Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A918127C/E697112A06AD11EB9821057FC4F9AE02/706E023CD46911EE9E90881CC4F9AE02.roa
File:                     706E023CD46911EE9E90881CC4F9AE02.roa (raw, json)
Hash identifier:          t4ERgQl8omAuBKvg1Z+bntjSYYXybEL9Tu9YKSh55zk=
Subject key identifier:   73:31:46:FC:5E:38:E7:53:1A:28:79:D7:E7:15:44:5C:60:1A:F2:62
Certificate issuer:       /CN=A918127C/serialNumber=8F942252B7D404E33DB9B1E354E09103AAC50184
Certificate serial:       06BE
Authority key identifier: 8F:94:22:52:B7:D4:04:E3:3D:B9:B1:E3:54:E0:91:03:AA:C5:01:84
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/j5QiUrfUBOM9ubHjVOCRA6rFAYQ.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918127C/E697112A06AD11EB9821057FC4F9AE02/706E023CD46911EE9E90881CC4F9AE02.roa
Signing time:             Mon 26 Feb 2024 05:39:42 +0000
ROA not before:           Mon 26 Feb 2024 05:39:42 +0000
ROA not after:            Mon 31 Mar 2025 00:00:00 +0000
asID:                     23879
IP address blocks:        2406:8600:f03f::/48 maxlen: 48
                          2406:8600:f83f::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918127C/E697112A06AD11EB9821057FC4F9AE02/j5QiUrfUBOM9ubHjVOCRA6rFAYQ.crl
                          rsync://rpki.apnic.net/member_repository/A918127C/E697112A06AD11EB9821057FC4F9AE02/j5QiUrfUBOM9ubHjVOCRA6rFAYQ.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/j5QiUrfUBOM9ubHjVOCRA6rFAYQ.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 29 Nov 2024 20:43:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1726 (0x6be)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918127C/serialNumber=8F942252B7D404E33DB9B1E354E09103AAC50184
        Validity
            Not Before: Feb 26 05:39:42 2024 GMT
            Not After : Mar 31 00:00:00 2025 GMT
        Subject: CN=65dc241e-5df9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:28:45:0e:98:71:98:96:f8:58:ee:0b:36:f5:
                    22:7a:ab:dc:d0:96:1b:ee:e6:42:f9:9a:f4:b5:92:
                    d9:15:08:4e:68:0a:3b:51:b0:92:9e:7f:05:4c:1b:
                    bd:6f:f5:fd:bb:17:7b:6a:38:e6:7d:94:d4:3b:71:
                    f3:90:f1:6e:39:84:df:f6:33:9f:67:0a:21:c9:c3:
                    49:3a:6e:17:7b:ea:51:c0:44:38:76:de:f0:fc:dc:
                    26:84:dd:59:dc:22:08:f9:b2:5e:49:b9:55:2f:e1:
                    d9:2e:8e:60:76:93:9d:4f:80:f1:ea:91:e6:55:96:
                    fb:34:d1:3b:f0:cc:be:ff:44:6a:c3:24:09:d2:f5:
                    94:57:68:1d:67:6d:fa:3b:bf:fa:42:06:68:02:d7:
                    f8:6c:49:e7:98:96:92:fa:0c:88:86:cb:77:02:a3:
                    e9:33:91:47:fd:be:5b:98:5a:70:21:45:26:e3:29:
                    d6:30:0a:50:a0:5a:f9:47:22:ff:61:7a:32:ca:16:
                    6e:e1:09:1d:12:a3:37:d7:55:63:7f:b8:ba:5f:50:
                    a8:78:5b:97:47:47:85:1b:45:fa:cf:56:24:3b:ef:
                    36:ca:e1:68:91:c2:45:b7:51:15:bb:cf:49:b1:bb:
                    9f:2a:d3:46:aa:1b:72:e6:88:05:26:84:25:8e:fd:
                    e6:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                73:31:46:FC:5E:38:E7:53:1A:28:79:D7:E7:15:44:5C:60:1A:F2:62
            X509v3 Authority Key Identifier:
                keyid:8F:94:22:52:B7:D4:04:E3:3D:B9:B1:E3:54:E0:91:03:AA:C5:01:84

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918127C/E697112A06AD11EB9821057FC4F9AE02/j5QiUrfUBOM9ubHjVOCRA6rFAYQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/j5QiUrfUBOM9ubHjVOCRA6rFAYQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918127C/E697112A06AD11EB9821057FC4F9AE02/706E023CD46911EE9E90881CC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  2406:8600:f03f::/48
                  2406:8600:f83f::/48

    Signature Algorithm: sha256WithRSAEncryption
         21:4d:80:8c:ea:32:6d:45:aa:bb:f4:b7:c8:8e:32:b4:4d:fe:
         d3:c4:c2:48:53:5f:52:ee:db:77:7d:67:b1:e9:e3:2a:80:3e:
         62:d2:60:78:97:bc:4d:45:5c:c4:3a:ad:fb:2b:74:7d:34:e0:
         1c:0b:56:f1:e5:6c:13:df:47:2a:24:8d:36:1c:fb:63:fc:ac:
         41:0c:b3:00:79:3c:f2:f0:36:13:c8:9e:1c:82:7c:30:43:2b:
         bc:5f:68:92:73:21:05:3b:32:66:ed:2e:51:80:1e:7e:81:dc:
         3b:a1:e8:e4:f4:d6:da:12:46:05:86:72:cd:56:64:3c:05:65:
         7c:4b:25:04:e6:ad:de:f9:a0:87:0a:85:65:9b:bc:1c:65:bf:
         21:e4:2a:a7:bc:16:0e:ed:dc:4f:a8:02:65:3f:e7:18:a9:0f:
         36:72:90:28:8c:fd:2e:78:d7:09:ea:43:da:be:fd:55:6c:81:
         7b:49:1e:f8:41:aa:22:60:09:be:98:a0:ce:fc:a3:1a:3e:93:
         be:84:48:fd:dd:30:89:f4:29:2d:00:6c:57:32:b3:74:a3:fd:
         35:89:8d:de:8b:24:5e:e0:dd:a9:13:65:17:7d:f5:85:2d:e4:
         66:7e:14:81:21:0a:61:ba:b9:81:3f:06:58:bf:07:24:e9:41:
         3c:84:75:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 22:24:10 2024 by rpki-client on console-fra.rpki-client.org