Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/1f704d7c-8714-47ad-ab1e-df728b87b2a4.roa
File:                     1f704d7c-8714-47ad-ab1e-df728b87b2a4.roa (raw, json)
Hash identifier:          4gYqufZ7zdFZfeW6Ri21VWYR1UIImUQC9SZWVdFiCAU=
Subject key identifier:   08:AE:B1:00:61:94:BF:73:DA:EB:0F:8A:BE:70:07:AF:58:E4:D4:6D
Certificate issuer:       /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37
Certificate serial:       1D29ADCA2EA184B9B2764A05908DF1310BDFC258
Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/1f704d7c-8714-47ad-ab1e-df728b87b2a4.roa
Signing time:             Tue 16 Jul 2024 00:00:00 +0000
ROA not before:           Tue 16 Jul 2024 00:00:00 +0000
ROA not after:            Tue 20 Aug 2024 23:59:59 +0000
asID:                     16509
IP address blocks:        2406:daf8:7000::/40 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 22 Jul 2024 00:10:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1d:29:ad:ca:2e:a1:84:b9:b2:76:4a:05:90:8d:f1:31:0b:df:c2:58
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37
        Validity
            Not Before: Jul 16 00:00:00 2024 GMT
            Not After : Aug 20 23:59:59 2024 GMT
        Subject: serialNumber=35cb39e7fb458b2d302dbf9267c40af2bb0c8e0adfe5cd11fe4483f808ee4316, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:87:6d:a9:8e:56:8c:d8:82:97:64:18:b4:b0:
                    96:8d:52:20:dd:3e:48:b5:73:d9:90:21:ef:05:a2:
                    cc:eb:07:e9:9c:b9:4e:45:ea:36:02:28:16:61:01:
                    4b:e0:27:f0:19:5d:31:0c:34:ff:e0:60:d4:30:b8:
                    9c:02:72:e2:0c:48:0b:77:47:6a:5c:f1:a2:e6:c3:
                    dc:4e:85:5a:6b:64:fa:79:1b:9d:e4:d4:3a:7e:7c:
                    e8:6d:d2:90:3a:6c:c8:48:78:97:4b:06:c6:3d:2f:
                    c3:10:c6:d3:0a:56:6f:b4:88:b1:cd:21:12:94:6e:
                    98:2b:ab:4d:fd:42:59:b3:0b:a5:64:13:a2:f1:f4:
                    4d:83:1e:3d:c6:90:55:31:c8:32:2c:f3:6f:b5:37:
                    80:14:df:a3:69:c3:5b:a5:63:59:e8:e7:dd:ef:46:
                    a5:ad:af:47:27:15:a5:f1:e1:9a:de:f9:29:04:df:
                    c8:ae:59:0e:47:c7:d6:fd:ad:78:81:8b:ef:eb:80:
                    cd:99:95:ac:36:ef:1a:86:23:a4:51:26:b1:a4:38:
                    cb:37:c9:62:05:2c:e0:ae:83:f0:01:15:30:10:b6:
                    ed:a7:d2:92:b6:a2:4a:9d:ce:30:2a:bf:5a:60:6f:
                    12:81:f6:3d:d3:52:17:af:af:79:59:0b:7a:75:73:
                    be:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                08:AE:B1:00:61:94:BF:73:DA:EB:0F:8A:BE:70:07:AF:58:E4:D4:6D
            X509v3 Authority Key Identifier:
                keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/1f704d7c-8714-47ad-ab1e-df728b87b2a4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2406:daf8:7000::/40

    Signature Algorithm: sha256WithRSAEncryption
         01:e6:58:08:4b:ea:17:df:db:63:ff:c8:1f:38:73:89:a7:3a:
         b6:b9:90:8a:88:8b:65:c6:89:67:f7:44:d7:f1:39:82:36:45:
         a9:71:e9:3f:e6:08:d8:fd:7f:5e:53:73:84:80:a2:cd:37:5a:
         99:61:30:fe:e0:f9:32:ef:5e:f9:28:f6:29:ae:51:e5:b8:2c:
         00:8b:d0:38:e0:aa:c7:79:ef:c9:91:cf:4a:69:49:fd:65:50:
         a8:d4:cd:9a:81:73:63:c0:5a:31:c1:1b:0b:20:11:2f:c9:12:
         8a:2b:21:2b:62:ee:1f:24:a3:20:37:bf:38:fe:91:11:f8:2d:
         f9:bd:0f:f4:5f:ae:0e:0b:3b:c0:bb:f0:0c:64:fc:31:43:a3:
         36:17:ee:af:cc:f6:18:67:8b:19:3e:f1:89:7d:ca:58:41:ef:
         2d:44:b5:5a:43:0a:11:f1:ce:28:ff:b9:14:81:ab:5d:05:8d:
         bc:90:75:e5:de:67:da:c7:f7:9c:b0:59:9e:1c:9e:14:53:78:
         5e:d8:0b:8c:9a:f0:2a:4b:e5:ff:6f:03:53:40:df:1b:a2:e5:
         9f:38:61:e0:61:74:dd:24:33:db:8a:ba:6d:e1:80:a1:a7:b8:
         e5:d3:74:8d:0c:26:88:8f:68:35:63:99:10:fb:75:6e:f6:c2:
         b9:51:69:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 18 01:56:53 2024 by rpki-client on console-ams.rpki-client.org