Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/96128b18-ab6a-4022-b474-5230bdada633.roa
File:                     96128b18-ab6a-4022-b474-5230bdada633.roa (raw, json)
Hash identifier:          EHBCdVU9l0joYahLCnNtd1AQibFnWJgSvQdRJYTaYog=
Subject key identifier:   68:D3:3F:3B:D9:E6:81:E7:E7:87:A7:44:45:4B:8F:58:E2:03:EE:31
Certificate issuer:       /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37
Certificate serial:       3329B06D596D5EF594730A1458E4EB04A4C16A82
Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/96128b18-ab6a-4022-b474-5230bdada633.roa
Signing time:             Wed 29 May 2024 00:00:00 +0000
ROA not before:           Wed 29 May 2024 00:00:00 +0000
ROA not after:            Wed 03 Jul 2024 23:59:59 +0000
asID:                     16509
IP address blocks:        2406:da10:8000::/36 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 19 Jun 2024 00:00:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            33:29:b0:6d:59:6d:5e:f5:94:73:0a:14:58:e4:eb:04:a4:c1:6a:82
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37
        Validity
            Not Before: May 29 00:00:00 2024 GMT
            Not After : Jul  3 23:59:59 2024 GMT
        Subject: serialNumber=6fc262e408e87816613bf0d42d4b417ce14ebd3548c27800a860126566f50838, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e3:94:fa:b2:d8:0e:3e:a9:63:e1:8e:4b:b8:2d:
                    72:ee:8d:3a:41:12:64:69:98:66:0c:fc:82:8e:76:
                    c7:ef:fe:00:95:8b:bc:90:60:f5:5e:49:19:99:7f:
                    d9:98:f7:89:a0:1e:51:63:06:cd:72:fb:c1:f7:77:
                    3d:2c:17:58:87:44:c4:63:aa:da:39:ca:62:a9:d9:
                    3f:d7:b2:6f:f9:54:f8:13:af:ba:54:98:1d:62:fb:
                    e0:12:ba:58:bc:c4:da:b9:b8:65:09:0b:8b:d8:17:
                    61:62:37:68:d1:c2:5a:6a:ee:2a:11:3a:20:2f:2a:
                    4f:5b:51:b7:cb:10:0b:c9:62:fe:62:3a:01:3b:5c:
                    3e:95:4d:46:9d:7a:0c:6a:43:70:fb:03:f1:48:90:
                    a7:59:c7:77:e6:cb:dc:c4:40:39:c4:aa:24:26:03:
                    bb:96:63:49:1a:af:db:bf:80:22:00:3a:e9:a7:32:
                    9e:fa:10:1b:af:2d:a6:59:79:44:3d:6c:d7:23:92:
                    9f:2a:40:a2:ca:ba:43:50:27:66:ed:3e:8a:12:b8:
                    13:dc:db:08:b0:51:90:ca:4f:99:ce:f8:10:fa:de:
                    a0:e4:18:71:35:b9:b9:07:28:6e:fa:cf:4c:d5:4d:
                    ce:40:8e:61:8c:6a:b8:af:b4:a7:be:a1:23:67:25:
                    73:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                68:D3:3F:3B:D9:E6:81:E7:E7:87:A7:44:45:4B:8F:58:E2:03:EE:31
            X509v3 Authority Key Identifier:
                keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/96128b18-ab6a-4022-b474-5230bdada633.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2406:da10:8000::/36

    Signature Algorithm: sha256WithRSAEncryption
         45:c4:c1:3d:13:97:c1:b3:b5:a9:e9:a4:d0:09:fb:6b:39:5d:
         69:fd:17:db:12:76:c5:23:35:2d:e2:af:ec:51:e1:98:ad:74:
         62:76:a6:b5:ae:3f:6d:68:03:d5:e6:63:cd:d2:1c:5e:0b:37:
         30:3f:fa:13:75:19:1f:c5:a8:f0:52:c5:ff:bb:95:37:2b:76:
         38:aa:85:8b:fe:8d:7b:c9:f6:46:93:a4:a5:7e:97:fa:5a:eb:
         5c:c3:ba:88:7a:d5:70:28:0a:31:5d:03:17:b5:38:c1:88:bd:
         78:a8:2d:de:fb:8d:42:4e:1e:d4:d1:70:5e:fb:bf:6d:b4:25:
         4b:e2:e2:ab:93:68:c7:d7:e3:12:13:cd:50:95:d2:9f:69:6a:
         06:25:dc:b7:d7:a5:d5:1e:fc:19:65:6b:34:28:a8:8f:a1:50:
         82:d2:29:1c:5a:ac:10:13:45:49:ed:41:36:ed:5a:dc:e9:95:
         04:dc:39:c4:97:e5:d4:96:fd:4f:91:13:8f:0d:7d:13:40:04:
         91:5d:5d:f5:e9:27:38:a6:f2:2d:7f:69:67:46:9c:1e:7e:45:
         22:41:18:9d:a2:13:fc:95:a8:fa:d5:cf:50:63:0a:92:36:ad:
         31:19:df:34:d1:bc:22:7f:67:68:ce:c9:a1:d7:04:4e:8d:16:
         fb:ce:b2:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 15 02:42:06 2024 by rpki-client on console-ams.rpki-client.org