Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91EF547/626E109498C711EC86A00949C4F9AE02/636B090C609A11EDAAF70C26C4F9AE02.roa
File:                     636B090C609A11EDAAF70C26C4F9AE02.roa (raw, json)
Hash identifier:          KwB5Za6c44Sp6WKsELOvklwRL+/LDv/rBqGOUWdpNrM=
Subject key identifier:   C9:3B:5F:D6:68:8D:E3:92:93:43:8F:2C:9A:1C:85:2F:93:BF:85:AB
Certificate issuer:       /CN=A91EF547/serialNumber=A683632546F1A10784BC1A4FF6FA0BBE6CEC2D4E
Certificate serial:       0340
Authority key identifier: A6:83:63:25:46:F1:A1:07:84:BC:1A:4F:F6:FA:0B:BE:6C:EC:2D:4E
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/poNjJUbxoQeEvBpP9voLvmzsLU4.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91EF547/626E109498C711EC86A00949C4F9AE02/636B090C609A11EDAAF70C26C4F9AE02.roa
Signing time:             Sun 03 Nov 2024 00:53:34 +0000
ROA not before:           Sun 03 Nov 2024 00:53:34 +0000
ROA not after:            Tue 30 Dec 2025 00:00:00 +0000
asID:                     147067
IP address blocks:        2001:df7:b180::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91EF547/626E109498C711EC86A00949C4F9AE02/poNjJUbxoQeEvBpP9voLvmzsLU4.crl
                          rsync://rpki.apnic.net/member_repository/A91EF547/626E109498C711EC86A00949C4F9AE02/poNjJUbxoQeEvBpP9voLvmzsLU4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/poNjJUbxoQeEvBpP9voLvmzsLU4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 29 Nov 2024 20:43:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 832 (0x340)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91EF547/serialNumber=A683632546F1A10784BC1A4FF6FA0BBE6CEC2D4E
        Validity
            Not Before: Nov  3 00:53:34 2024 GMT
            Not After : Dec 30 00:00:00 2025 GMT
        Subject: CN=6726c98e-239c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:4c:46:9d:4d:cb:84:e0:12:46:72:f7:eb:4d:
                    cc:e7:f1:b6:5e:5b:ae:bf:48:e4:b5:64:9c:e7:83:
                    48:84:22:72:84:ad:7b:78:80:d2:cb:03:95:b4:b6:
                    89:5a:3b:7f:9d:ff:bc:7e:83:e5:48:e3:4f:49:98:
                    04:26:71:b0:4d:f2:56:33:09:f4:54:d6:67:de:61:
                    a8:a8:29:75:20:73:59:e9:c6:92:69:7c:87:7b:6b:
                    04:38:c9:eb:dd:43:e4:85:99:59:84:98:63:dd:5b:
                    05:38:9e:ea:dd:d6:db:04:18:44:a8:a8:d9:90:73:
                    a7:7e:ed:59:a6:a0:da:10:cb:1b:26:1b:28:8f:1f:
                    d9:2e:b4:2a:ff:a1:9f:eb:c7:62:c5:c1:22:b9:c3:
                    a1:71:94:24:3a:bb:8b:0d:d1:cc:f0:e1:35:35:d0:
                    d5:18:2e:ad:fe:ad:fc:dc:e7:d7:73:7d:1a:a3:58:
                    19:15:b1:81:26:63:ac:d8:5d:16:5e:88:5e:09:95:
                    0d:68:0d:76:9e:d5:f7:05:f6:24:1d:0a:67:da:be:
                    a7:91:21:29:2b:fc:5a:34:77:7d:26:cd:d0:91:91:
                    b2:47:d9:52:f0:15:75:3a:a3:38:f9:bb:4e:6d:3a:
                    f2:8a:64:8d:c5:65:52:ac:27:cb:86:e0:f3:04:72:
                    26:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C9:3B:5F:D6:68:8D:E3:92:93:43:8F:2C:9A:1C:85:2F:93:BF:85:AB
            X509v3 Authority Key Identifier:
                keyid:A6:83:63:25:46:F1:A1:07:84:BC:1A:4F:F6:FA:0B:BE:6C:EC:2D:4E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91EF547/626E109498C711EC86A00949C4F9AE02/poNjJUbxoQeEvBpP9voLvmzsLU4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/poNjJUbxoQeEvBpP9voLvmzsLU4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EF547/626E109498C711EC86A00949C4F9AE02/636B090C609A11EDAAF70C26C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:df7:b180::/48

    Signature Algorithm: sha256WithRSAEncryption
         5c:07:cb:14:60:b4:2f:4e:ee:2e:ca:6f:74:86:63:df:71:14:
         13:e6:95:ae:29:9c:eb:58:29:9b:12:a1:16:14:52:1d:1f:a2:
         60:d1:34:59:a2:8c:79:20:b2:23:e7:c1:55:dd:a7:bc:55:7b:
         6a:2c:2f:2f:f2:a5:f2:89:0f:3a:68:76:50:e2:ae:41:96:80:
         0d:09:b6:1d:89:82:1c:79:ca:23:2f:ed:ab:e6:d1:19:81:56:
         f4:0d:a2:3f:77:ee:bd:78:93:65:b4:8f:75:3c:3f:32:45:a5:
         10:04:dd:05:1f:59:73:aa:21:5e:8c:22:0b:9e:b9:a8:a8:94:
         34:43:e3:38:a0:90:be:31:e4:2b:ec:71:a3:d8:8f:2b:ff:df:
         7c:54:68:eb:04:aa:08:da:1f:86:59:b9:56:a0:81:0c:25:6f:
         92:56:67:b5:6b:f0:53:a2:b6:bf:57:19:5b:f3:17:b1:49:ee:
         02:51:0d:2e:d8:96:64:b9:cf:bf:d6:b5:cc:a4:2a:04:56:95:
         e6:12:22:d9:47:e7:0a:50:30:c2:8f:a8:b8:ef:88:64:f2:dc:
         52:ca:d4:71:17:aa:b6:bd:5c:5e:c9:00:43:df:93:db:c3:5c:
         8f:3b:90:16:8a:ac:5b:02:b3:74:c7:ce:39:7a:12:7b:9d:4d:
         7d:06:ca:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 02:33:50 2024 by rpki-client on console-fra.rpki-client.org