Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9186249/A1F2343CD17011EEA6151C4DC4F9AE02/E7F6D15AD17411EE87F7325DC4F9AE02.roa
File:                     E7F6D15AD17411EE87F7325DC4F9AE02.roa (raw, json)
Hash identifier:          ytZ0mVr7Q5kbOcbcyXXPGqMfnF/2pBGd1W5uYZdomFo=
Subject key identifier:   32:09:E0:62:98:66:9C:3A:B7:DE:AC:20:78:7D:9D:0A:5B:4A:36:4F
Certificate issuer:       /CN=A9186249/serialNumber=ACE28DABE53649637FA6E4E321DE1B63463B83CF
Certificate serial:       05
Authority key identifier: AC:E2:8D:AB:E5:36:49:63:7F:A6:E4:E3:21:DE:1B:63:46:3B:83:CF
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rOKNq-U2SWN_puTjId4bY0Y7g88.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9186249/A1F2343CD17011EEA6151C4DC4F9AE02/E7F6D15AD17411EE87F7325DC4F9AE02.roa
Signing time:             Thu 22 Feb 2024 11:24:13 +0000
ROA not before:           Thu 22 Feb 2024 11:24:13 +0000
ROA not after:            Wed 28 May 2025 00:00:00 +0000
asID:                     152585
IP address blocks:        2001:df3:7ec0::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9186249/A1F2343CD17011EEA6151C4DC4F9AE02/rOKNq-U2SWN_puTjId4bY0Y7g88.crl
                          rsync://rpki.apnic.net/member_repository/A9186249/A1F2343CD17011EEA6151C4DC4F9AE02/rOKNq-U2SWN_puTjId4bY0Y7g88.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rOKNq-U2SWN_puTjId4bY0Y7g88.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 08 Jun 2024 08:57:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 5 (0x5)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9186249/serialNumber=ACE28DABE53649637FA6E4E321DE1B63463B83CF
        Validity
            Not Before: Feb 22 11:24:13 2024 GMT
            Not After : May 28 00:00:00 2025 GMT
        Subject: CN=65d72edd-2b16
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:f8:07:ee:f0:10:d1:7d:ac:7b:1a:db:c0:68:
                    71:fa:7c:d3:16:a9:af:3e:bc:73:ef:3a:72:92:e9:
                    ae:ce:4c:13:02:e1:ae:57:b6:2b:ba:a1:43:6a:d3:
                    96:4b:50:59:c6:ab:d0:42:b3:59:2b:53:3a:f0:07:
                    78:f9:35:89:a9:a8:92:a5:d4:a9:34:53:6e:45:c7:
                    2c:91:6e:1e:35:a2:c7:1a:e5:96:4d:64:c7:6f:d7:
                    b3:11:38:b2:28:2c:b0:a9:2e:2b:23:a0:1f:d5:e5:
                    49:1c:f1:79:95:6f:2e:15:53:4e:44:c1:ad:4f:0d:
                    c7:ac:91:cc:1e:ad:b2:87:6e:dd:02:a8:a0:11:a6:
                    c9:11:f8:e7:e9:e8:50:47:9b:2e:f5:e0:c8:51:8f:
                    83:e9:b6:8f:5a:59:d9:7f:34:74:ef:f4:f9:4c:fe:
                    25:74:4e:4c:82:05:60:41:f1:d0:dc:46:05:19:b4:
                    3f:f2:a9:87:76:21:f3:ea:06:a8:f8:c1:8a:91:60:
                    43:87:65:92:2f:9f:c0:81:eb:aa:7f:2c:9a:8d:4d:
                    98:82:81:b3:e2:b2:61:fe:74:a8:e2:8e:0f:d3:e4:
                    ec:75:57:70:49:ce:01:c0:e5:7c:a8:d4:c6:60:12:
                    c5:90:0c:a5:48:86:e8:24:0c:0c:98:e7:e0:99:0b:
                    fd:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                32:09:E0:62:98:66:9C:3A:B7:DE:AC:20:78:7D:9D:0A:5B:4A:36:4F
            X509v3 Authority Key Identifier:
                keyid:AC:E2:8D:AB:E5:36:49:63:7F:A6:E4:E3:21:DE:1B:63:46:3B:83:CF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9186249/A1F2343CD17011EEA6151C4DC4F9AE02/rOKNq-U2SWN_puTjId4bY0Y7g88.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rOKNq-U2SWN_puTjId4bY0Y7g88.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9186249/A1F2343CD17011EEA6151C4DC4F9AE02/E7F6D15AD17411EE87F7325DC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:df3:7ec0::/48

    Signature Algorithm: sha256WithRSAEncryption
         67:0c:06:11:b6:14:c9:2d:02:87:e6:f2:bf:ff:4d:0e:f6:8a:
         58:ce:b2:4a:27:72:7f:89:92:42:0b:19:60:03:47:97:69:d0:
         2b:f1:30:2f:47:b4:e0:a1:92:3a:16:fe:9a:ae:c8:88:83:43:
         28:a3:fa:6e:9b:f6:32:c8:0f:7f:5a:9c:82:79:7a:64:c7:9d:
         73:5b:f4:51:7f:01:fd:a8:ea:ff:8a:14:d8:22:d8:b6:4b:f4:
         36:f2:02:cc:2e:02:d3:10:f2:27:f8:2b:6b:6e:1f:54:29:ac:
         b5:bb:1b:9a:f3:04:db:ec:cd:e6:17:c8:d9:c8:fb:08:f1:4e:
         4d:de:ca:69:66:52:72:9f:14:ef:c3:50:23:57:b3:03:aa:b9:
         82:56:ec:5b:f4:4d:3c:5d:b4:40:89:ec:1a:bc:74:96:3e:ea:
         ed:ef:63:b0:5a:cb:c0:ba:b2:e0:d7:b8:e9:0d:fc:44:0d:d6:
         29:ae:4b:ad:ca:36:58:c8:01:e8:d1:23:10:cf:bf:58:c8:bb:
         4b:c7:78:e5:43:84:96:b8:4f:af:2d:06:7b:6a:e2:f3:72:37:
         40:bc:4d:79:7e:da:f6:84:e1:a0:be:79:34:65:13:6b:eb:e6:
         5e:8b:69:9d:d1:b0:60:e0:18:d2:53:cb:dc:3e:b2:01:8b:3f:
         7b:0c:a9:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 1 11:47:19 2024 by rpki-client on console-ams.rpki-client.org