Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/ce254099-3a28-4333-8492-a867d9ae15e2.roa
File:                     ce254099-3a28-4333-8492-a867d9ae15e2.roa (raw, json)
Hash identifier:          jA5dFT6noUb+RGw4uQ/ldOjXtX9sbu+mgxTp1Apz4V4=
Subject key identifier:   8B:A9:F5:D9:48:EE:87:0A:C4:98:12:0F:7C:3D:9F:2D:7F:A8:EE:6A
Certificate issuer:       /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37
Certificate serial:       29270F77086EA48780B54C6DA43ED810FDF1E5F6
Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/ce254099-3a28-4333-8492-a867d9ae15e2.roa
Signing time:             Fri 21 Jun 2024 00:00:00 +0000
ROA not before:           Fri 21 Jun 2024 00:00:00 +0000
ROA not after:            Fri 26 Jul 2024 23:59:59 +0000
asID:                     16509
IP address blocks:        2406:da30:a000::/40 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 29 Jun 2024 00:21:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            29:27:0f:77:08:6e:a4:87:80:b5:4c:6d:a4:3e:d8:10:fd:f1:e5:f6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37
        Validity
            Not Before: Jun 21 00:00:00 2024 GMT
            Not After : Jul 26 23:59:59 2024 GMT
        Subject: serialNumber=7d972b4ccfda0a16379771369209ab90169d0cc9db712e73c173f20aed827daf, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:64:d9:6e:fd:6e:6e:ba:dc:01:bd:fb:2d:ea:
                    81:4c:78:48:c6:fa:a1:5a:ab:75:b2:df:72:f0:ec:
                    a4:77:79:34:83:39:a7:7b:23:56:28:68:b1:0b:0d:
                    d6:dc:7b:60:68:8e:a3:ab:b9:42:3b:f9:98:4d:46:
                    5b:49:12:14:92:31:17:d0:d2:3a:bb:c1:3e:2f:6f:
                    a9:ed:d3:96:ed:0e:7b:d9:ba:ad:6f:56:05:d0:64:
                    02:52:09:86:5c:4d:0c:18:26:dd:f8:c9:90:75:80:
                    b3:b7:05:db:c4:46:10:07:08:ee:14:97:9e:ad:57:
                    e6:ea:3d:af:5f:3a:89:22:c7:bf:78:01:55:d0:22:
                    df:c5:24:7e:a6:48:b2:1d:f6:17:61:88:59:dc:c1:
                    67:b1:06:01:fb:4e:8a:55:38:20:72:e7:8d:a9:f1:
                    6c:61:6b:10:ff:20:c8:80:9e:b3:15:ea:48:f4:15:
                    f2:d0:19:2c:b7:db:cb:02:4f:6a:ab:11:58:6f:e5:
                    0f:ed:38:af:17:5d:be:ed:f9:21:81:2e:59:19:2a:
                    59:5f:83:b5:33:ae:a9:bb:b4:53:fb:af:6c:8b:55:
                    90:f0:34:b1:b4:62:ed:c5:ee:f4:b1:43:02:10:54:
                    cd:ac:8d:bb:f4:76:fc:fa:2e:6d:bb:50:0e:5e:31:
                    0f:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8B:A9:F5:D9:48:EE:87:0A:C4:98:12:0F:7C:3D:9F:2D:7F:A8:EE:6A
            X509v3 Authority Key Identifier:
                keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/ce254099-3a28-4333-8492-a867d9ae15e2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2406:da30:a000::/40

    Signature Algorithm: sha256WithRSAEncryption
         7a:7f:51:7e:1f:86:93:cb:3f:2c:19:f2:5b:2d:10:4b:72:2b:
         ac:d1:fc:9d:fe:9a:fc:d8:5a:f4:54:de:61:4a:a4:5d:87:4f:
         ce:51:fd:89:79:86:53:e3:d5:26:f1:43:e1:06:98:cd:cd:d9:
         f6:74:fa:ce:d8:da:ec:a9:df:60:b2:97:e2:6e:a9:c1:a2:98:
         86:57:7d:3d:57:2f:96:52:72:75:4f:bb:56:96:8b:1c:cd:3d:
         ba:61:df:15:c8:f3:eb:6d:93:99:8b:0d:dd:31:04:49:9d:40:
         f0:dd:58:9d:c3:de:ed:b8:f5:9e:ba:37:06:78:fc:9a:37:01:
         d9:65:18:da:0c:8e:36:5e:6b:54:52:21:f5:31:65:70:06:e5:
         17:48:e5:ed:d7:90:62:cd:10:f9:03:11:04:23:06:2e:a3:74:
         fb:5d:b4:de:b3:63:dd:b2:e0:69:17:99:db:30:ae:87:64:14:
         4b:08:9b:90:9d:98:d6:d9:f5:61:d0:96:c1:a8:85:af:0d:87:
         ae:a0:fa:46:48:92:e5:f8:52:8a:21:bc:cc:e3:bd:55:69:7d:
         3c:91:70:a6:8b:71:83:cf:f4:05:76:d8:80:37:a4:7a:ed:6a:
         c1:5c:8c:1c:60:9d:40:80:ac:97:9b:87:bd:39:20:36:dd:1e:
         60:12:21:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 25 02:50:51 2024 by rpki-client on console-fra.rpki-client.org