Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/fdea3492-45a8-4925-b3dd-cc14f0279c75.roa
File:                     fdea3492-45a8-4925-b3dd-cc14f0279c75.roa (raw, json)
Hash identifier:          xJ68mbCsaFgBZdE4xJHJWhsSKu59eXAZ3pYQquBRLlI=
Subject key identifier:   6B:8F:34:EA:F3:21:B9:6F:FF:6B:9A:49:00:C9:52:75:78:A6:31:9A
Certificate issuer:       /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37
Certificate serial:       58B6AF04AA29BE998062D9C10B2B81D3F081C318
Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/fdea3492-45a8-4925-b3dd-cc14f0279c75.roa
Signing time:             Fri 07 Jun 2024 00:00:00 +0000
ROA not before:           Fri 07 Jun 2024 00:00:00 +0000
ROA not after:            Fri 12 Jul 2024 23:59:59 +0000
asID:                     16509
IP address blocks:        2406:dafb:8800::/40 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 24 Jun 2024 00:01:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            58:b6:af:04:aa:29:be:99:80:62:d9:c1:0b:2b:81:d3:f0:81:c3:18
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37
        Validity
            Not Before: Jun  7 00:00:00 2024 GMT
            Not After : Jul 12 23:59:59 2024 GMT
        Subject: serialNumber=a15fee969bcc8d4957d9508e8315f9b0d414a8865ecd3d1e6a339117fc285679, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:d9:84:34:9c:64:1e:5d:16:b6:f2:bd:ae:6c:
                    1d:37:58:1a:7e:2d:da:e7:5e:41:40:e3:98:36:0c:
                    b8:6e:78:ee:41:90:e9:2f:d9:90:0e:ab:de:be:a7:
                    57:14:8a:c2:84:52:46:e4:8d:ae:e5:00:f0:50:74:
                    fa:25:d8:d4:70:e1:d2:cf:38:f5:92:24:78:a1:51:
                    64:d4:f6:88:9d:f0:99:3b:4f:f2:17:1c:26:76:eb:
                    f6:62:86:3b:f0:1a:c5:a8:57:a9:c3:8e:d9:ee:0e:
                    e6:6a:ab:b3:02:c7:90:76:c7:42:2f:5a:38:28:32:
                    5d:59:4a:60:4f:2e:de:fb:0d:73:e0:cb:7e:c2:5b:
                    85:35:ef:72:fb:c8:27:d0:cc:4e:51:cf:23:3a:6f:
                    cd:43:2f:71:4f:9b:5e:b3:fa:a2:04:af:f1:ba:9a:
                    16:67:33:27:3c:d1:1e:2f:49:33:33:6e:71:05:8a:
                    91:ca:38:ef:91:eb:90:01:4a:45:52:ce:93:42:88:
                    29:24:39:22:4f:b8:19:1c:d3:da:9c:c6:a1:a8:ab:
                    82:34:ff:9d:e5:a4:61:0e:69:48:a3:84:6c:0d:26:
                    95:24:55:30:5e:8d:3c:ae:e9:6c:b9:7f:1e:2d:32:
                    16:2f:9b:78:93:a8:89:f5:bc:00:e0:24:82:04:7f:
                    dc:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6B:8F:34:EA:F3:21:B9:6F:FF:6B:9A:49:00:C9:52:75:78:A6:31:9A
            X509v3 Authority Key Identifier:
                keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/fdea3492-45a8-4925-b3dd-cc14f0279c75.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2406:dafb:8800::/40

    Signature Algorithm: sha256WithRSAEncryption
         cb:04:d5:fb:36:75:07:8d:d1:72:61:ca:67:49:1f:d7:34:bd:
         a8:dd:7a:58:91:6d:d7:88:ce:94:c6:39:1b:63:38:83:af:6b:
         6b:c8:40:49:28:4d:18:38:73:2b:f9:6b:2b:95:12:19:08:53:
         d0:4b:68:5f:b0:70:c9:c8:3f:d1:e8:b7:2b:eb:f8:a3:b9:01:
         ea:a9:d4:7d:b8:d2:0a:7d:5d:dc:e1:4a:31:a2:a6:5d:d4:2d:
         7e:ae:48:bb:29:5e:87:b2:3a:29:94:df:4d:f5:31:eb:9c:c7:
         8c:1d:03:31:a7:cc:44:38:94:11:ec:fe:d3:22:c8:87:2c:92:
         e7:c2:94:35:71:4f:b1:d9:60:99:bc:c1:d3:9a:a7:70:8a:4f:
         70:40:b4:ed:97:44:52:47:dd:8b:07:b3:40:a5:29:28:cd:d6:
         c0:e0:d5:58:ce:75:2d:a5:a2:ae:35:8b:58:1c:31:42:b6:aa:
         23:86:ea:26:4c:38:41:9a:9a:31:81:b5:9f:61:0a:58:85:94:
         51:a7:aa:bc:5a:2d:92:fe:25:65:0d:a9:fc:2d:65:1a:73:56:
         ca:25:ec:40:74:05:5e:1e:d1:e8:5b:b2:3a:0a:91:e6:c1:c4:
         af:f4:0a:fc:5e:c6:aa:67:20:18:f0:9e:20:e9:0e:cd:76:ec:
         7c:92:9e:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 20 01:11:16 2024 by rpki-client on console-fra.rpki-client.org