Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9111318/DC7451F21D9111E298E746F408B02CD2/AACC7DA6340411E9A22CD05CC4F9AE02.roa
File:                     AACC7DA6340411E9A22CD05CC4F9AE02.roa (raw, json)
Hash identifier:          zPg/veNSM9NpaN8wqkV0llSP6OYyTKyNu/8JDD/n/7c=
Subject key identifier:   9D:34:D6:94:73:A7:95:E6:0D:34:5A:B9:63:2E:06:F0:DA:E9:AB:54
Certificate issuer:       /CN=A9111318/serialNumber=806ABFF463594CAA30DE70A311AE2F849189BC64
Certificate serial:       33C5
Authority key identifier: 80:6A:BF:F4:63:59:4C:AA:30:DE:70:A3:11:AE:2F:84:91:89:BC:64
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gGq_9GNZTKow3nCjEa4vhJGJvGQ.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9111318/DC7451F21D9111E298E746F408B02CD2/AACC7DA6340411E9A22CD05CC4F9AE02.roa
Signing time:             Thu 22 Jun 2023 15:10:47 +0000
ROA not before:           Thu 22 Jun 2023 15:10:47 +0000
ROA not after:            Sat 31 Aug 2024 00:00:00 +0000
asID:                     55747
IP address blocks:        2404:138:1303::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9111318/DC7451F21D9111E298E746F408B02CD2/gGq_9GNZTKow3nCjEa4vhJGJvGQ.crl
                          rsync://rpki.apnic.net/member_repository/A9111318/DC7451F21D9111E298E746F408B02CD2/gGq_9GNZTKow3nCjEa4vhJGJvGQ.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gGq_9GNZTKow3nCjEa4vhJGJvGQ.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 27 May 2024 14:49:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 13253 (0x33c5)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9111318/serialNumber=806ABFF463594CAA30DE70A311AE2F849189BC64
        Validity
            Not Before: Jun 22 15:10:47 2023 GMT
            Not After : Aug 31 00:00:00 2024 GMT
        Subject: CN=64946476-295e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:99:c3:cf:86:da:da:b5:d7:cb:ad:f8:2f:58:
                    5e:31:4b:ef:e0:60:2d:8a:46:cb:bc:d0:c4:93:e7:
                    27:97:17:94:25:57:6b:da:22:da:4c:63:db:7d:4d:
                    e1:52:c8:4b:04:ab:b7:71:17:3e:37:1f:c0:c6:9c:
                    e6:7f:e6:b2:99:b5:76:1a:99:b1:db:85:de:62:c7:
                    09:7d:36:ce:fd:28:38:87:23:99:a4:78:00:e2:f6:
                    5c:d2:cc:76:1c:23:70:fd:f4:06:90:c4:55:d2:70:
                    ff:40:3b:ee:4b:15:38:e8:5d:0c:4e:ff:c2:f0:b3:
                    d7:c6:aa:4d:71:07:1c:51:a5:86:5e:fe:87:08:f2:
                    69:a4:39:62:c8:8b:47:bc:c2:eb:09:a0:30:10:bc:
                    99:d6:f2:21:06:83:bc:5d:42:3d:50:10:8f:35:93:
                    49:f7:60:a5:95:a8:ca:d3:e1:2c:6e:bd:4a:e8:fe:
                    11:b6:23:29:85:d9:26:46:7f:78:1a:0e:b5:dc:21:
                    1f:e9:be:e9:78:21:fa:4d:3a:5a:fe:ee:44:8f:7a:
                    07:62:b7:f6:b8:3f:85:62:28:79:40:83:99:5c:19:
                    3f:ca:ba:bc:4a:2d:61:16:bb:54:4e:95:6a:58:95:
                    70:57:62:fd:a6:4b:42:0b:ee:af:0e:32:0e:fc:cd:
                    21:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9D:34:D6:94:73:A7:95:E6:0D:34:5A:B9:63:2E:06:F0:DA:E9:AB:54
            X509v3 Authority Key Identifier:
                keyid:80:6A:BF:F4:63:59:4C:AA:30:DE:70:A3:11:AE:2F:84:91:89:BC:64

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9111318/DC7451F21D9111E298E746F408B02CD2/gGq_9GNZTKow3nCjEa4vhJGJvGQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gGq_9GNZTKow3nCjEa4vhJGJvGQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9111318/DC7451F21D9111E298E746F408B02CD2/AACC7DA6340411E9A22CD05CC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  2404:138:1303::/48

    Signature Algorithm: sha256WithRSAEncryption
         ac:a4:34:7e:1a:62:73:99:30:c2:57:a7:70:c2:cc:db:3e:f8:
         4f:d2:bb:31:c3:75:2b:04:73:14:75:fd:1c:57:97:c9:43:34:
         fd:50:9c:ff:69:03:74:28:e5:4f:90:b7:e3:4a:ee:03:2d:57:
         6e:45:bd:54:d1:6b:e5:43:8f:cd:20:13:36:b6:a4:5d:65:b7:
         ae:50:2c:9a:b9:a4:81:c5:ff:c6:7e:cc:25:10:f3:fe:86:53:
         66:b6:7d:a3:0e:fa:26:9a:2a:21:97:1c:b7:df:7b:b9:90:2d:
         be:c4:77:ed:18:9e:2d:23:85:8a:de:4d:52:f1:23:ec:07:b9:
         8b:14:c2:1b:96:38:b5:42:a9:d3:7a:d1:c0:52:5b:74:8f:f6:
         78:a4:f3:45:e6:07:76:6a:76:b4:48:e0:a8:8e:70:3d:25:97:
         01:41:55:59:bd:fc:8f:99:ab:40:5c:c0:50:d5:93:71:da:d2:
         6d:17:bb:9a:63:2d:4a:16:1c:d5:1a:53:04:96:74:b3:37:ab:
         a2:9f:0f:0e:aa:b2:ff:7e:ac:77:6c:ee:1d:7b:33:f5:f5:7f:
         9d:e1:95:be:f8:0f:69:d6:03:4e:d7:9e:5f:84:b8:61:6d:b0:
         d2:40:cb:2c:53:86:23:e0:3e:a8:b5:45:74:d9:c8:1b:b1:74:
         a2:54:07:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 20 17:22:03 2024 by rpki-client on console-fra.rpki-client.org