Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A911035A/3C609B447C6611EA8089F351C4F9AE02/E1935B7A36DD11EFB1E53717C4F9AE02.roa
File:                     E1935B7A36DD11EFB1E53717C4F9AE02.roa (raw, json)
Hash identifier:          YrfvW4rspoah4qHdMhFX6/ILs8ePWmGD5xqevIlkW/s=
Subject key identifier:   45:8F:14:FB:AD:C0:7A:E9:0A:F7:A0:17:B0:DE:35:79:88:B1:C2:A4
Certificate issuer:       /CN=A911035A/serialNumber=DC622008A8A1AD42BE2A254943491AFAA84549A5
Certificate serial:       0944
Authority key identifier: DC:62:20:08:A8:A1:AD:42:BE:2A:25:49:43:49:1A:FA:A8:45:49:A5
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3GIgCKihrUK-KiVJQ0ka-qhFSaU.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A911035A/3C609B447C6611EA8089F351C4F9AE02/E1935B7A36DD11EFB1E53717C4F9AE02.roa
Signing time:             Sun 30 Jun 2024 12:40:07 +0000
ROA not before:           Sun 30 Jun 2024 12:40:07 +0000
ROA not after:            Wed 30 Jul 2025 00:00:00 +0000
asID:                     132849
IP address blocks:        2400:6100::/33 maxlen: 33
                          2400:6100:8000::/33 maxlen: 33

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A911035A/3C609B447C6611EA8089F351C4F9AE02/3GIgCKihrUK-KiVJQ0ka-qhFSaU.crl
                          rsync://rpki.apnic.net/member_repository/A911035A/3C609B447C6611EA8089F351C4F9AE02/3GIgCKihrUK-KiVJQ0ka-qhFSaU.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3GIgCKihrUK-KiVJQ0ka-qhFSaU.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 29 Nov 2024 19:52:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2372 (0x944)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A911035A/serialNumber=DC622008A8A1AD42BE2A254943491AFAA84549A5
        Validity
            Not Before: Jun 30 12:40:07 2024 GMT
            Not After : Jul 30 00:00:00 2025 GMT
        Subject: CN=66815227-ee99
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e8:48:19:16:4e:71:b1:d3:1a:0e:b4:21:39:48:
                    3d:a7:5b:16:ea:b8:ed:0c:99:06:92:89:75:5a:31:
                    73:24:7c:67:70:52:ab:da:98:6b:92:fb:d4:6e:a3:
                    22:da:a3:03:b5:df:1f:ed:db:df:3d:81:09:4c:9a:
                    a0:e6:ee:a2:e1:39:58:6b:18:07:1a:b3:83:6f:8b:
                    c5:23:6d:1e:8e:b3:d8:88:4b:be:cf:1b:79:f8:c0:
                    b2:9e:42:b1:35:06:19:6f:43:04:ef:8c:88:43:50:
                    73:a2:1b:43:ff:28:f4:d4:a5:a0:a5:03:74:a7:02:
                    1b:6e:cb:b4:c4:d3:85:10:13:06:45:b0:8b:34:1f:
                    e6:e7:37:9f:98:5c:8f:d6:7a:22:f6:45:32:91:2e:
                    fd:f7:c2:cb:f4:48:e3:51:35:de:71:6f:81:2e:80:
                    e0:78:9b:03:0f:31:87:d6:2f:2c:d0:1c:0b:93:5f:
                    ef:61:14:04:54:68:d6:cb:fd:3f:c1:1f:c1:8c:df:
                    02:a7:f0:3d:ef:44:b9:91:12:0b:73:f5:26:33:71:
                    ed:e0:17:e3:e4:7b:a6:95:14:ae:47:43:69:43:5e:
                    4e:0c:6a:8a:98:36:9e:f7:f6:85:76:44:04:43:52:
                    c9:e1:7a:f6:2f:a9:11:dc:6e:94:a7:84:f9:cb:4b:
                    37:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                45:8F:14:FB:AD:C0:7A:E9:0A:F7:A0:17:B0:DE:35:79:88:B1:C2:A4
            X509v3 Authority Key Identifier:
                keyid:DC:62:20:08:A8:A1:AD:42:BE:2A:25:49:43:49:1A:FA:A8:45:49:A5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A911035A/3C609B447C6611EA8089F351C4F9AE02/3GIgCKihrUK-KiVJQ0ka-qhFSaU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3GIgCKihrUK-KiVJQ0ka-qhFSaU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911035A/3C609B447C6611EA8089F351C4F9AE02/E1935B7A36DD11EFB1E53717C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  2400:6100::/32

    Signature Algorithm: sha256WithRSAEncryption
         a1:93:5f:ed:47:56:79:d8:2e:f9:73:e0:61:14:7b:66:ad:5b:
         8d:8e:0f:12:a1:21:32:3e:fd:23:7a:0a:be:e3:8e:84:a1:f8:
         4c:9e:38:70:22:60:9b:97:aa:64:20:70:cb:32:ee:44:32:dc:
         73:ae:a2:6f:95:6e:73:ff:a1:6c:2f:8f:33:a7:55:f4:9d:b6:
         00:b9:24:ad:64:1b:cc:b8:71:7e:1b:7a:09:36:62:82:8c:25:
         e5:9f:a7:d1:8a:1d:eb:85:a4:e4:60:c8:2e:13:6e:ae:19:a2:
         b8:d6:b3:bc:df:6d:f2:dd:85:be:91:6d:bf:e1:41:e9:62:cd:
         96:34:89:8e:46:67:d2:83:86:7f:11:a4:31:ac:89:bc:6a:ed:
         da:5d:64:fa:98:74:2b:cf:74:1a:43:93:9e:73:bb:cc:56:24:
         97:85:53:bc:77:f8:78:fe:d1:01:ae:3c:e1:aa:a2:15:ae:1c:
         be:ba:79:3a:0f:a5:97:1b:1d:1b:04:00:83:00:c3:da:3e:b7:
         b1:8f:b0:3a:07:bb:5b:97:22:b8:2e:d8:6a:61:17:cc:f3:aa:
         3c:c7:a5:03:82:2a:64:78:12:1a:32:74:0a:cb:57:d7:6c:99:
         7e:a9:24:d1:f3:02:a9:c0:5f:5e:0a:33:05:d3:27:8a:e6:f0:
         fe:8c:e2:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 22:14:20 2024 by rpki-client on console-ams.rpki-client.org