Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A911678C/282315D0520011EEAA866B69C4F9AE02/9AE3D69A31ED11EFA537871BC4F9AE02.roa
File:                     9AE3D69A31ED11EFA537871BC4F9AE02.roa (raw, json)
Hash identifier:          NLAG2+hX7/iP2bhjkSZBj6P2IECcGb9YySRKnQ4sPC0=
Subject key identifier:   AA:E8:32:6C:EA:47:10:C4:28:C9:B6:B1:78:01:13:D3:BE:FD:C5:5E
Certificate issuer:       /CN=A911678C/serialNumber=93879B00E4B7FBC01260707B76D5D120F45B535B
Certificate serial:       EA
Authority key identifier: 93:87:9B:00:E4:B7:FB:C0:12:60:70:7B:76:D5:D1:20:F4:5B:53:5B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/k4ebAOS3-8ASYHB7dtXRIPRbU1s.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A911678C/282315D0520011EEAA866B69C4F9AE02/9AE3D69A31ED11EFA537871BC4F9AE02.roa
Signing time:             Sun 27 Oct 2024 04:15:21 +0000
ROA not before:           Sun 27 Oct 2024 04:15:21 +0000
ROA not after:            Tue 30 Dec 2025 00:00:00 +0000
asID:                     140042
IP address blocks:        2401:3620:2100::/44 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A911678C/282315D0520011EEAA866B69C4F9AE02/k4ebAOS3-8ASYHB7dtXRIPRbU1s.crl
                          rsync://rpki.apnic.net/member_repository/A911678C/282315D0520011EEAA866B69C4F9AE02/k4ebAOS3-8ASYHB7dtXRIPRbU1s.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/k4ebAOS3-8ASYHB7dtXRIPRbU1s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 28 Nov 2024 03:38:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 234 (0xea)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A911678C/serialNumber=93879B00E4B7FBC01260707B76D5D120F45B535B
        Validity
            Not Before: Oct 27 04:15:21 2024 GMT
            Not After : Dec 30 00:00:00 2025 GMT
        Subject: CN=671dbe59-e722
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f6:4a:6a:83:7e:ae:d4:0e:dc:bd:90:2e:fa:16:
                    f5:6e:ae:5f:8e:60:b4:01:9b:cf:68:21:a8:c3:b7:
                    58:7d:66:7c:6f:dd:c1:83:3b:5a:7c:90:86:ac:80:
                    d5:53:9d:09:e0:cf:e1:f4:88:ba:0d:29:06:e6:dd:
                    cc:bd:00:91:97:7c:ef:7d:13:d4:ed:33:e5:45:83:
                    5e:49:44:ce:4a:1b:92:71:b1:f6:30:c5:c3:23:8b:
                    6a:10:54:b2:a9:fa:8c:d7:db:bf:09:1d:b0:62:7d:
                    f6:08:75:54:08:6b:ae:69:17:01:d5:6e:21:a9:c4:
                    66:23:ba:4e:c1:56:10:5a:0f:3f:d0:13:f6:f0:dd:
                    77:bd:59:96:63:0d:57:73:5e:cd:83:2e:fc:ca:5c:
                    36:d5:8f:44:27:56:3f:af:c7:b9:b1:7c:35:9e:02:
                    01:fb:05:6f:35:86:45:0c:38:a5:f0:48:92:44:9d:
                    6a:6c:1c:da:29:4e:48:14:43:a7:1f:8e:43:f4:71:
                    12:07:73:bf:9b:fb:f4:09:67:ae:d1:7b:93:b1:bd:
                    a4:f5:9c:57:93:73:05:96:28:3b:0b:5a:df:c6:93:
                    35:8c:60:34:02:c3:4c:ea:3b:b0:07:06:34:42:f6:
                    ef:00:27:e6:d5:b4:78:aa:16:1f:f5:93:4e:4f:80:
                    b8:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AA:E8:32:6C:EA:47:10:C4:28:C9:B6:B1:78:01:13:D3:BE:FD:C5:5E
            X509v3 Authority Key Identifier:
                keyid:93:87:9B:00:E4:B7:FB:C0:12:60:70:7B:76:D5:D1:20:F4:5B:53:5B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A911678C/282315D0520011EEAA866B69C4F9AE02/k4ebAOS3-8ASYHB7dtXRIPRbU1s.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/k4ebAOS3-8ASYHB7dtXRIPRbU1s.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911678C/282315D0520011EEAA866B69C4F9AE02/9AE3D69A31ED11EFA537871BC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  2401:3620:2100::/44

    Signature Algorithm: sha256WithRSAEncryption
         93:12:58:e8:e3:b8:80:d2:cd:f2:f4:fa:73:72:5b:3b:3d:a3:
         a5:a1:08:cb:1b:5d:cb:fb:d4:22:d0:ee:95:b9:d0:57:01:a8:
         24:1a:42:9d:c6:34:2d:bb:49:70:4d:54:de:f1:b5:35:0b:a4:
         2c:93:d3:33:7c:00:ec:3d:be:d2:cb:41:6e:78:e7:e9:0c:a3:
         46:2a:b0:82:5d:30:64:51:d8:aa:86:27:18:57:ff:ed:24:4b:
         0e:e5:f0:6c:6d:28:f6:70:d1:ac:7c:08:a3:f2:75:5a:31:8e:
         f6:37:b1:f0:fa:08:5c:2d:7b:04:8e:59:7f:00:34:ed:a7:9d:
         47:fb:20:16:ca:65:57:b0:7a:82:a7:45:2d:6d:22:eb:94:88:
         14:87:0b:b8:9d:6c:7e:70:86:a7:fe:36:c9:50:00:0e:7c:cb:
         82:f0:1b:b7:b6:9e:8b:2e:e4:a5:59:ba:e1:4c:29:7f:0b:9e:
         2e:9d:c9:d0:84:b1:3d:f1:24:ce:e6:8f:e1:61:6f:8c:1c:85:
         ef:70:4c:69:55:1f:4e:25:8e:9a:b2:51:1c:eb:12:f1:b0:4f:
         4b:2b:07:28:ba:57:17:91:16:97:1a:dc:e1:0a:c9:86:3a:dc:
         d2:3f:c9:c2:c4:93:7f:3c:29:de:79:c0:e5:6c:a0:56:48:8e:
         9c:de:d6:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 05:05:53 2024 by rpki-client on console-fra.rpki-client.org