Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A918127C/E697112A06AD11EB9821057FC4F9AE02/2C60C8AAE01111EEA6583A7DC4F9AE02.roa
File:                     2C60C8AAE01111EEA6583A7DC4F9AE02.roa (raw, json)
Hash identifier:          VAlmabfBIcM6/Rk4MhdZmM37IlrnItjCxo7UDLwAQB0=
Subject key identifier:   2D:75:03:69:92:80:F1:C1:10:BC:28:FC:03:32:50:E8:52:B6:3F:8E
Certificate issuer:       /CN=A918127C/serialNumber=8F942252B7D404E33DB9B1E354E09103AAC50184
Certificate serial:       06C8
Authority key identifier: 8F:94:22:52:B7:D4:04:E3:3D:B9:B1:E3:54:E0:91:03:AA:C5:01:84
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/j5QiUrfUBOM9ubHjVOCRA6rFAYQ.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918127C/E697112A06AD11EB9821057FC4F9AE02/2C60C8AAE01111EEA6583A7DC4F9AE02.roa
Signing time:             Tue 12 Mar 2024 01:38:06 +0000
ROA not before:           Tue 12 Mar 2024 01:38:06 +0000
ROA not after:            Mon 31 Mar 2025 00:00:00 +0000
asID:                     23926
IP address blocks:        2406:8600:f040::/48 maxlen: 48
                          2406:8600:f840::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918127C/E697112A06AD11EB9821057FC4F9AE02/j5QiUrfUBOM9ubHjVOCRA6rFAYQ.crl
                          rsync://rpki.apnic.net/member_repository/A918127C/E697112A06AD11EB9821057FC4F9AE02/j5QiUrfUBOM9ubHjVOCRA6rFAYQ.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/j5QiUrfUBOM9ubHjVOCRA6rFAYQ.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 29 Nov 2024 20:43:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1736 (0x6c8)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918127C/serialNumber=8F942252B7D404E33DB9B1E354E09103AAC50184
        Validity
            Not Before: Mar 12 01:38:06 2024 GMT
            Not After : Mar 31 00:00:00 2025 GMT
        Subject: CN=65efb1fe-73f0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:32:26:bf:33:7d:bc:4c:7f:27:6e:9b:7b:22:
                    72:bb:55:7e:ee:9c:5a:c1:79:c8:de:e9:ff:ba:35:
                    67:f0:1e:1e:c8:7c:6e:ca:d2:7c:8f:54:fe:c8:49:
                    f6:8e:e4:42:50:23:9a:48:52:44:e7:33:7a:51:65:
                    d0:7d:49:91:6f:9e:5e:83:7b:69:47:3d:2c:ed:8a:
                    39:5b:d9:bd:3e:1e:68:02:56:41:d9:11:35:ba:39:
                    8d:3e:c0:1c:1d:83:d8:a3:f8:ab:2a:2f:91:a0:e9:
                    dd:6f:81:58:07:24:e2:69:47:92:88:eb:1a:6d:f3:
                    e6:49:a6:ef:9d:a0:cd:d0:ec:0e:85:d4:ef:ed:e6:
                    75:4a:21:8d:ba:02:b6:d3:a9:bf:d8:cf:1b:3b:75:
                    c0:dd:6f:5b:24:a7:40:fd:dd:b2:37:5c:5b:09:04:
                    1c:4f:94:f5:cc:a2:89:11:3e:f6:39:5c:bc:c4:44:
                    ff:87:46:48:bd:45:55:c7:d3:33:6d:6a:a3:16:46:
                    f2:ee:f2:cb:eb:c0:95:d3:65:45:8a:89:d5:7c:65:
                    2e:34:05:9a:4a:f1:c1:9f:76:84:a5:24:38:f5:97:
                    f0:ee:e0:37:2d:84:b2:2a:de:be:86:d7:ee:af:30:
                    ee:0d:42:e8:2a:c1:03:10:35:22:dc:36:36:4f:21:
                    8c:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2D:75:03:69:92:80:F1:C1:10:BC:28:FC:03:32:50:E8:52:B6:3F:8E
            X509v3 Authority Key Identifier:
                keyid:8F:94:22:52:B7:D4:04:E3:3D:B9:B1:E3:54:E0:91:03:AA:C5:01:84

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918127C/E697112A06AD11EB9821057FC4F9AE02/j5QiUrfUBOM9ubHjVOCRA6rFAYQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/j5QiUrfUBOM9ubHjVOCRA6rFAYQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918127C/E697112A06AD11EB9821057FC4F9AE02/2C60C8AAE01111EEA6583A7DC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  2406:8600:f040::/48
                  2406:8600:f840::/48

    Signature Algorithm: sha256WithRSAEncryption
         11:02:55:cb:e5:e1:05:87:35:31:ac:6c:9c:66:48:22:60:00:
         eb:65:51:f9:a9:77:80:3b:fd:9c:cb:d9:c3:0e:4a:e9:7b:15:
         00:b0:61:96:dc:cd:7a:99:7d:b0:7b:d5:c0:62:a9:27:d5:dd:
         35:d4:7a:00:37:3f:ae:44:c0:7d:0e:13:7c:f5:8c:47:a9:de:
         40:75:49:a4:55:81:59:67:84:04:fb:64:2d:31:b6:3d:f4:e1:
         fa:01:32:f2:75:29:96:2d:15:78:4a:ab:55:aa:e2:99:d3:6b:
         84:c5:fa:18:e2:51:91:4c:33:3f:9a:04:96:f3:f7:18:15:f9:
         d5:5d:7e:3c:b7:3e:cb:af:22:37:a0:72:ed:70:e1:1c:fd:b6:
         5e:ff:74:54:15:48:3b:f4:b4:88:2b:39:86:14:3a:c1:4b:8d:
         55:61:40:5e:81:cb:b4:9c:fd:e1:12:ec:08:af:32:8a:97:bd:
         21:c9:48:eb:b9:fb:bf:45:a7:90:56:5d:fb:8e:bf:67:34:7c:
         50:3d:ea:5e:56:09:7b:b4:46:bf:7d:d8:51:24:97:fb:e4:94:
         c7:ea:34:af:12:e3:d4:5f:b3:13:39:38:c0:d2:73:01:09:0b:
         f1:47:f8:6a:2e:42:58:0f:80:d2:7d:2d:cc:60:bd:69:98:f8:
         65:a1:fd:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 22:24:10 2024 by rpki-client on console-fra.rpki-client.org