b0:f0:
         b2:aa:ed:5c:a8:18:13:67:ff:76:40:f2:1f:56:1c:95:15:10:
         f1:26:4c:16:eb:54:51:92:10:0e:07:cd:b9:dc:36:86:9a:0f:
         4f:c8:e3:47:84:bb:72:9f:ed:9d:c1:f2:a9:9e:7c:98:45:4e:
         c6:61:b9:d5:6d:a2:56:2f:a7:02:74:33:30:a1:04:96:f9:8b:
         da:ef:af:f2:ea:42:e3:ee:73:69:fd:a3:6d:3b:a4:e7:fd:05:
         d6:27:a9:46:bf:98:f5:71:b0:0d:62:6b:d6:36:c6:d0:95:07:
         68:4f:f8:c5:79:56:d9:da:e3:09:25:b8:24:35:ba:f4:14:f8:
         39:70:c7:d4:aa:42:54:4d:cf:67:cc:61:d8:6f:2c:f5:c9:b1:
         20:08:3b:4a:b7:5d:19:49:5f:41:b7:8e:bf:51:b5:1b:14:36:
         94:6e:37:d0:9c:c8:a1:34:42:f9:7f:87:b5:f0:a7:3c:a7:12:
         09:4d:ab:bb:1d:0f:62:20:5a:69:78:2d:22:cf:54:dc:50:9a:
         0f:c8:c0:36:96:00:68:19:41:4e:91:3c:f3:f8:08:7d:69:56:
         59:68:4a:ae:d0:48:82:4e:b5:23:48:cb:33:74:46:6a:af:82:
         3e:a2:46:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 30 21:58:58 2024 by rpki-client on console-ams.rpki-client.org