Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91DEC12/8592E4880F6611EAAF51C646C4F9AE02/9F83FF76379211EB87782474C4F9AE02.roa
File:                     9F83FF76379211EB87782474C4F9AE02.roa (raw, json)
Hash identifier:          d27MSHQNcK/RyRyY25Y+zw+yINkzZippHHhMWzl4CyQ=
Subject key identifier:   E2:F0:23:F8:A0:1B:D9:C4:D5:83:F2:8C:95:2B:B8:EA:76:58:CD:80
Certificate issuer:       /CN=A91DEC12/serialNumber=05070BF9AD930449FB3B69B8691CF20C012779B9
Certificate serial:       0AB8
Authority key identifier: 05:07:0B:F9:AD:93:04:49:FB:3B:69:B8:69:1C:F2:0C:01:27:79:B9
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BQcL-a2TBEn7O2m4aRzyDAEnebk.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91DEC12/8592E4880F6611EAAF51C646C4F9AE02/9F83FF76379211EB87782474C4F9AE02.roa
Signing time:             Mon 26 Jun 2023 20:20:01 +0000
ROA not before:           Mon 26 Jun 2023 20:20:01 +0000
ROA not after:            Tue 30 Jul 2024 00:00:00 +0000
asID:                     136555
IP address blocks:        2403:bb40::/32 maxlen: 32
                          2403:bb40::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91DEC12/8592E4880F6611EAAF51C646C4F9AE02/BQcL-a2TBEn7O2m4aRzyDAEnebk.crl
                          rsync://rpki.apnic.net/member_repository/A91DEC12/8592E4880F6611EAAF51C646C4F9AE02/BQcL-a2TBEn7O2m4aRzyDAEnebk.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BQcL-a2TBEn7O2m4aRzyDAEnebk.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 07 Jun 2024 20:19:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2744 (0xab8)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91DEC12/serialNumber=05070BF9AD930449FB3B69B8691CF20C012779B9
        Validity
            Not Before: Jun 26 20:20:01 2023 GMT
            Not After : Jul 30 00:00:00 2024 GMT
        Subject: CN=6499f2f1-cbf9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:65:93:89:4e:fb:19:38:b2:7c:d9:9a:2d:3e:
                    18:de:47:94:5c:7d:ac:70:64:b5:01:fd:e3:35:e3:
                    03:2b:52:09:d1:62:e9:88:c8:7e:9e:8d:15:79:fd:
                    02:65:07:78:56:a7:bb:b8:b3:37:5d:46:2b:3b:9d:
                    5c:5e:73:7c:90:13:9d:14:cc:55:3a:4d:ae:1a:07:
                    94:ce:f9:c6:af:b9:7c:09:27:7f:4b:86:27:00:e6:
                    31:2d:eb:41:30:b8:df:4c:bb:34:33:5d:83:f2:27:
                    d0:79:c3:a0:69:96:6a:69:ae:31:be:dc:e6:66:c0:
                    0a:30:25:50:c0:5f:db:f6:6b:15:00:e9:20:37:6e:
                    c6:e6:d0:06:26:7e:cd:78:8c:1d:d9:77:bd:9d:f2:
                    5a:90:3b:9b:b1:59:92:23:83:b2:0b:73:d8:8c:98:
                    59:b4:96:21:e0:61:d3:26:63:96:5c:f6:3c:de:cc:
                    a4:23:07:24:73:a8:d1:31:18:c5:1e:bc:55:5e:e4:
                    91:cf:f9:c4:2e:03:f1:8e:c3:01:47:2e:04:cb:f9:
                    0a:4f:d8:4c:7e:dc:c5:b8:ea:32:94:99:e5:26:3d:
                    06:29:b4:4b:c1:6b:1b:67:6e:4b:75:42:80:5c:f0:
                    3d:e1:c9:7d:b6:f0:79:d8:85:59:59:60:d5:50:82:
                    28:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E2:F0:23:F8:A0:1B:D9:C4:D5:83:F2:8C:95:2B:B8:EA:76:58:CD:80
            X509v3 Authority Key Identifier:
                keyid:05:07:0B:F9:AD:93:04:49:FB:3B:69:B8:69:1C:F2:0C:01:27:79:B9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91DEC12/8592E4880F6611EAAF51C646C4F9AE02/BQcL-a2TBEn7O2m4aRzyDAEnebk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BQcL-a2TBEn7O2m4aRzyDAEnebk.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DEC12/8592E4880F6611EAAF51C646C4F9AE02/9F83FF76379211EB87782474C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  2403:bb40::/32

    Signature Algorithm: sha256WithRSAEncryption
         54:f5:4b:e2:d8:13:0d:8a:71:d8:17:07:55:0f:07:78:e8:d6:
         2e:0d:72:bc:c0:6d:a1:88:ac:fa:a9:2e:b3:c9:89:ec:1f:b6:
         46:0f:10:34:ff:fb:65:21:2b:c8:6e:63:74:e3:c1:e9:73:c2:
         c7:e8:84:19:2a:b9:1d:4a:c6:5d:b9:7a:ab:eb:ef:fc:83:d7:
         58:9e:08:71:f0:8a:f0:3d:33:78:eb:de:ec:ff:c2:f5:52:b2:
         a9:9c:fb:ce:14:4a:15:56:78:80:40:6e:09:e0:67:15:1b:51:
         c9:d2:dc:13:56:e3:e0:35:5b:37:67:af:d0:44:3d:c8:e2:6c:
         9a:1a:59:bd:41:b4:81:4e:03:86:62:24:c1:8e:24:01:60:85:
         b7:b7:21:29:d7:0b:20:63:08:41:b6:4b:cd:c8:1d:bc:ac:39:
         ca:2e:49:b1:a4:a2:04:24:56:71:f7:61:0f:81:e2:e1:05:09:
         91:9f:a4:da:b4:c4:e9:57:12:fb:2b:11:dd:e9:f8:c8:c8:3e:
         25:63:c6:3b:c8:bd:2b:e0:df:dd:c5:18:73:a2:ed:9b:30:db:
         72:c4:82:2a:18:6f:dd:a9:8a:ac:af:8c:62:9e:26:e2:b4:b1:
         a0:0d:2a:45:58:31:be:34:b6:80:a8:85:3d:e4:8f:05:8d:60:
         f1:e4:2c:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 31 22:13:11 2024 by rpki-client on console-fra.rpki-client.org