Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91CCF10/EC67333E609011EDA6791A0DC4F9AE02/CC74271E8A8711ED98572D26C4F9AE02.roa
File:                     CC74271E8A8711ED98572D26C4F9AE02.roa (raw, json)
Hash identifier:          u5FclelS5vZhvG9tZ4l0dr2PJHCJj//b4/kc0+eiUAA=
Subject key identifier:   9E:C7:EE:7A:60:7A:AD:A1:7F:1A:5F:76:2A:D5:A3:AB:7C:87:4E:CB
Certificate issuer:       /CN=A91CCF10/serialNumber=B8EA71D04EC836E8180873C9E9D40CD2E3553701
Certificate serial:       DC
Authority key identifier: B8:EA:71:D0:4E:C8:36:E8:18:08:73:C9:E9:D4:0C:D2:E3:55:37:01
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uOpx0E7INugYCHPJ6dQM0uNVNwE.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91CCF10/EC67333E609011EDA6791A0DC4F9AE02/CC74271E8A8711ED98572D26C4F9AE02.roa
Signing time:             Mon 11 Dec 2023 04:35:43 +0000
ROA not before:           Mon 11 Dec 2023 04:35:43 +0000
ROA not after:            Sun 02 Mar 2025 00:00:00 +0000
asID:                     150413
IP address blocks:        2001:df1:82c0::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91CCF10/EC67333E609011EDA6791A0DC4F9AE02/uOpx0E7INugYCHPJ6dQM0uNVNwE.crl
                          rsync://rpki.apnic.net/member_repository/A91CCF10/EC67333E609011EDA6791A0DC4F9AE02/uOpx0E7INugYCHPJ6dQM0uNVNwE.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uOpx0E7INugYCHPJ6dQM0uNVNwE.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 14 Jun 2024 05:50:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 220 (0xdc)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91CCF10/serialNumber=B8EA71D04EC836E8180873C9E9D40CD2E3553701
        Validity
            Not Before: Dec 11 04:35:43 2023 GMT
            Not After : Mar  2 00:00:00 2025 GMT
        Subject: CN=6576919f-03e1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:2b:67:80:fc:34:6a:be:57:8f:9d:5e:06:dd:
                    07:aa:c7:48:aa:94:cb:4a:17:c5:e9:0a:f8:23:2f:
                    65:36:e8:14:3c:be:c8:df:f4:3e:51:1c:70:32:a1:
                    51:7c:03:13:b7:34:fa:c3:a1:d2:d1:42:9a:4f:76:
                    ea:e1:47:8c:b8:0b:3d:21:52:e0:85:3b:34:ae:8f:
                    ba:bb:4f:48:3b:05:57:a6:d4:cc:6a:ab:19:7d:74:
                    77:14:33:12:41:66:ac:1a:43:25:f3:63:27:0d:df:
                    b7:d6:31:6c:7b:1c:2f:90:32:6c:e1:6c:42:e4:5b:
                    54:64:44:44:e4:1c:ac:f7:bc:f4:e6:f2:34:80:91:
                    b8:1a:d0:a7:39:c0:0d:24:e7:e5:73:a1:7d:45:9b:
                    02:5a:94:0e:e7:0d:26:d7:55:fb:bb:c2:0b:d7:b7:
                    99:6c:cc:25:8e:52:8e:62:50:f2:dd:d5:29:32:dc:
                    09:c8:93:a1:4f:a8:c3:93:ce:2a:6f:8e:9e:48:96:
                    4c:f7:0e:e2:e5:da:d3:df:4d:08:7e:a3:9e:52:a2:
                    4a:f9:d3:17:77:b6:8a:08:04:80:cc:33:66:a8:e4:
                    37:7d:fd:60:11:0e:2c:e4:08:70:61:d8:7d:b7:f8:
                    ba:1e:1d:7d:c9:fa:49:6b:bb:54:30:18:22:68:f2:
                    ae:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9E:C7:EE:7A:60:7A:AD:A1:7F:1A:5F:76:2A:D5:A3:AB:7C:87:4E:CB
            X509v3 Authority Key Identifier:
                keyid:B8:EA:71:D0:4E:C8:36:E8:18:08:73:C9:E9:D4:0C:D2:E3:55:37:01

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91CCF10/EC67333E609011EDA6791A0DC4F9AE02/uOpx0E7INugYCHPJ6dQM0uNVNwE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uOpx0E7INugYCHPJ6dQM0uNVNwE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CCF10/EC67333E609011EDA6791A0DC4F9AE02/CC74271E8A8711ED98572D26C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:df1:82c0::/48

    Signature Algorithm: sha256WithRSAEncryption
         36:d5:ba:52:d1:ee:2f:d4:fd:49:a1:5b:3a:51:51:4d:15:9a:
         99:46:0c:78:09:46:55:fb:6b:6f:68:79:27:37:a6:03:b1:4c:
         dc:85:2e:c1:20:47:4e:08:0d:72:ce:1a:83:ab:07:83:e5:64:
         d9:fb:01:9c:68:5d:51:51:0d:c6:cb:7e:9a:88:83:78:10:f7:
         8b:5c:75:54:a9:63:b0:6d:41:c8:d3:c8:9f:c6:80:96:2c:5c:
         58:42:87:54:54:2b:15:df:fb:76:17:32:3f:16:73:92:66:f9:
         89:b3:ac:a9:67:41:25:67:68:47:04:69:a4:91:28:b3:0d:f9:
         c7:6e:68:9e:f3:d9:e4:53:a5:ea:83:7e:cf:20:c7:b3:31:d0:
         ed:af:8b:bc:c1:23:6f:97:c8:25:99:82:c3:65:f8:cd:54:ed:
         98:c0:5a:81:2c:17:fa:ee:6a:15:72:32:0a:4d:02:42:98:67:
         cf:aa:76:cc:0e:4d:46:1d:f2:6a:10:4c:60:11:2f:6c:fa:81:
         c7:8c:e9:91:a9:fe:7c:08:ed:a8:1a:29:2c:af:d4:07:9a:62:
         65:75:fb:b1:f0:0f:97:42:bd:e4:de:c5:b1:b2:44:be:cb:1c:
         dc:f5:02:d0:2c:70:58:82:be:29:4a:b8:4a:3a:35:90:5b:dc:
         7f:e7:54:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 7 06:49:20 2024 by rpki-client on console-fra.rpki-client.org