Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/bfcb3f38-8ca3-4fd9-af9a-4c38d6cadf0b.roa
File:                     bfcb3f38-8ca3-4fd9-af9a-4c38d6cadf0b.roa (raw, json)
Hash identifier:          epOwqpsP1J3Xo1eiS+T50OvXA+QJiUf7EUQggk94Bm8=
Subject key identifier:   53:44:CF:1D:1B:40:25:D2:53:1C:EF:24:8C:25:84:CF:20:57:27:DA
Certificate issuer:       /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37
Certificate serial:       6B9BF6F9E96D47651DC095583B9A8386F87D1688
Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/bfcb3f38-8ca3-4fd9-af9a-4c38d6cadf0b.roa
Signing time:             Tue 29 Oct 2024 00:00:00 +0000
ROA not before:           Tue 29 Oct 2024 00:00:00 +0000
ROA not after:            Tue 03 Dec 2024 23:59:59 +0000
asID:                     16509
IP address blocks:        2406:daf0:f000::/40 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 26 Nov 2024 00:27:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6b:9b:f6:f9:e9:6d:47:65:1d:c0:95:58:3b:9a:83:86:f8:7d:16:88
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37
        Validity
            Not Before: Oct 29 00:00:00 2024 GMT
            Not After : Dec  3 23:59:59 2024 GMT
        Subject: serialNumber=c86b22e9873e408855a43499d1cd1038d59ebe8f163cc7608b8e340a07e93273, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:96:95:03:de:ef:b6:57:e6:0e:fb:de:18:60:
                    7e:21:d5:7e:cc:a9:d5:8f:b2:48:93:b6:9b:6c:1b:
                    21:62:b1:cf:51:25:d3:89:5c:26:ec:2a:85:ac:53:
                    36:77:41:f6:98:c3:62:aa:d7:3d:e7:3a:a4:cd:be:
                    94:54:80:82:31:22:2a:e3:56:93:42:f3:63:49:28:
                    bb:9f:24:dc:27:cf:32:78:c8:da:d8:2c:c1:0c:a5:
                    74:d6:0e:2a:c8:3b:3a:42:c2:e6:fd:ff:da:ca:c8:
                    9c:e2:bf:cc:a7:45:eb:2f:dd:5d:30:61:0a:4c:21:
                    b6:a4:0d:3c:ea:2b:37:68:1c:f5:66:2c:6b:27:32:
                    a1:b2:73:d0:b7:1d:a8:c7:c8:72:9a:c0:27:fc:da:
                    d1:92:99:47:57:28:13:22:9e:b5:7a:be:77:a2:bb:
                    f0:b8:8f:2a:88:c7:82:35:78:02:36:50:87:ab:46:
                    d7:0f:04:31:de:85:d7:6d:37:97:12:f8:c1:9a:27:
                    be:c6:3c:f7:54:3c:18:e0:c3:51:ac:e8:cf:62:3d:
                    e5:9c:99:87:71:e8:df:e9:3e:b2:55:97:d3:f6:bf:
                    88:e9:e1:bb:91:70:69:ca:7e:ca:0f:15:f3:27:ec:
                    86:de:7d:22:24:db:f0:15:da:81:c8:6d:cd:e7:4a:
                    2b:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                53:44:CF:1D:1B:40:25:D2:53:1C:EF:24:8C:25:84:CF:20:57:27:DA
            X509v3 Authority Key Identifier:
                keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/bfcb3f38-8ca3-4fd9-af9a-4c38d6cadf0b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2406:daf0:f000::/40

    Signature Algorithm: sha256WithRSAEncryption
         b9:17:a2:fe:39:e2:7f:07:8c:77:1a:1c:2f:3f:fe:d8:d3:d4:
         07:17:8b:2e:8a:63:38:2c:63:76:04:ab:d0:9f:4d:75:4c:0e:
         84:0c:60:73:52:fb:2c:cc:78:f6:65:ae:09:50:b7:55:8d:4f:
         b8:90:4d:94:df:32:b0:43:77:6b:0b:2c:4d:94:93:26:03:b3:
         0a:a7:7b:8f:87:15:25:0f:18:03:aa:44:ff:a2:e8:3b:f4:52:
         d9:5d:4f:24:3d:9e:a5:40:fb:aa:bb:cd:63:76:70:1a:61:1b:
         02:bd:be:54:a3:6a:fa:a7:ff:dc:4d:2a:57:fc:2f:82:39:55:
         9b:0a:90:34:51:37:07:9a:fd:a7:8d:38:a9:f5:da:d5:56:0d:
         51:16:ce:d1:89:31:59:74:cb:85:22:ff:00:77:65:0c:b6:f1:
         c3:46:85:a6:e8:af:41:15:c6:46:ef:90:72:c6:c4:bc:26:9d:
         41:78:25:99:b2:c0:1f:d7:bd:f5:ba:cb:e6:84:56:42:0e:13:
         59:04:0c:00:59:c4:6e:d8:24:38:0c:02:39:80:06:ae:03:64:
         e5:01:c7:30:52:ab:82:49:80:cd:43:ee:ab:09:78:9b:5b:b0:
         38:e0:5e:00:2f:fa:93:b2:62:da:9d:23:6f:f5:4f:9f:37:81:
         92:b5:21:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 02:07:36 2024 by rpki-client on console-fra.rpki-client.org