Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/b34c7d97-b54b-48f8-bd90-2fd749965607.roa
File:                     b34c7d97-b54b-48f8-bd90-2fd749965607.roa (raw, json)
Hash identifier:          fD33GfDG9MN3d1D/ScUt4kBVCdNdQ3VU2lcNYVOBOUo=
Subject key identifier:   09:82:67:43:84:D1:4D:A3:17:04:59:7B:9A:18:21:90:93:DA:0E:6D
Certificate issuer:       /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37
Certificate serial:       21C1F6D3880ACDD710AA58DE0AE020E983432E8D
Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/b34c7d97-b54b-48f8-bd90-2fd749965607.roa
Signing time:             Tue 16 Jul 2024 00:00:00 +0000
ROA not before:           Tue 16 Jul 2024 00:00:00 +0000
ROA not after:            Tue 20 Aug 2024 23:59:59 +0000
asID:                     16509
IP address blocks:        2406:dafc:9000::/40 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 22 Jul 2024 00:10:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            21:c1:f6:d3:88:0a:cd:d7:10:aa:58:de:0a:e0:20:e9:83:43:2e:8d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37
        Validity
            Not Before: Jul 16 00:00:00 2024 GMT
            Not After : Aug 20 23:59:59 2024 GMT
        Subject: serialNumber=a9d8a879d9be003d655522fb9579819f5d6a3218d03d5e17c22e323ded12a43a, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:b0:8d:04:42:a9:e7:69:aa:e6:91:7d:27:96:
                    4e:80:b2:ea:b4:0d:36:32:d7:f8:25:24:86:dc:93:
                    0e:38:5b:ba:4f:b1:f6:1b:dd:e5:f4:4f:c5:69:1d:
                    b7:06:91:4c:a8:5e:1b:25:98:e5:a8:8a:3e:fb:6c:
                    7e:47:bf:31:cf:10:31:bc:d7:f6:87:74:bd:3a:1d:
                    57:36:f2:7e:db:e3:e6:24:07:45:e5:d3:57:6c:72:
                    d2:3b:c8:58:d5:30:9f:19:1d:e8:a3:04:b8:44:72:
                    c8:9d:fa:67:40:a8:75:a0:0a:1a:a5:61:a4:b3:bd:
                    68:ed:c2:50:ee:12:ca:a1:72:ad:a1:03:e0:0c:47:
                    07:f5:8c:00:dd:b5:95:0e:9e:c7:2e:ed:1f:19:49:
                    f4:ae:e3:7b:1d:2e:9b:14:05:2d:0e:0a:ac:63:ee:
                    90:74:22:8f:84:d4:df:59:a1:47:e2:00:3a:a0:de:
                    2d:69:d6:4d:e4:37:2a:6c:1f:ae:99:1d:c3:4a:a1:
                    d2:67:ff:4f:17:f6:da:de:dd:f9:22:15:7b:77:55:
                    07:c1:ba:7e:24:64:45:60:86:da:c4:aa:86:4c:d8:
                    76:89:e8:85:e3:f0:3a:46:39:e7:cc:b2:0d:46:43:
                    06:c5:eb:90:4b:7d:fe:36:0f:44:eb:94:18:26:94:
                    e5:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                09:82:67:43:84:D1:4D:A3:17:04:59:7B:9A:18:21:90:93:DA:0E:6D
            X509v3 Authority Key Identifier:
                keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/b34c7d97-b54b-48f8-bd90-2fd749965607.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2406:dafc:9000::/40

    Signature Algorithm: sha256WithRSAEncryption
         2e:d3:90:b4:ff:04:80:cc:3a:17:43:40:ba:06:19:be:cb:d4:
         a4:2f:f3:1a:66:ff:6b:a9:a8:7f:1d:a5:b8:46:54:58:2c:17:
         07:2c:d9:01:28:45:d5:3f:f4:a4:05:53:4e:73:bb:ee:43:a9:
         36:08:c4:20:9e:25:98:a1:65:ce:4d:09:c5:9d:9a:4d:bf:1d:
         c1:bd:ef:5e:b2:9d:22:27:f4:89:8b:ff:dd:9b:27:ff:8d:62:
         5d:77:32:fa:1b:fd:70:d8:4e:b4:66:dd:2a:73:b9:ca:22:49:
         bd:89:4e:6d:be:94:75:5c:01:d3:ac:3e:2f:c5:eb:99:64:c1:
         d8:62:4b:25:e1:44:46:29:e1:30:be:57:66:d3:fe:aa:01:20:
         bf:1b:69:ab:72:8c:f6:da:75:2a:83:9b:46:62:3b:3e:d5:fe:
         18:b4:f9:28:05:fe:53:cb:e2:a2:0c:b5:6b:9c:04:9b:45:e0:
         b0:fe:ee:2f:9b:05:f6:2f:9a:16:f5:00:f7:c9:cf:6d:61:2f:
         ae:3a:51:93:a8:2e:2e:28:87:1f:f7:72:68:bd:62:0b:e8:2f:
         1b:05:fc:38:08:5c:a4:21:10:40:b6:5c:b6:61:03:2b:e1:ac:
         dc:f0:21:07:ff:28:4d:11:c7:cf:40:2d:15:25:73:d7:6d:cd:
         5d:8e:b4:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 18 02:11:49 2024 by rpki-client on console-fra.rpki-client.org