Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/3f99746d-82f2-4c5b-b34e-101f9d258abc.roa
File:                     3f99746d-82f2-4c5b-b34e-101f9d258abc.roa (raw, json)
Hash identifier:          jnfhIny0Hp8eJYX5AiTQrs5dWXBwZwAJFHP6QBhp9pY=
Subject key identifier:   B0:0C:BD:28:7B:7C:F0:14:9C:E0:4B:36:03:A2:E1:36:0A:19:5A:9C
Certificate issuer:       /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37
Certificate serial:       0AF1BAAFC1A5E7BDD927BAE2EA6DEE1BA074E336
Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/3f99746d-82f2-4c5b-b34e-101f9d258abc.roa
Signing time:             Fri 31 May 2024 00:00:00 +0000
ROA not before:           Fri 31 May 2024 00:00:00 +0000
ROA not after:            Fri 05 Jul 2024 23:59:59 +0000
asID:                     16509
IP address blocks:        2406:daff:800::/40 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 28 Jun 2024 00:11:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0a:f1:ba:af:c1:a5:e7:bd:d9:27:ba:e2:ea:6d:ee:1b:a0:74:e3:36
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37
        Validity
            Not Before: May 31 00:00:00 2024 GMT
            Not After : Jul  5 23:59:59 2024 GMT
        Subject: serialNumber=6d31726310919fe4a0ec9f54b80cb417528125aa8ec6d0a4ee38b7b6b71ff2e0, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:7b:71:29:75:0f:c1:b8:6c:cb:56:2f:0b:2b:
                    68:61:76:fa:79:33:64:7d:36:23:e7:fd:7d:8a:56:
                    cd:0f:bc:8b:8a:f9:6f:59:a9:33:8b:b9:dd:4f:41:
                    1a:d9:03:5c:11:ab:20:bd:44:2a:d4:76:b6:49:b0:
                    b7:b1:84:d7:b6:d3:84:07:b8:16:5a:cc:3d:84:24:
                    dc:f7:dd:1a:85:a3:91:3b:2d:71:59:70:36:6f:1b:
                    14:e2:40:00:11:65:17:04:af:2c:a3:96:9f:14:a2:
                    74:a9:61:5c:52:ec:f5:82:97:c0:06:47:ef:a4:aa:
                    1b:49:34:6a:44:f2:ac:65:0b:97:08:c4:d9:77:5f:
                    02:84:97:c5:04:0b:eb:48:7b:f3:67:f0:33:f5:14:
                    57:b9:62:61:7c:f9:10:86:51:b9:61:b2:b0:91:d1:
                    b7:d4:55:d0:9e:77:a9:7a:c5:69:32:80:cc:dd:09:
                    8a:91:cd:5b:4b:12:7e:9b:e0:40:b0:96:f7:ef:4c:
                    d3:92:01:f0:bb:e6:b5:29:d3:5c:c4:4c:31:ad:25:
                    cc:7a:ef:32:18:8c:2f:c9:b8:a1:9f:40:93:d1:c2:
                    ff:22:96:7e:ff:09:8c:7d:a5:35:35:e6:23:3f:f8:
                    07:fa:6d:07:56:39:aa:63:a0:1d:f6:e0:10:11:09:
                    88:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B0:0C:BD:28:7B:7C:F0:14:9C:E0:4B:36:03:A2:E1:36:0A:19:5A:9C
            X509v3 Authority Key Identifier:
                keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/3f99746d-82f2-4c5b-b34e-101f9d258abc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2406:daff:800::/40

    Signature Algorithm: sha256WithRSAEncryption
         77:10:5e:5a:21:76:11:bd:8f:27:fd:b7:0a:86:d9:a1:2a:e3:
         bb:fe:63:75:38:c1:67:af:3a:72:1a:8f:ff:e9:24:5c:6c:8c:
         d4:50:99:7d:1e:4a:92:49:09:c0:68:f6:86:11:5a:7d:d0:e2:
         b7:c0:49:d0:40:78:3a:cf:86:1c:f6:4a:1f:0b:6d:67:e4:2e:
         a9:6a:fd:c1:99:3f:24:e6:00:1c:d1:09:5f:52:6e:db:6e:6a:
         03:86:41:c3:bb:51:ba:ad:c7:c2:e7:c7:cc:15:0d:2b:78:9b:
         02:23:a5:f0:64:a3:c7:1c:68:49:3c:6b:b2:c0:cf:ec:16:a2:
         ab:0c:fd:b0:95:a1:d6:44:00:fa:2a:eb:04:fe:3c:6d:17:22:
         d0:d6:a2:07:52:6c:2c:0d:fd:76:8e:3d:40:84:3c:c7:57:01:
         6a:b7:a1:3d:59:63:05:8f:36:89:84:41:34:af:ee:46:ef:40:
         b7:64:08:b5:85:3a:e1:5b:5f:8e:8f:00:ee:c9:6c:cd:23:f8:
         5e:82:18:92:7a:29:29:42:bf:b3:60:f5:99:f5:35:42:9c:37:
         4f:50:a8:fc:ac:fa:31:86:e2:46:97:60:20:a1:6d:9a:d4:d2:
         e3:a5:91:e9:79:70:5f:18:01:a6:c9:a7:fd:97:af:d7:5b:10:
         25:91:d7:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 24 01:28:13 2024 by rpki-client on console-ams.rpki-client.org