Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/33cd86c2-840e-4af2-8465-28f983d0d4cc.roa
File:                     33cd86c2-840e-4af2-8465-28f983d0d4cc.roa (raw, json)
Hash identifier:          +O5kdEYnMVnWcOYfQ9SPMJY8ElCUCyuTC3oQqrIC9q4=
Subject key identifier:   26:89:AD:65:2E:52:F4:C1:ED:5F:31:B3:98:A6:44:79:E8:17:DB:65
Certificate issuer:       /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37
Certificate serial:       4D406A8EEDA082B329B340535D50C647EA2FC97F
Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/33cd86c2-840e-4af2-8465-28f983d0d4cc.roa
Signing time:             Sat 16 Mar 2024 00:00:00 +0000
ROA not before:           Sat 16 Mar 2024 00:00:00 +0000
ROA not after:            Sat 20 Apr 2024 23:59:59 +0000
asID:                     16509
IP address blocks:        2406:da60:4000::/40 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 29 Mar 2024 12:02:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4d:40:6a:8e:ed:a0:82:b3:29:b3:40:53:5d:50:c6:47:ea:2f:c9:7f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37
        Validity
            Not Before: Mar 16 00:00:00 2024 GMT
            Not After : Apr 20 23:59:59 2024 GMT
        Subject: serialNumber=8745c711abc3382469f1420f6aaa6a645097790ac18bb4b3a610bf7adeb08d13, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:18:1e:a7:e4:a8:ec:92:98:e0:f0:1c:59:a3:
                    15:5e:7a:7f:8b:77:c0:2a:08:9c:24:6b:06:58:2b:
                    83:a9:24:07:d1:e4:b5:eb:7c:15:41:ce:8f:e1:46:
                    2c:64:6e:e6:93:6c:44:6c:71:f2:23:2e:fa:0a:b0:
                    76:21:b2:1b:a6:a5:d2:35:aa:1a:ed:c1:d1:b3:0f:
                    18:73:cd:fa:3f:4a:bc:67:ea:6d:fb:c1:97:ce:7a:
                    e5:a3:80:2e:3c:89:c2:c6:b3:de:97:84:f4:21:d7:
                    2e:19:7c:f6:46:15:0b:e8:a0:b8:5f:43:98:b4:d7:
                    54:26:77:d7:e9:26:ec:a8:be:9d:b6:20:9c:fc:cd:
                    d0:75:c4:d6:8b:34:9b:30:0e:37:1c:e3:81:81:aa:
                    5d:32:dd:b8:15:9b:cd:4e:43:52:ce:43:38:d9:4d:
                    69:00:a4:c3:e1:ff:ce:d9:8e:2d:e8:fc:01:65:ed:
                    8d:f8:ce:55:77:3d:4f:eb:2c:d0:82:1a:8f:77:16:
                    d9:a2:ac:f2:ab:25:c5:81:da:16:9e:e6:08:b9:24:
                    fb:ba:d1:86:5a:ee:e0:e5:25:ff:b9:a4:bd:33:87:
                    9b:f5:da:d1:cb:14:45:f4:d3:26:1c:3e:be:53:6e:
                    c7:4b:78:ca:53:d8:a9:3f:42:63:08:48:c5:b2:c6:
                    23:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                26:89:AD:65:2E:52:F4:C1:ED:5F:31:B3:98:A6:44:79:E8:17:DB:65
            X509v3 Authority Key Identifier:
                keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/33cd86c2-840e-4af2-8465-28f983d0d4cc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2406:da60:4000::/40

    Signature Algorithm: sha256WithRSAEncryption
         72:b6:99:75:69:58:46:a9:1a:8b:14:a8:a3:45:90:22:88:8f:
         89:1b:d4:f2:88:7e:e0:ff:f1:b8:75:e2:c3:23:4e:a3:98:97:
         70:a3:8d:7e:9e:3f:0e:3b:07:39:d7:73:cc:22:54:89:51:ef:
         9d:5f:49:ec:21:3d:dd:c1:66:64:9e:b4:cb:5b:05:3b:cd:2b:
         88:2e:72:0a:08:51:a6:c7:10:63:87:98:3c:6c:32:60:e8:d7:
         ed:fa:5e:80:1b:35:e3:58:20:54:9a:75:85:f8:9d:c5:de:8f:
         05:e1:46:38:71:f7:97:16:47:23:72:d7:7c:89:17:7a:08:18:
         4d:be:1c:04:a1:b6:21:04:07:94:fa:90:65:b8:8f:66:ad:86:
         a7:1d:f8:5f:82:a9:99:ae:14:ab:d4:c5:c2:e8:3c:36:82:fc:
         36:6d:c8:47:04:bf:13:47:52:b9:4f:e9:09:af:5e:6b:17:f4:
         c2:d0:75:fe:cb:0d:dd:9b:f7:91:71:44:ff:08:71:88:c1:ee:
         8b:ed:4c:3d:a5:48:81:b2:30:09:62:29:30:46:ff:da:ea:13:
         c6:f0:98:60:71:7b:4b:e9:f5:60:f4:e0:85:59:e6:b1:ce:10:
         9c:f3:be:02:63:25:5a:75:0f:bc:20:92:1d:6d:79:fc:ad:0b:
         89:cb:5c:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 28 02:05:04 2024 by rpki-client on console-ams.rpki-client.org