Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91EE03B/AF9671660B6E11EEB29BB170C4F9AE02/14C4C7D4002611EFBD462953C4F9AE02.roa
File:                     14C4C7D4002611EFBD462953C4F9AE02.roa (raw, json)
Hash identifier:          zQ0CM5U9eLYYRN8uU/ulZlkOPhQEdEt98pR9XD2Ytac=
Subject key identifier:   D0:76:DF:65:56:1C:87:EF:62:AF:68:7B:4F:FE:6B:46:DF:4B:83:2C
Certificate issuer:       /CN=A91EE03B/serialNumber=B9E60CF179F4EACBDB9492BA5F7CACF45239CCF4
Certificate serial:       C1
Authority key identifier: B9:E6:0C:F1:79:F4:EA:CB:DB:94:92:BA:5F:7C:AC:F4:52:39:CC:F4
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ueYM8Xn06svblJK6X3ys9FI5zPQ.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91EE03B/AF9671660B6E11EEB29BB170C4F9AE02/14C4C7D4002611EFBD462953C4F9AE02.roa
Signing time:             Sun 21 Apr 2024 21:28:23 +0000
ROA not before:           Sun 21 Apr 2024 21:28:23 +0000
ROA not after:            Mon 30 Sep 2024 00:00:00 +0000
asID:                     216183
IP address blocks:        2401:b60:19::/48 maxlen: 48
                          2401:b60:20::/48 maxlen: 48
                          2401:b60:21::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91EE03B/AF9671660B6E11EEB29BB170C4F9AE02/ueYM8Xn06svblJK6X3ys9FI5zPQ.crl
                          rsync://rpki.apnic.net/member_repository/A91EE03B/AF9671660B6E11EEB29BB170C4F9AE02/ueYM8Xn06svblJK6X3ys9FI5zPQ.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ueYM8Xn06svblJK6X3ys9FI5zPQ.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 20 Jun 2024 06:25:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 193 (0xc1)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91EE03B/serialNumber=B9E60CF179F4EACBDB9492BA5F7CACF45239CCF4
        Validity
            Not Before: Apr 21 21:28:23 2024 GMT
            Not After : Sep 30 00:00:00 2024 GMT
        Subject: CN=662584f7-056b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:0c:a0:27:41:b6:e9:dd:38:5f:d0:3d:e6:23:
                    04:21:b7:f0:d5:b7:95:1b:cd:dd:f6:42:3e:fc:e5:
                    e7:03:18:38:79:3c:81:cf:05:98:6c:53:81:de:bb:
                    66:71:01:4c:3e:ff:89:9b:e7:2d:ae:af:b9:36:19:
                    18:60:53:09:1c:c3:4e:bb:a2:59:50:54:e9:6e:f8:
                    cc:0e:03:89:49:ad:d0:c0:0f:6a:da:bf:b7:57:9d:
                    10:5d:4d:80:d3:d9:67:eb:c9:0a:50:db:95:e4:bd:
                    17:2e:9e:08:e0:b5:5e:93:3d:ce:f3:3c:9d:43:4e:
                    42:99:ce:d0:79:73:0a:15:bd:8f:13:4a:cd:ca:88:
                    76:be:4f:af:88:a1:30:81:8b:a2:eb:58:93:ec:9c:
                    70:78:fb:42:e1:73:36:42:d0:d5:2f:1e:57:b7:dd:
                    3a:0e:78:63:b0:57:5f:4b:a4:cd:38:41:5a:42:24:
                    de:53:40:0e:bd:ce:67:cb:19:48:51:17:2a:df:97:
                    a2:36:e3:f9:5f:11:95:de:9d:97:02:fa:f5:ef:86:
                    c2:a0:5c:c2:b3:ef:a8:19:07:0a:96:7f:35:fa:56:
                    64:05:73:c1:fb:03:cf:dd:2c:b4:b4:bf:a8:b6:95:
                    b9:b4:3a:56:63:c2:98:d7:14:bc:cd:6d:87:b9:af:
                    f2:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D0:76:DF:65:56:1C:87:EF:62:AF:68:7B:4F:FE:6B:46:DF:4B:83:2C
            X509v3 Authority Key Identifier:
                keyid:B9:E6:0C:F1:79:F4:EA:CB:DB:94:92:BA:5F:7C:AC:F4:52:39:CC:F4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91EE03B/AF9671660B6E11EEB29BB170C4F9AE02/ueYM8Xn06svblJK6X3ys9FI5zPQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ueYM8Xn06svblJK6X3ys9FI5zPQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EE03B/AF9671660B6E11EEB29BB170C4F9AE02/14C4C7D4002611EFBD462953C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  2401:b60:19::/48
                  2401:b60:20::/47

    Signature Algorithm: sha256WithRSAEncryption
         26:cf:51:84:11:76:8f:da:7b:09:86:07:86:32:c7:27:e2:36:
         03:d5:9d:6f:b9:1b:be:14:90:02:8e:17:b8:ae:a0:5a:ae:dd:
         23:1a:88:84:97:3f:e6:cb:90:04:0d:e0:5a:de:16:62:8b:21:
         11:22:09:33:14:cf:09:ac:38:ec:0b:9b:58:1f:a9:27:63:52:
         2e:8b:91:5e:1e:08:e5:67:e5:3d:75:1f:78:21:96:28:63:ff:
         33:7f:60:6f:76:d1:9c:01:11:20:4d:2f:bc:63:5f:9d:42:c0:
         7a:be:d3:94:a0:56:71:c5:92:99:61:4a:0d:37:7b:a9:c0:00:
         82:60:bd:44:13:1f:4e:9f:1c:34:81:cd:b4:2c:01:6c:6b:19:
         d2:5d:19:12:26:62:8b:e6:15:47:4a:e4:27:75:52:6a:98:a6:
         30:49:dd:65:bc:73:e7:35:a9:00:35:55:37:1c:af:14:e9:07:
         4c:18:c8:63:fb:45:03:df:38:8a:d8:cf:38:29:32:08:55:d3:
         85:77:b2:4a:a9:0a:61:e5:a9:f0:0b:14:c2:76:59:85:bc:d8:
         07:e1:dc:f3:93:22:8c:c3:7e:7e:58:68:e5:57:52:6b:05:f1:
         8d:88:84:03:4e:ba:d2:3b:35:82:f6:0b:ee:39:f4:57:f3:37:
         a2:5f:10:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 13 08:02:35 2024 by rpki-client on console-ams.rpki-client.org