Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A919F6A8/F3BD4C3649CB11E7A4A87C7BC4F9AE02/AC39D9F8615211E7BAD4DA61C4F9AE02.roa
File:                     AC39D9F8615211E7BAD4DA61C4F9AE02.roa (raw, json)
Hash identifier:          +kw+0Dd+hCJOF0NUg0Cg9CE8CUioX2H2bzk5xcJylVg=
Subject key identifier:   32:F5:44:CF:BF:5E:1F:13:31:51:70:17:46:CC:BB:82:CD:4D:AE:E2
Certificate issuer:       /CN=A919F6A8/serialNumber=F7D74C7FB8B0BAEFC3635CD4E35048AF88E39EEF
Certificate serial:       19C2
Authority key identifier: F7:D7:4C:7F:B8:B0:BA:EF:C3:63:5C:D4:E3:50:48:AF:88:E3:9E:EF
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/99dMf7iwuu_DY1zU41BIr4jjnu8.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A919F6A8/F3BD4C3649CB11E7A4A87C7BC4F9AE02/AC39D9F8615211E7BAD4DA61C4F9AE02.roa
Signing time:             Tue 02 Apr 2024 17:24:40 +0000
ROA not before:           Tue 02 Apr 2024 17:24:40 +0000
ROA not after:            Tue 01 Jul 2025 00:00:00 +0000
asID:                     6939
IP address blocks:        2401:3740:374::/48 maxlen: 48
                          2401:3740:375::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A919F6A8/F3BD4C3649CB11E7A4A87C7BC4F9AE02/99dMf7iwuu_DY1zU41BIr4jjnu8.crl
                          rsync://rpki.apnic.net/member_repository/A919F6A8/F3BD4C3649CB11E7A4A87C7BC4F9AE02/99dMf7iwuu_DY1zU41BIr4jjnu8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/99dMf7iwuu_DY1zU41BIr4jjnu8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 25 Apr 2024 16:51:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 6594 (0x19c2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A919F6A8/serialNumber=F7D74C7FB8B0BAEFC3635CD4E35048AF88E39EEF
        Validity
            Not Before: Apr  2 17:24:40 2024 GMT
            Not After : Jul  1 00:00:00 2025 GMT
        Subject: CN=660c3f58-f157
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e4:c9:4c:71:38:b8:a3:f5:06:fd:66:85:10:a3:
                    49:32:c3:2a:fb:e9:44:48:9b:b8:a5:a4:9a:09:d9:
                    1c:49:87:25:f5:01:9e:19:26:d7:ef:e2:5c:bd:37:
                    1c:2e:b6:d2:0c:23:ff:21:aa:87:71:f6:15:29:e2:
                    d7:3e:76:2b:57:53:f4:cd:19:13:72:74:01:58:a0:
                    58:d2:39:59:1d:c9:c9:3d:6b:3b:b7:04:76:bb:75:
                    24:62:5d:fb:4b:a8:38:cc:da:06:40:ca:ce:7d:4b:
                    d8:17:60:dd:dd:d4:8b:99:bd:53:a7:5f:3f:96:62:
                    ba:21:ee:5b:7b:ce:80:86:d8:4c:6b:20:0b:0f:a2:
                    7d:ac:17:4f:b7:f7:62:69:e3:31:ce:30:af:fa:ef:
                    fa:c4:32:03:26:bc:da:e0:b4:de:9a:d6:72:04:a7:
                    eb:f9:c2:c4:2b:cc:7b:42:21:82:cb:48:52:09:84:
                    3e:fb:bf:15:d9:dd:77:1d:c1:be:c1:a1:a2:d2:7f:
                    8a:c0:97:b3:0c:57:0b:b4:1f:0c:97:c4:b0:d2:1b:
                    f2:b6:56:78:17:09:e1:87:c2:7c:dd:e8:51:59:1e:
                    fb:d4:58:3d:a9:ab:f8:7c:26:4d:e3:34:cf:67:d6:
                    8a:3b:f2:40:b1:dc:52:07:3a:f9:1c:47:cd:c5:cd:
                    2d:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                32:F5:44:CF:BF:5E:1F:13:31:51:70:17:46:CC:BB:82:CD:4D:AE:E2
            X509v3 Authority Key Identifier:
                keyid:F7:D7:4C:7F:B8:B0:BA:EF:C3:63:5C:D4:E3:50:48:AF:88:E3:9E:EF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A919F6A8/F3BD4C3649CB11E7A4A87C7BC4F9AE02/99dMf7iwuu_DY1zU41BIr4jjnu8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/99dMf7iwuu_DY1zU41BIr4jjnu8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919F6A8/F3BD4C3649CB11E7A4A87C7BC4F9AE02/AC39D9F8615211E7BAD4DA61C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  2401:3740:374::/47

    Signature Algorithm: sha256WithRSAEncryption
         7c:00:10:8b:cc:34:eb:0b:74:7a:9b:f3:71:6c:dd:ea:fd:e0:
         ac:4a:c0:e8:54:e2:75:82:b4:58:fc:27:07:34:cb:6e:30:6e:
         b1:e6:46:fe:0c:c4:75:e7:77:3d:fb:50:4d:63:40:5f:ef:b3:
         6c:f6:f5:99:ae:49:6f:37:71:36:f1:63:6b:b9:7b:11:5b:6c:
         d8:3d:61:1e:d7:fd:d0:22:a2:67:8e:c8:d5:a2:e5:a0:d2:84:
         7d:2a:4b:53:87:25:47:fd:56:6e:9c:52:d2:83:1d:e0:61:80:
         8d:04:2b:74:d8:19:fe:0b:ed:9b:a3:7e:4a:80:d6:87:a2:42:
         b0:fc:e9:4d:6b:78:7e:e1:f8:0f:34:22:f3:85:0f:a7:07:61:
         6a:f3:9a:a6:48:09:85:d9:9b:a8:1c:a8:0c:17:24:fe:9f:d7:
         b5:8e:36:d0:7a:3c:46:7e:8d:15:ac:29:e3:b5:a6:25:c4:80:
         c4:7e:38:45:07:54:96:f0:ed:7d:db:78:14:e4:75:30:86:a9:
         e9:f7:8e:6e:c8:87:a8:f4:91:d7:94:0b:ec:d9:c9:ac:34:aa:
         54:92:0b:23:a7:b6:da:9e:92:58:4c:34:12:04:e1:0f:a4:49:
         7b:24:d7:30:12:2b:c7:5e:91:4b:23:69:3a:a6:e3:14:36:27:
         28:87:54:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 18 18:16:07 2024 by rpki-client on console-fra.rpki-client.org