Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91A6204/830A3A28120611ECAECED477C4F9AE02/F8F09AC071BC11EF98EE3652C4F9AE02.roa
File:                     F8F09AC071BC11EF98EE3652C4F9AE02.roa (raw, json)
Hash identifier:          OmOKCpnNGxuTgnm/3ZUNP0n4Wl3zYcoWkWZk3CIh3c8=
Subject key identifier:   8B:E0:C7:64:4A:AB:BB:F9:62:01:AC:01:A9:B9:A7:84:9D:51:61:B1
Certificate issuer:       /CN=A91A6204/serialNumber=1F6FBA3FBF7C4E751080D6743E2FCE00D294DB41
Certificate serial:       0483
Authority key identifier: 1F:6F:BA:3F:BF:7C:4E:75:10:80:D6:74:3E:2F:CE:00:D2:94:DB:41
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/H2-6P798TnUQgNZ0Pi_OANKU20E.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91A6204/830A3A28120611ECAECED477C4F9AE02/F8F09AC071BC11EF98EE3652C4F9AE02.roa
Signing time:             Fri 13 Sep 2024 10:43:12 +0000
ROA not before:           Fri 13 Sep 2024 10:43:12 +0000
ROA not after:            Mon 01 Dec 2025 00:00:00 +0000
asID:                     146964
IP address blocks:        2001:df7:6d80::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91A6204/830A3A28120611ECAECED477C4F9AE02/H2-6P798TnUQgNZ0Pi_OANKU20E.crl
                          rsync://rpki.apnic.net/member_repository/A91A6204/830A3A28120611ECAECED477C4F9AE02/H2-6P798TnUQgNZ0Pi_OANKU20E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/H2-6P798TnUQgNZ0Pi_OANKU20E.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 29 Nov 2024 20:43:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1155 (0x483)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A6204/serialNumber=1F6FBA3FBF7C4E751080D6743E2FCE00D294DB41
        Validity
            Not Before: Sep 13 10:43:12 2024 GMT
            Not After : Dec  1 00:00:00 2025 GMT
        Subject: CN=66e4173f-d71d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:96:44:bd:8b:4b:ab:5c:26:45:5d:d8:40:62:
                    1d:3c:8f:e2:bc:ee:36:f3:11:69:fb:53:4c:b9:e4:
                    4d:52:88:92:05:59:84:34:47:43:77:4e:7c:6c:94:
                    95:af:e0:b1:73:47:5a:c9:8b:b1:38:aa:3a:97:dc:
                    d0:f8:9e:7e:5d:60:f8:c6:04:d4:1c:7a:40:f8:3d:
                    b8:bc:88:68:51:d9:28:7b:12:dc:31:48:aa:6d:60:
                    7d:e8:ee:c5:a7:ce:a5:7e:de:4f:62:6c:5e:79:24:
                    cf:f8:14:3d:b0:5b:0e:0a:ff:aa:a6:62:72:eb:a0:
                    b5:bc:f7:e2:df:28:a5:bd:03:78:5e:bb:e4:42:3e:
                    e7:f8:fd:38:f1:77:e5:57:fb:1c:54:81:58:95:26:
                    40:64:de:aa:6f:43:e6:d1:bf:66:4f:1e:16:2d:d2:
                    8b:aa:29:44:ce:5a:81:de:17:34:36:e8:f3:a4:d4:
                    94:f9:13:fd:62:2b:7e:d3:18:35:49:ce:31:6c:fd:
                    6f:22:35:20:37:76:c7:c3:c8:6b:ff:55:36:e4:4f:
                    48:d9:87:7d:a8:97:ca:0e:63:8e:77:18:8a:69:35:
                    68:ae:82:0d:5c:b1:ac:bb:4d:75:70:64:69:1f:bf:
                    4d:3e:cb:33:46:8f:01:4e:94:aa:0a:f2:1f:4e:e6:
                    43:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8B:E0:C7:64:4A:AB:BB:F9:62:01:AC:01:A9:B9:A7:84:9D:51:61:B1
            X509v3 Authority Key Identifier:
                keyid:1F:6F:BA:3F:BF:7C:4E:75:10:80:D6:74:3E:2F:CE:00:D2:94:DB:41

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91A6204/830A3A28120611ECAECED477C4F9AE02/H2-6P798TnUQgNZ0Pi_OANKU20E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/H2-6P798TnUQgNZ0Pi_OANKU20E.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A6204/830A3A28120611ECAECED477C4F9AE02/F8F09AC071BC11EF98EE3652C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:df7:6d80::/48

    Signature Algorithm: sha256WithRSAEncryption
         18:8d:60:85:73:b2:ab:f9:b0:3d:50:d7:43:b9:b3:c0:f0:0f:
         78:2e:fb:df:04:83:0c:0c:6f:25:79:6f:c2:f9:af:0d:44:c5:
         1b:db:6d:08:a4:f8:0e:34:4a:f7:e1:b2:e2:01:e9:c9:12:65:
         02:b8:af:d3:06:85:ff:7c:0c:e6:96:13:53:55:77:bd:65:2e:
         c8:98:f2:06:08:43:ff:13:3f:44:75:bc:4a:56:f2:f5:ce:84:
         c9:cc:9b:57:f4:96:5c:8d:cb:06:21:c8:2a:8a:ee:af:82:2c:
         56:9d:af:49:aa:c2:93:54:9f:45:3f:21:e3:4c:4f:fc:4a:94:
         42:46:c8:46:7f:b3:7e:7d:16:a6:8d:b1:89:37:4c:80:82:7c:
         c0:ac:72:d4:0c:32:eb:57:e1:59:9a:fc:84:07:e7:73:2f:55:
         db:2f:b8:6e:92:86:6a:52:b0:bb:71:66:b8:d3:23:65:ed:17:
         7b:21:25:07:bd:23:b4:b1:d2:29:9e:d9:17:d1:d2:3e:67:9d:
         6d:7c:f7:ab:bd:83:be:53:1b:6d:e8:1a:c4:5d:73:20:0a:f2:
         a7:af:a1:fd:c2:cd:6a:e8:6c:d5:f9:43:64:44:9a:b9:b2:9f:
         e2:8b:68:72:fc:85:b4:c1:62:b0:b6:9d:33:6d:7a:0a:df:0d:
         47:ea:51:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 01:27:27 2024 by rpki-client on console-ams.rpki-client.org